Approvals

MCP tools for the Approvals module. See the Approvals module docs for permissions and data model.

list-approvals

List approval items

Arguments

Argument	Type	Required	Description
project_id	string	no	Project ID (required if not using project key auth)
status	array<string>	no	Filter by lifecycle status. Repeat the parameter to OR values. A value outside the enum, empty string included, is a 400.
origin	string	no	Filter by producer origin
expires_from	string	no	Only items whose expires_at is at or after this timestamp (ISO 8601)
expires_to	string	no	Only items whose expires_at is at or before this timestamp (ISO 8601)
limit	number	no	Results per page. Above the maximum it is clamped; below 1 or not an integer it is 400 VALIDATION_FAILED.
cursor	string	no	The previous page's next_cursor; omit it for the first page. Send it with the same filters as the request that returned it: a malformed cursor, or one sent with other filters, is 400 INVALID_CURSOR.

list-approval-recurrences

List recurring approval groups

Arguments

Argument	Type	Required	Description
project_id	string	no	Project ID (required if not using project key auth)
status	array<string>	no	Lifecycle statuses the groups are built from (default rejected). Repeat the parameter to OR values. A value outside the enum, empty string included, is a 400.
min_count	number	no	Minimum items in a group for it to be returned
limit	number	no	Results per page. Above the maximum it is clamped; below 1 or not an integer it is 400 VALIDATION_FAILED.
cursor	string	no	The previous page's next_cursor; omit it for the first page. Send it with the same filters as the request that returned it: a malformed cursor, or one sent with other filters, is 400 INVALID_CURSOR.

get-approval

Get an approval item

Arguments

Argument	Type	Required	Description
approval_id	string	yes	Approval item ID

approve-approval

Approve an approval item

Arguments

Argument	Type	Required	Description
approval_id	string	yes	Approval item ID
arguments	object	no	Edited arguments to execute instead of the proposed ones. Editing composes a new call, so it additionally requires permission to make that call: tools:CallTool on the tool, and for a builtin proposal the action's own IAM action. Refused on an item with no proposed_action.
tool_context	object	no	Key-value pairs forwarded as context headers on the approved action and on every tool call of the continuation turn, as on a generation's tool_context. Never stored on the item: supply it on the approve call itself, for a tool that authorizes with a credential minted at decision time. The server-pinned identity keys (session_id, actor_id, actor_external_id) are dropped. An invalid or colliding key is rejected with 400 INVALID_TOOL_CONTEXT_KEY and nothing is resolved.

reject-approval

Reject an approval item

Arguments

Argument	Type	Required	Description
approval_id	string	yes	Approval item ID
reason	string	yes	Why the item is being rejected (required)