> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mandate.md/llms.txt
> Use this file to discover all available pages before exploring further.

# Approve or reject a pending approval

> Makes a decision on a pending approval request. Transitions the associated intent to `approved` or `rejected`.



## OpenAPI

````yaml /openapi.json post /api/approvals/{id}/decide
openapi: 3.1.0
info:
  title: Mandate API
  version: 1.2.0
  description: >-
    Non-custodial agent wallet policy layer. Enforces spend limits, allowlists,
    and approval workflows for AI agent transactions without ever receiving
    private keys.
  contact:
    name: Mandate
    url: https://mandate.md
    email: support@mandate.md
  license:
    name: MIT
    url: https://opensource.org/licenses/MIT
servers:
  - url: https://app.mandate.md
    description: Production
security: []
tags:
  - name: Registration
    description: >-
      Agent registration and claiming. No auth required for register; Sanctum
      auth for claim.
  - name: Agent API
    description: >-
      Endpoints authenticated with a runtime key (Bearer mndt_live_... or
      mndt_test_...). Used by agents to validate transactions, post events, and
      poll status.
  - name: Intent Lifecycle
    description: >-
      Post transaction hashes after broadcast and poll intent status until
      confirmed.
  - name: Dashboard
    description: >-
      Dashboard endpoints for human operators. Authenticated via Sanctum
      (cookie-based session).
  - name: Policies
    description: >-
      Policy management for agents. List, create, and view policy
      configurations.
  - name: Approvals
    description: Approval queue for transactions that require human review.
paths:
  /api/approvals/{id}/decide:
    post:
      tags:
        - Approvals
      summary: Approve or reject a pending approval
      description: >-
        Makes a decision on a pending approval request. Transitions the
        associated intent to `approved` or `rejected`.
      operationId: decideApproval
      parameters:
        - name: id
          in: path
          required: true
          description: The approval ID.
          schema:
            type: string
            format: uuid
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/DecideApprovalRequest'
            example:
              decision: approved
              note: Verified with vendor, payment is correct.
      responses:
        '200':
          description: Decision recorded.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DecideApprovalResponse'
              example:
                approvalId: a1b2c3d4-e5f6-7890-abcd-ef1234567890
                intentId: 9e5f1a2b-3c4d-5e6f-7a8b-9c0d1e2f3a4b
                decision: approved
                intentStatus: approved
        '409':
          description: Approval already decided.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              example:
                error: Approval already decided.
        '410':
          description: Approval request has expired.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              example:
                error: Approval request has expired.
      security:
        - SanctumAuth: []
components:
  schemas:
    DecideApprovalRequest:
      type: object
      required:
        - decision
      properties:
        decision:
          type: string
          enum:
            - approved
            - rejected
          description: The approval decision.
        note:
          type: string
          maxLength: 500
          description: Optional note explaining the decision.
    DecideApprovalResponse:
      type: object
      required:
        - approvalId
        - intentId
        - decision
        - intentStatus
      properties:
        approvalId:
          type: string
          format: uuid
        intentId:
          type: string
          format: uuid
        decision:
          type: string
          enum:
            - approved
            - rejected
        intentStatus:
          type: string
          enum:
            - approved
            - rejected
    ErrorResponse:
      type: object
      required:
        - error
      properties:
        error:
          type: string
          description: Human-readable error message.
  securitySchemes:
    SanctumAuth:
      type: apiKey
      in: cookie
      name: laravel_session
      description: >-
        Laravel Sanctum cookie-based session authentication. Obtained via GitHub
        OAuth login on the dashboard.

````