/v1/mgmt/agentic/governance/requests/resolveAuthorization
Descope Project ID and Management Key Project ID:Management Key as bearer token.
In: header
Request Body
application/json
"approve" or "deny".
Optional note recorded with the resolution.
Approve or deny a pending Agentic Governance Suite access request, using a valid management key. Approving provisions the requested agent client. The resolution is attributed to the Management API. Requires the Agentic Governance Suite in the company license.
curl -X POST "https://api.descope.com/v1/mgmt/agentic/governance/requests/resolve" \ -H "Content-Type: application/json" \ -d '{}'{ "id": "string", "requestorUserId": "string", "requestorName": "string", "clientType": "string", "grantTypes": [ "string" ], "targets": [ { "name": "string", "kind": "string", "targetId": "string", "scopes": [ "string" ], "allScopes": true } ], "scopes": [ "string" ], "justification": "string", "status": "string", "resolvedByUserId": "string", "resolvedByName": "string", "resolutionNote": "string", "clientId": "string", "clientAppId": "string", "createdTime": "string", "modifiedTime": "string", "clientName": "string", "clientDeleted": true}/** * A developer's request to provision an agent client, reviewed by an Agentic * Governance Suite admin. */export interface Response {id?: string/** * The user the request was raised for, and their display name at that time. */requestorUserId?: stringrequestorName?: string/** * The type of agent client requested. */clientType?: string/** * The OAuth grant types requested for the client. */grantTypes?: string[]/** * The resources and connections the client asks to reach. */targets?: {/** * The name of the target, as listed in the project's resources or connections. */name?: string/** * "resource" (a backend API or MCP server) or "connection". */kind?: string/** * Read-only, server-set: the id of the resource the name matched at creation, * so a later rename does not break the reference. Empty on connections and on * older requests, which are matched by name. Ignored on create. */targetId?: string/** * Scopes requested on this target. Leave empty when allScopes is set; both * empty means no scope is requested on the target. */scopes?: string[]/** * Request any scope the target offers instead of an explicit list. */allScopes?: boolean}[]scopes?: string[]/** * The requester's reason for the request. */justification?: string/** * "pending", "approved" or "denied". */status?: string/** * The user who approved or denied the request, with their display name at * resolve time. A request resolved through the management API has an empty * user id and the name "Management API"; an auto-approved request has neither. */resolvedByUserId?: stringresolvedByName?: string/** * The note recorded with the resolution: the deny reason or the approve * comment, depending on status. */resolutionNote?: string/** * The client id of the agent client provisioned on approval. */clientId?: string/** * The application id the agent client is provisioned with. Reserved when the * request is created, so a policy rule can target the agent before approval. * Empty on older requests. */clientAppId?: stringcreatedTime?: stringmodifiedTime?: string/** * The name requested for the agent client. */clientName?: string/** * Read-only, server-set: the provisioned client has since been deleted. The * request is kept as the record of the approval. */clientDeleted?: boolean}Get governance settings GET
Load the project's Agentic Governance Suite settings, using a valid management key. Works without the Agentic Governance Suite in the company license, and returns the stored settings or the defaults.
Search governance access requests POST
Search the project's Agentic Governance Suite access requests, with filtering, sorting and paging, using a valid management key. Requires the Agentic Governance Suite in the company license.