Move an API source or selected operation through the approval lifecycle.

POST

/v1/api-sources/{api_source_id}/approval

Authorizations

• oidc

Parameters

Path Parameters

api_source_id

required

string

Request Body ^required

object

toStatus

required

string

Allowed values: submitted under_review approved rejected disabled archived

reasonCode

required

string

/^[a-z0-9_]+$/

reason

required

string

>= 1 characters

actorId

Deprecated compatibility field. Server derives actor identity from /v1/identity/me context and rejects mismatches.

string

>= 1 characters

Responses

202

Approval transition accepted and audited.

object

schemaVersion

required

apiSourceId

required

string

>= 1 characters

name

required

string

>= 1 characters

owner

required

object

team

required

string

>= 1 characters

userId

required

string

>= 1 characters

escalationContact

required

string

>= 1 characters

oncallRotation

required

string

>= 1 characters

environmentId

required

string

>= 1 characters

openapiRef

required

string

>= 1 characters

specHash

required

string

>= 1 characters

upstreamBaseUrl

required

string format: uri

/^https:///

allowedHosts

required

Array<string>

>= 1 items

runtimePlacement

required

object

mode

required

mcpServerCreated

required

boolean

managedMcpHostingAvailable

required

boolean

reasonCode

required

approvalStatus

required

string

Allowed values: submitted under_review approved rejected disabled archived

version

required

string

>= 1 characters

health

required

object

status

required

Allowed values: healthy degraded unhealthy unknown

routeAvailable

required

boolean

latencyMs

required

integer

lastCheckedAt

required

string format: date-time

checkedBy

required

string

>= 1 characters

failureReason

required

string

/^[a-z0-9_]+$/

connectorStatus

required

Allowed values: healthy degraded unhealthy unknown not_configured

lastValidationResult

required

object

valid

required

boolean

validatedAt

required

string format: date-time

schemaRef

required

string

>= 1 characters

specDrift

required

boolean

failureReason

string

/^[a-z0-9_]+$/

operations

required

Array<object>

object

operationId

required

string

>= 1 characters

method

required

Allowed values: GET POST PUT PATCH DELETE

path

required

string

>= 1 characters /^//

generatedToolId

required

string

>= 1 characters

selected

required

boolean

approvalStatus

required

string

Allowed values: submitted under_review approved rejected disabled archived

riskTier

required

Allowed values: low medium high critical

credentialMode

required

string

Allowed values: none service_account user_delegated agent_scoped workload_mapped

credentialBindingId

required

string | null

>= 1 characters

inputSchemaRef

required

string

>= 1 characters

limits

required

object

timeoutMs

required

integer

>= 1 <= 30000

maxRequestBytes

required

integer

>= 1

maxResponseBytes

required

integer

>= 1

oversizeBehavior

required

selectedOperationPolicy

required

object

defaultPublishState

required

publishRequiresSelected

required

boolean

publishRequiresApproval

required

boolean

unselectedDenyReason

required

unapprovedDenyReason

required

adapterValidation

required

object

hostAllowlistFailureReason

required

schemaFailureReason

required

credentialBindingRequiredReason

required

credentialBindingDeniedReason

required

requestSizeFailureReason

required

responseSizeFailureReason

required

auditPayloadLogging

required

Allowed values: disabled redacted

changeHistory

required

Array<object>

object

changeId

required

string

>= 1 characters

resourceType

required

Allowed values: mcp_server api_source api_operation agent credential_binding connector catalog registry_batch

resourceId

required

string

>= 1 characters

action

required

string

>= 1 characters

actorId

required

string

>= 1 characters

actorRole

required

Allowed values: owner reviewer platform_admin system

fromStatus

string

Allowed values: submitted under_review approved rejected disabled archived

toStatus

string

Allowed values: submitted under_review approved rejected disabled archived

timestamp

required

string format: date-time

reasonCode

required

string

/^[a-z0-9_]+$/

reason

string

>= 1 characters

previousVersion

string

newVersion

required

string

>= 1 characters

mcpClient

Any of:

object

object

gatewayEndpointUrl

required

string format: uri

generatedTools

required

Array<object>

object

toolId

required

string

>= 1 characters

name

required

string

>= 1 characters

authMode

required

Allowed values: gateway_client_auth

transport

required

Allowed values: streamable_http sse

smokeTestCommand

required

Secret-free local command descriptor for MCP client list/call smoke.

string

>= 1 characters

null

null