---
title: "Decide Agent Operator Approval"
method: POST
path: "/agent/operators/{operator}/approvals/{task_id}/decide"
tags: ["Agents"]
---

# Decide Agent Operator Approval

`POST /agent/operators/{operator}/approvals/{task_id}/decide`

## Request

- Base URL: `https://be.graph8.com/api/v1`
- URL: `https://be.graph8.com/api/v1/agent/operators/{operator}/approvals/{task_id}/decide`
- Auth: HTTP bearer

Approve or reject a fix this operator proposed.

`approved` RUNS THE FIX: the operator executes its proposed remediation
against your data, then records the result. `rejected` records the
decision and runs nothing. Needs OPERATOR_MANAGE, the same governance gate
as the trust dials, because this authorises execution.

A task that is not an open approval for this operator is a 404.

## Path parameters

- `operator` string, required
- `task_id` string, required: The approval task id.

## Headers

- `Authorization` string, nullable
- `X-Target-Org-Id` string, nullable

## Request body

- OperatorApprovalDecisionRequest: Mirror of `ApprovalDecision`. `resolution` is closed to the two values the app accepts. The app answers anything else with a 400 after lower-casing it; closing it here makes a bad value a 422 that names the valid ones.
  - `resolution` 'approved' | 'rejected', required: `approved` EXECUTES the finding's proposed fix against your data; `rejected` records the decision and executes nothing.
  - `params` object, nullable: Values a fix needs that the operator could not decide for you, e.g. `{"target_user": "<user id>"}`. Omit for a fully-specified fix. A value the fix refuses is a 400 naming the field, and the task stays open.

## Response `200`

Successful Response

- ApiResponseOperatorPayload
  - `data` OperatorPayload, required: An open envelope for one operator answer. Open because an operator's health snapshot, scorecard and catalog are per-operator documents whose shape follows what that operator monitors - the revenue operator reports different checks from the deliverability one, and both grow. On an OVERSIGHT surface a dropped field reads as "nothing to worry about" rather than "we did not tell you", which is the failure mode worth designing against.
  - `pagination` PaginationMeta
    - `page` integer, required: Current page number (1-indexed)
    - `limit` integer, required: Items per page
    - `total` integer, required: Total number of items
    - `has_next` boolean, required: Whether there are more pages
    - `next_cursor` string, nullable: Opaque cursor for the next page; null when there are no more items. Pass it back as the `cursor` query param to fetch the following page without computing page numbers.
    - `total_available` integer, nullable: Search endpoints only: how many records really match, when known. Can be larger than `total`, which is capped at the 10,000 results that can be paged. For company search this is a distinct-company estimate. Null when unknown; absent outside search.
    - `total_is_lower_bound` boolean, nullable: Search endpoints only: true when more records match than `total` shows (the result set is larger than the 10,000 results that can be paged). Absent outside search.
    - `notes` string[], nullable: Search endpoints only: plain-language notes about the result, e.g. that more records match than can be paged, or that a reversed `between` range was put in order.

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/graph8/apis/graph8-developer-api.md) · [All operations](https://skmtc.dev/graph8/apis/graph8-developer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/graph8/apis/graph8-developer-api/revisions/2e7cfa0ca921?raw)