> ## Documentation Index
> Fetch the complete documentation index at: https://docs.b3os.org/llms.txt
> Use this file to discover all available pages before exploring further.

# POST /v1/agent-cards/requests/{id}/approve

Approve a pending request, making the card usable by the agent that asked. Signed-in users only. Returns the resulting grant, never card details.

` POST /v1/agent-cards/requests/{id}/approve `

Approve a pending request, making the card usable by the agent that asked. Signed-in
users only. Returns the resulting grant, never card details.

## Parameters

### ` id ` (path, required)

Request ID

- ` value `: type ` string `

## Responses

### ` 200 ` — OK

Content type: ` application/json `

- ` value `: type ` object `

  - ` code `: type ` integer `

    - example: ` 200 `

  - ` data `: type ` object `

    - ` approvedAt `: type ` string `

    - ` cardId `: type ` string `

    - ` connectorId `: type ` string `

    - ` createdAt `: type ` string `

    - ` expiresAt `: type ` string `

    - ` grantedBy `: type ` string `

    - ` id `: type ` string `

    - ` maxUses `: type ` integer `

    - ` note `: type ` string `

    - ` organizationId `: type ` string `

    - ` purpose `: type ` string `

    - ` requestedBy `: type ` string `

    - ` retiredAt `: type ` string ` — RetiredAt exists for the unique index, not for the domain. idx_agent_card_grants_live keeps one live grant per card, but a partial index predicate cannot reference now(), so expiry is stamped here instead and the index excludes it. Only ever set on a row that is already past ExpiresAt, and never by a human — a human withdrawing permission sets RevokedAt, which redeem and the UI both read and this column deliberately is not.

    - ` revokedAt `: type ` string `

    - ` updatedAt `: type ` string `

    - ` uses `: type ` integer `

  - ` message `: type ` string `

    - example: ` "success" `

  - ` requestId `: type ` string `

    - example: ` "abc-123" `

### ` 403 ` — Forbidden

Content type: ` application/json `

- ` value `: type ` object `

  - ` code `: type ` integer `

  - ` details `: type ` array `

    - ` array item `: type ` unknown `

  - ` message `: type ` string `

  - ` requestId `: type ` string `

## Request examples

### cURL

```curl
curl -X POST 'https://api.example.com/v1/agent-cards/requests/string/approve' \
  -H 'Authorization: Bearer YOUR_API_TOKEN'
```

### JavaScript

```javascript
const response = await fetch('https://api.example.com/v1/agent-cards/requests/string/approve', {
  method: 'POST',
  headers: {
      "Authorization": "Bearer YOUR_API_TOKEN"
  }
});

const data = await response.json();
console.log(data);
```

### Python

```python
import requests

headers = {
    'Authorization': 'Bearer YOUR_API_TOKEN'
}

response = requests.post('https://api.example.com/v1/agent-cards/requests/string/approve', headers=headers)
print(response.json())
```

### Go

```go
package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, _ := http.NewRequest("POST", "https://api.example.com/v1/agent-cards/requests/string/approve", nil)
	req.Header.Set("Authorization", "Bearer YOUR_API_TOKEN")

	resp, _ := http.DefaultClient.Do(req)
	defer resp.Body.Close()
	result, _ := io.ReadAll(resp.Body)
	fmt.Println(string(result))
}
```