---
title: "Actions held for a person"
method: GET
path: "/approvals"
---

# Actions held for a person

`GET /approvals`

## Request

- Base URL: `https://secureai.one/v1`
- URL: `https://secureai.one/v1/approvals`
- Auth: HTTP bearer

## Query parameters

- `status` 'pending' | 'approved' | 'denied' | 'expired'
- `limit` integer

## Response `200`

Newest first, with expiry applied — nothing is shown as pending that can no longer be approved.

- object
  - `approvals` Approval[]
    - `id` string, required
    - `createdAt` integer, required
    - `expiresAt` integer, required
    - `status` 'pending' | 'approved' | 'denied' | 'expired', required
    - `agent` string, nullable
    - `tool` string, required
    - `keyId` string, required
    - `findings` Finding[], required
      - `kind` 'secret' | 'card' | 'iban' | 'ssn' | 'govid' | 'email' | 'phone' | 'address' | 'postcode' | 'name' | 'host', required
      - `path` string, required: Dotted path into the action, e.g. "body.customer.email". Empty when the input was a bare string.
      - `decision` 'allow' | 'redact' | 'approve' | 'block', required
    - `decidedBy` string
    - `decidedAt` integer
    - `note` string

## Other responses

- `401`: Missing or invalid credentials.

---

[API](https://skmtc.dev/secureai/apis/secure-ai.md) · [All operations](https://skmtc.dev/secureai/apis/secure-ai/llms.txt) · [OpenAPI document](https://skmtc.dev/secureai/apis/secure-ai/revisions/6eefd7f53f8b?raw)