Skip to content

List pending resource requests (approver-facing)

GET
/admin/requests

Returns the pending resource_request rows, oldest first. Requires share.grant capability OR system.admin. Per-approver capability scoping (filtering by which team the approver actually controls) is a polish-phase follow-up.

limit
integer
default: 50 >= 1 <= 200
offset
integer
0

Pending requests

object
items
required
Array<object>

A resource_request row. The state machine is pending → granted / denied (admin decision); granted → expired (CapabilitySweeper cascade). Terminal states admit no further transitions.

object
id
required
string format: uuid
requester_user_ref
required
integer format: int64
target_asset_id
required
string format: uuid
requested_capability
required
string
reason
string
state
required
string
Allowed values: pending granted denied expired
decided_at
string format: date-time
nullable
decided_by_user_ref
integer format: int64
nullable
decision_reason
string
expires_at

On granted requests, the linked grant’s auto-expiry. Null means permanent.

string format: date-time
nullable
requested_at
required
string format: date-time
total
required

Total pending count (badge value).

integer format: int64

Authentication required, missing, or invalid

object
error
required

Human-readable error summary

string
Example
the request could not be completed
Example
{
"error": "authentication required: sign in and retry with a valid session or API token"
}

Authenticated but missing required capabilities

object
error
required

Human-readable error summary

string
Example
the request could not be completed