List approval gates (pending-approvals feed) for the authenticated org.
Returns approval gates scoped to the authenticated org, optionally filtered by issue or status. Gates that carry an MCP-tool project scope are additionally filtered to those the caller can access, so a project-scoped key or a non-member session never sees another project's gates. Ordered by createdAt ASC (pipeline stage order); the client groups by issue and sorts groups by urgency.
Rensei API key presented as Authorization: Bearer rsk_live_. Required API-key scopes are recorded per operation in x-rensei-required-scopes.
In: header
Query Parameters
Filter to a single issue id.
Filter by gate status.
"pending" | "in_review" | "approved" | "rejected" | "escalated" | "timed_out"Response Body
application/json
curl -X GET "https://example.com/api/approval-gates"{
"gates": [
{
"id": "string",
"workspaceId": "string",
"issueId": "string",
"name": "string",
"gateType": "string",
"status": "pending",
"requiredRoles": [
"string"
],
"requiredCount": 0,
"metadata": {
"property1": null,
"property2": null
},
"createdAt": "string",
"context": {
"property1": null,
"property2": null
},
"property1": null,
"property2": null
}
]
}Accept a current source version for an installed reference agent card.
Transactionally re-pins the install and re-materializes its projection. Overlay fields whose targets no longer exist are dropped and recorded in the audit chain.
Submit an approve / reject / escalate decision on an approval gate.
The decision actor identity and role are derived from the authenticated context, never trusted from the request body (SR 11-7). API-key callers without a user identity are rejected 403; a claimed actorRole that does not match the caller's real org role is rejected 403. When the decision resolves the gate, an escalate-to-live-session workflow gate is resumed with the server-derived approver as driver.