PendingApproval
An approval request waiting on the signed-in person. Every field is a stored
server fact except note, which is the proposing agent's own words.
type PendingApproval {
id: ID!
operation: String!
risk: AssistantToolRisk
facts: [ApprovalFact!]!
argsHash: String!
tainted: Boolean!
taintSources: [String!]!
note: String
ownerID: String!
conversationID: ID
missionID: String
agentGrantID: ID
agentName: String
createdAt: Time!
expiresAt: Time!
}
Fields
PendingApproval.id ● ID! non-null scalar
PendingApproval.operation ● String! non-null scalar
The GraphQL operation approving runs.
PendingApproval.risk ● AssistantToolRisk enum
The operation's risk class when the request was made (@assistantTool), or null when it had none.
PendingApproval.facts ● [ApprovalFact!]! non-null object
The arguments that will run, flattened and sorted by key.
PendingApproval.argsHash ● String! non-null scalar
Hash of the operation and arguments. Quote it back to approve.
PendingApproval.tainted ● Boolean! non-null scalar
The proposal was made after reading content the user did not write.
PendingApproval.taintSources ● [String!]! non-null scalar
What tainted it, e.g. publicStrategy.
PendingApproval.note ● String scalar
The proposing agent's note. NOT VERIFIED: never a fact.
PendingApproval.ownerID ● String! non-null scalar
The organization the operation runs in.
PendingApproval.conversationID ● ID scalar
The conversation whose turn asked, when one did.
PendingApproval.missionID ● String scalar
The Mission whose step asked, when one did.
PendingApproval.agentGrantID ● ID scalar
The connected MCP agent that proposed it, when one did (#3552): the id of the person's own agent grant.
PendingApproval.agentName ● String scalar
The name the person gave that agent in Organization > MCP, e.g. "Claude Desktop". Null when no agent proposed it.
PendingApproval.createdAt ● Time! non-null scalar
PendingApproval.expiresAt ● Time! non-null scalar
When the request stops being approvable.
Returned By
pendingApprovals query