REST API

Safety

Approvals, stop-everything, policy and audit.

listApprovals

GET /v1/approvals

Pending and recent approval requests

Parameter	In	Required	Type	What it is
`state`	query	no	`pending`, `approved`, `denied`, `expired`

GET /v1/approvals/{approvalId}

One approval request

Parameter	In	Required	Type	What it is
`approvalId`	path	yes	string

MCP tools on this operation: get_approval.

POST /v1/approvals/{approvalId}

Approve or deny (person or admin scope only; an actor can never approve its own request)

Parameter	In	Required	Type	What it is
`approvalId`	path	yes	string

Request body: application/json.

Field	Type	What it is
`decision`	`approve`, `deny`
`remember`	`once`, `thisTask`, `thisSiteForAnHour`

POST /v1/stop

Stop every agent, run, job and pressed input on every device, and refuse new actions until resumed

DELETE /v1/stop

Clear the stop (person or admin scope only)

GET /v1/policy

Current safety policy profiles

PUT /v1/policy

Replace policy profiles (admin scope)

Request body: application/json (Policy).

Field	Type	What it is
`profiles`	array of object

GET /v1/audit

Audit log entries

Parameter	In	Required	Type
`deviceId`	query	no	string
`actorId`	query	no	string
`since`	query	no	string
`limit`	query	no	integer
`cursor`	query	no	string