---
title: "Bulk-approve invoices"
method: POST
path: "/invoices/bulk-approve"
tags: ["invoices"]
---

# Bulk-approve invoices

`POST /invoices/bulk-approve`

Submits multiple invoices for asynchronous approval. Returns a `batch_id` for polling progress via `GET /v1/batch/{batch_id}/progress` and retrieving per-invoice results via `GET /v1/batch/{batch_id}/results`.

## Headers

- `Authorization` string, required
- `X-Api-Key` string, required
- `X-API-Version` string
- `Idempotency-Key` string

## Request body

- object
  - `invoice_ids` string[], required — Invoice IDs to approve (max 100 per request)
  - `force_approve` boolean — Force-approve regardless of policy state (requires elevated permission; default false)

## Response `202`

Batch accepted for asynchronous processing

- InvoicesPostInvoicesBulkApproveResponse202 — Empty response body

## Other responses

- `400` — Bad request - Invalid parameters or request format
- `401` — Unauthorized - Authentication required or invalid credentials
- `403` — Forbidden - Access denied or insufficient permissions

## Changes

- **2026-08-22** `75aab60eedc9` — 2 breaking, 1 warning
  - for the `header` request parameter `Idempotency-Key`, the minLength was increased from `0` to `1`
  - added the pattern `^[A-Za-z0-9._\-+=/]{1,128}$` to the `header` request parameter `Idempotency-Key`
  - for the `header` request parameter `Idempotency-Key`, the maxLength was set to `128`
- **2026-08-19** `c0b5cf6c7a72` — 1 info
  - endpoint added
- **2026-08-17** `c231509a03cf` — 1 breaking
  - api path removed without deprecation
- **2026-08-13** `1f089f3e34d9` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/ottimate/apis/api-reference/changes/invoices/bulk-approve/post.md)

---

[API](https://skmtc.dev/ottimate/apis/api-reference.md) · [All operations](https://skmtc.dev/ottimate/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/ottimate/api-reference/revisions/ba91ff4c6969/schema)