---
title: "Create or update tenant auto-approval rules"
method: PUT
path: "/approvals/rules"
tags: ["Approvals"]
---

# Create or update tenant auto-approval rules

`PUT /approvals/rules`

Requires an owner/admin browser session with recent MFA. Tenant API keys and agent tokens cannot review or mutate manual approvals. Rule writes are audited before persistence and rolled back if the final audit write fails.

## Headers

- `X-Steward-Request-Timestamp` string
- `X-Steward-Request-Expires-At` string
- `X-Steward-Signature` string
- `X-Steward-Signing-Key-Id` string
- `Idempotency-Key` string

## Request body

- object
  - `maxAmountWei` string
  - `autoDenyAfterHours` number, nullable
  - `escalateAboveWei` string, nullable
  - `enabled` boolean

## Response `200`

JSON response

- object
  - `ok` true, required
  - `data` object, required
    - `id` string
    - `tenantId` string, required
    - `maxAmountWei` string, required
    - `autoDenyAfterHours` number, nullable
    - `escalateAboveWei` string, nullable
    - `enabled` boolean, required
    - `createdAt` string, date-time
    - `updatedAt` string, date-time

## Other responses

- `201` — JSON response
- `400` — JSON response
- `401` — JSON response
- `403` — JSON response
- `404` — JSON response
- `408` — JSON response
- `409` — JSON response

## Changes

- **2026-08-17** `261a7c8070b2` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/steward-fi/apis/steward-api/changes/approvals/rules/put.md)

---

[API](https://skmtc.dev/steward-fi/apis/steward-api.md) · [All operations](https://skmtc.dev/steward-fi/apis/steward-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/steward-fi/steward-api/revisions/b88b4b97a664/schema)