Approve an access request, which creates the grant.

post/v1/access-requests/{id}/approve

Request

  • The document declares no server URL.
  • Auth: one of:
    • HTTP bearer
    • API key in cookie __Secure-better-auth.session_token

Path parameters

idstring required

Request body

capabilitiesstring[]

What is actually granted. Omitted approves exactly what was asked for.

⚠️ Asking is not getting — the same rule the consent screen runs on. A narrower list here is the decision, and the request keeps the original ask for the audit trail.

Response

The request has succeeded.

idstring required
principalIdstring required
mailboxIdstring required
capabilitiesstring[] required

What was ASKED for. The grant carries what was approved, which may be less.

reasonstring nullable required
status'pending' | 'approved' | 'declined' required
requestedAtstring date-time required
decidedAtstring date-time nullable required
decidedBystring nullable required

Who answered. Null while pending; the audit trail once decided.

Changes

No recorded changes to this operation across all 1 revision of this API.