List HITL approval requests

Comma-separated status filter (e.g. pending or pending,approved)

Comma-separated severity filter

Narrow the listing to one request_type.

Default behaviour without it (#3408): the listing is the ACTIONABLE queue and EXCLUDES wcp_step_gate entries. Those mirror a Workflow Control Plane step gate whose approval is resolved on the workflow plane (POST /api/v1/workflows/{workflow_id}/steps/{step_id}/approve); approving one here changes a status and releases nothing, so leaving them in rendered one workflow gate as two rows in the portal's merged Approvals queue and double-counted it in the sidebar badge. They are retained as the EU AI Act Article 14 oversight record and are returned by asking for them explicitly: ?request_type=wcp_step_gate.

meta.total follows the same predicate as the returned rows, so a client that renders a badge from it and a page from data cannot disagree.

OAuth2-style Basic authentication header. Format: Basic base64(clientId:clientSecret)

• clientId: Your organization identifier (required)
• clientSecret: Authentication credential (optional for community mode)

Not required when DEPLOYMENT_MODE=community.