# Safety

Approvals, stop-everything, policy and audit.

Approvals, stop-everything, policy and audit.

## listApprovals

`GET /v1/approvals`

Pending and recent approval requests

| Parameter | In | Required | Type | What it is |
|---|---|---|---|---|
| `state` | query | no | `pending`, `approved`, `denied`, `expired` |  |

| Response | Means |
|---|---|
| 200 | Approvals. |
| 4XX | Error (RFC 9457). |
| 5XX | Error (RFC 9457). |

## getApproval

`GET /v1/approvals/{approvalId}`

One approval request

| Parameter | In | Required | Type | What it is |
|---|---|---|---|---|
| `approvalId` | path | yes | string |  |

| Response | Means |
|---|---|
| 200 | Approval. `Approval` |
| 4XX | Error (RFC 9457). |
| 5XX | Error (RFC 9457). |

MCP tools on this operation: [`get_approval`](/reference/mcp/get-approval/).

## decideApproval

`POST /v1/approvals/{approvalId}`

Approve or deny (person or admin scope only; an actor can never approve its own request)

| Parameter | In | Required | Type | What it is |
|---|---|---|---|---|
| `approvalId` | path | yes | string |  |

Request body: `application/json`.

| Field | Type | What it is |
|---|---|---|
| `decision` | `approve`, `deny` |  |
| `remember` | `once`, `thisTask`, `thisSiteForAnHour` |  |

| Response | Means |
|---|---|
| 200 | Decided. `Approval` |
| 4XX | Error (RFC 9457). |
| 5XX | Error (RFC 9457). |

## stopEverything

`POST /v1/stop`

Stop every agent, run, job and pressed input on every device, and refuse new actions until resumed

| Response | Means |
|---|---|
| 200 | Stopped. `StopState` |
| 4XX | Error (RFC 9457). |
| 5XX | Error (RFC 9457). |

## resume

`DELETE /v1/stop`

Clear the stop (person or admin scope only)

| Response | Means |
|---|---|
| 200 | Resumed. `StopState` |
| 4XX | Error (RFC 9457). |
| 5XX | Error (RFC 9457). |

## getPolicy

`GET /v1/policy`

Current safety policy profiles

| Response | Means |
|---|---|
| 200 | Policy. `Policy` |
| 4XX | Error (RFC 9457). |
| 5XX | Error (RFC 9457). |

## updatePolicy

`PUT /v1/policy`

Replace policy profiles (admin scope)

Request body: `application/json` (`Policy`).

| Field | Type | What it is |
|---|---|---|
| `profiles` | array of object |  |

| Response | Means |
|---|---|
| 200 | Saved. `Policy` |
| 4XX | Error (RFC 9457). |
| 5XX | Error (RFC 9457). |

## listAudit

`GET /v1/audit`

Audit log entries

| Parameter | In | Required | Type | What it is |
|---|---|---|---|---|
| `deviceId` | query | no | string |  |
| `actorId` | query | no | string |  |
| `since` | query | no | string |  |
| `limit` | query | no | integer |  |
| `cursor` | query | no | string |  |

| Response | Means |
|---|---|
| 200 | Entries, newest first. |
| 4XX | Error (RFC 9457). |
| 5XX | Error (RFC 9457). |