/v1/mgmt/agentic/governance/requests/createAuthorization
Descope Project ID and Management Key Project ID:Management Key as bearer token.
In: header
Request Body
application/json
The user the request is raised for, and their display name.
The name for the agent client.
The type of agent client requested.
The OAuth grant types requested: authCode, clientCredentials, jwtBearer or ciba.
The resources and connections the client asks to reach.
The requester's reason for the request.
Create an Agentic Governance Suite access request to provision an agent client on behalf of a developer, using a valid management key. When auto-approval is on and the current policies already permit the request, it is approved and the client provisioned immediately. Requires the Agentic Governance Suite in the company license, and fails while the suite is disabled.
curl -X POST "https://api.descope.com/v1/mgmt/agentic/governance/requests/create" \ -H "Content-Type: application/json" \ -d '{}'{ "id": "string", "requestorUserId": "string", "requestorName": "string", "clientType": "string", "grantTypes": [ "string" ], "targets": [ { "name": "string", "kind": "string", "targetId": "string", "scopes": [ "string" ], "allScopes": true } ], "scopes": [ "string" ], "justification": "string", "status": "string", "resolvedByUserId": "string", "resolvedByName": "string", "resolutionNote": "string", "clientId": "string", "clientAppId": "string", "createdTime": "string", "modifiedTime": "string", "clientName": "string", "clientDeleted": true}/** * A developer's request to provision an agent client, reviewed by an Agentic * Governance Suite admin. */export interface Response {id?: string/** * The user the request was raised for, and their display name at that time. */requestorUserId?: stringrequestorName?: string/** * The type of agent client requested. */clientType?: string/** * The OAuth grant types requested for the client. */grantTypes?: string[]/** * The resources and connections the client asks to reach. */targets?: {/** * The name of the target, as listed in the project's resources or connections. */name?: string/** * "resource" (a backend API or MCP server) or "connection". */kind?: string/** * Read-only, server-set: the id of the resource the name matched at creation, * so a later rename does not break the reference. Empty on connections and on * older requests, which are matched by name. Ignored on create. */targetId?: string/** * Scopes requested on this target. Leave empty when allScopes is set; both * empty means no scope is requested on the target. */scopes?: string[]/** * Request any scope the target offers instead of an explicit list. */allScopes?: boolean}[]scopes?: string[]/** * The requester's reason for the request. */justification?: string/** * "pending", "approved" or "denied". */status?: string/** * The user who approved or denied the request, with their display name at * resolve time. A request resolved through the management API has an empty * user id and the name "Management API"; an auto-approved request has neither. */resolvedByUserId?: stringresolvedByName?: string/** * The note recorded with the resolution: the deny reason or the approve * comment, depending on status. */resolutionNote?: string/** * The client id of the agent client provisioned on approval. */clientId?: string/** * The application id the agent client is provisioned with. Reserved when the * request is created, so a policy rule can target the agent before approval. * Empty on older requests. */clientAppId?: stringcreatedTime?: stringmodifiedTime?: string/** * The name requested for the agent client. */clientName?: string/** * Read-only, server-set: the provisioned client has since been deleted. The * request is kept as the record of the approval. */clientDeleted?: boolean}Set access key attribute POST
Create or update a single access key custom attribute definition (upsert by machine name), using a valid management key.
Get governance access request POST
Load a single Agentic Governance Suite access request by id, using a valid management key. Requires the Agentic Governance Suite in the company license.