---
title: "Waiting Requests"
method: GET
path: "/agent-keys/requests/waiting"
tags: ["agent-keys"]
---

# Waiting Requests

`GET /agent-keys/requests/waiting`

## Request

- Base URL: `https://app.zeno-works.ch` (the document declares no server; this is the origin it was published from)
- URL: `https://app.zeno-works.ch/agent-keys/requests/waiting`
- Auth: none declared

What `/connect` shows a signed-in visitor. **Read-only, and scoped to their address.**

This replaces the typed-code lookup. A person who opens `/connect`, reads what is being
asked and closes the tab has consented to nothing, so rendering must not be a state
change.

**The scope is the whole control surface here**, and it is deliberately the address on
the session user's own account rather than "every pending request": an unbound pairing
row is attributable to nobody, so an unscoped list would show — and let anyone approve —
a stranger's request. `approve_pairing` re-asserts the same address under its row lock,
because a control this query enforces is a control one direct API call removes.

`pending_count` is carried alongside for the reason SP-21 introduced it: *three* waiting
reads as suspicious where one reads as routine, and that signal cannot work if it is
never rendered.

## Headers

- `authorization` string, nullable

## Cookies

- `access_token` string, nullable

## Response `200`

Successful Response

- PairingWaitingListOut: Everything waiting on this address, plus what is already approved and uncollected. Both counts are shown for the same reason the typed-code page showed one: *three* pending reads as suspicious where one reads as routine, and that signal cannot work if it is never rendered.
  - `requests` PairingWaitingOut[], required
    - `request_id` string, required
    - `client_name` string, required
    - `requested_purpose` string, nullable
    - `created_at` string, date-time, required
    - `expires_at` string, date-time, required
  - `pending_count` integer, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/zeno-works/apis/zeno-api.md) · [All operations](https://skmtc.dev/zeno-works/apis/zeno-api/llms.txt) · [OpenAPI document](https://skmtc.dev/zeno-works/apis/zeno-api/revisions/1eb93dde146c?raw)