---
title: "Read a pending agent authorization, for the consent screen"
method: GET
path: "/agent/consent-request/{id}"
tags: ["Agents"]
---

# Read a pending agent authorization, for the consent screen

`GET /agent/consent-request/{id}`

## Request

- Base URL: `https://api.customdomain.ai/v1`
- URL: `https://api.customdomain.ai/v1/agent/consent-request/{id}`
- Auth: none required

What the console shows a signed in owner before they approve an agent: the client's name, where its authorization code would go (`redirect_host`), whether that destination is a known assistant's own (`verified`, `verified_as`) or the person's own computer (`local`), whether the name imitates a brand it does not belong to (`imitates`; such a request cannot be approved), how the client identified itself, and the scopes asked for. The unguessable request id is the capability: it needs no other credential and reveals only this.

## Path parameters

- `id` string, required

## Response `200`

The pending request

- AgentConsentRequest
  - `client_id` string, required
  - `client_name` string, required
  - `redirect_uri` string, required: Where the authorization code goes if the person approves.
  - `scopes` AgentScope[], required: What the agent asked for.
  - `state` string: The agent's own state value, echoed back to it.
  - `redirect_host` string, required: The host of `redirect_uri`. The client cannot choose it freely the way it chooses its name, so show it.
  - `verified` boolean, required: True when `redirect_host` is a known assistant's own callback host or a loopback address, and the name imitates no brand.
  - `verified_as` string: The known assistant `redirect_host` belongs to.
  - `local` boolean, required: True when the code goes to a program on the approver's own computer (a loopback redirect).
  - `imitates` string: The brand the name claims without owning the redirect host. Such a request cannot be approved.
  - `registration` 'dynamic' | 'metadata_document', required: How the client identified itself, by RFC 7591 registration or by a Client ID Metadata Document.
  - `registered_at` string, date-time: When a dynamically registered client registered.
  - `client_id_host` string: The host that publishes a metadata document client's document.

## Other responses

- `404`: Error envelope: {code, title, details}.
- `503`: Error envelope: {code, title, details}.

---

[API](https://skmtc.dev/customdomain/apis/customdomain-control-plane-api.md) · [All operations](https://skmtc.dev/customdomain/apis/customdomain-control-plane-api/llms.txt) · [OpenAPI document](https://skmtc.dev/customdomain/apis/customdomain-control-plane-api/revisions/34d89cb7a7cd?raw)