---
title: "GET /v1/access-requests"
method: GET
path: "/v1/access-requests"
---

# GET /v1/access-requests

`GET /v1/access-requests`

## Request

- The document declares no server URL.
- Auth: one of:
  - HTTP bearer
  - API key in cookie `__Secure-better-auth.session_token`

This organisation's access requests, newest first.

## Query parameters

- `status` 'pending' | 'approved' | 'declined'

## Response `200`

The request has succeeded.

- AccessRequest[]
  - `id` string, required
  - `principalId` string, required
  - `mailboxId` string, required
  - `capabilities` string[], required: What was ASKED for. The grant carries what was approved, which may be less.
  - `reason` string, nullable, required
  - `status` 'pending' | 'approved' | 'declined', required
  - `requestedAt` string, date-time, required
  - `decidedAt` string, date-time, nullable, required
  - `decidedBy` string, nullable, required: Who answered. Null while pending; the audit trail once decided.

## Other responses

- `default`: An unexpected error response.

---

[API](https://skmtc.dev/foundermail/apis/org.md) - [All operations](https://skmtc.dev/foundermail/apis/org/llms.txt) - [OpenAPI document](https://skmtc.dev/foundermail/apis/org/revisions/8bbb36e378ab?raw)