---
title: "GET /v1/workspaces/{workspaceId}/audience/approvals"
method: GET
path: "/v1/workspaces/{workspaceId}/audience/approvals"
---

# GET /v1/workspaces/{workspaceId}/audience/approvals

`GET /v1/workspaces/{workspaceId}/audience/approvals`

## Request

- Base URL: `https://api.bangermail.com`
- URL: `https://api.bangermail.com/v1/workspaces/{workspaceId}/audience/approvals`
- Auth: HTTP bearer

## Query parameters

- `status` 'pending' | 'approved' | 'rejected' | 'cancelled' | 'expired' | 'undecided'

## Response `200`

Canonical read-back or idempotent receipt. Provider acceptance is sent; delivered requires a delivery event and does not prove inbox placement.

- object
  - `data` ApprovalEvidence[], required
    - `id` string, uuid, required
    - `requested_by_actor_id` string, required
    - `action_kind` string, required
    - `summary` string, required
    - `capability_scopes` string[], required
    - `resource_scope` object, required
    - `payload` object, required
    - `payload_sha256` string, required
    - `status` 'pending' | 'approved' | 'rejected' | 'cancelled' | 'expired', required
    - `missed` boolean, required
    - `expires_at` string, date-time, required
    - `qa_automation` object, nullable: Server-recorded dedicated QA automation provenance; never evidence of a human payload review. The run and global authorization are rechecked at execution.
      - `kind` 'dedicated_qa_automation'
      - `authorization_reference` string
      - `run_id` string
      - `operation_key` string
      - `recipients` string[]
      - `approval_sha256` string
      - `resource_sha256` string
    - `decided_by_actor_id` string, nullable
    - `decision_reason` string, nullable
    - `created_at` string, date-time, required
    - `updated_at` string, date-time, required
    - `decided_at` string, date-time, nullable
    - `execution_job_id` string, uuid
    - `review` object
      - `disposition` 'automatic' | 'human_required', required
      - `recipient_count` integer, nullable, required
      - `reasons` string[], required
      - `checks` string[], required
    - `approval_id` string, uuid, required
    - `broadcast_id` string, uuid, nullable, required
    - `import_id` string, uuid, nullable, required
    - `blockers` object[], required
      - `code` string, required
      - `message` string, required
    - `executions` object[], required
      - `id` string, uuid, required
      - `status` string, required
      - `result` object, required
      - `error_code` string, nullable, required
    - `execution_job_ids` string[], required
    - `execution_status` 'completed' | 'failed' | 'queued' | 'awaiting_review' | 'not_queued', required
    - `human_review_url` string, nullable, required
    - `human_review_instruction` string, nullable, required

## Other responses

- `400`: Invalid input or missing operating product.
- `403`: Existing OAuth scope or product boundary denied.
- `409`: Stale version or idempotency conflict.
- `422`: Consent, suppression, personalization, or readiness blocker.

---

[API](https://skmtc.dev/bangermail/apis/banger-api.md) · [All operations](https://skmtc.dev/bangermail/apis/banger-api/llms.txt) · [OpenAPI document](https://skmtc.dev/bangermail/apis/banger-api/revisions/a149909267f9?raw)