---
title: "Manage a Hive administration operation found by list_workspace_operations. Requires the connected owner or admin, the operation’s own granted scope and a separate approval inside Hive for the exact change. The AI cannot approve itself. Requires an OAuth connection."
method: POST
path: "/api/v1/tools/admin_workspace_operation"
---

# Manage a Hive administration operation found by list_workspace_operations. Requires the connected owner or admin, the operation’s own granted scope and a separate approval inside Hive for the exact change. The AI cannot approve itself. Requires an OAuth connection.

`POST /api/v1/tools/admin_workspace_operation`

## Request

- Base URL: `https://hivepublish.com`
- URL: `https://hivepublish.com/api/v1/tools/admin_workspace_operation`
- Auth: HTTP bearer

This reaches real people, so the person is asked before it runs. Their own AI client asks them. When the connection was made with Hive approvals switched on, the first call returns a single-use Hive approval link instead of acting, and the exact request is repeated with approvalToken and an Idempotency-Key once they approve it inside Hive.

## Headers

- `Idempotency-Key` string

## Request body

- object
  - `operation` string, required: An exact operation id returned by list_workspace_operations.
  - `path` object: The named record ids required by this operation.
  - `query` object: Only the query fields listed for this operation.
  - `body` object: Only the editable fields listed for this operation. Hive checks the same rules as its screen.
  - `approvalToken` string: Single-use token returned by Hive after the owner approves this exact action.

## Response `200`

Tool result or approval challenge

- union
  - ToolResult
    - `data` unknown, required
    - `meta` object, required
      - `tool` string
      - `workspaceId` string, uuid
  - ApprovalChallengeResponse
    - `data` ApprovalChallenge, required
      - `confirmationRequired` unknown, required
      - `challengeId` string, uuid, required
      - `approvalToken` string, required: Secret, single-use token. Retry only after the human approves approvalUrl.
      - `approvalUrl` string, uri, required
      - `expiresAt` string, date-time, required
      - `warning` string
    - `meta` object, required

## Other responses

- `400`: Invalid input
- `401`: Missing or invalid credential
- `403`: Missing workspace scope, role permission, or plan entitlement
- `409`: Idempotency conflict, replay, or request still in progress
- `429`: Rate limit exceeded

---

[API](https://skmtc.dev/hivepublish/apis/hive-developer-api.md) · [All operations](https://skmtc.dev/hivepublish/apis/hive-developer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hivepublish/apis/hive-developer-api/revisions/b440c763583e?raw)