Post provisioning requests
Authorizations
JWT Bearer token obtained from authentication. Pass as: Authorization: Bearer
Body
Ask the organization owner to provision a resource this agent cannot provision itself.
Resource being requested: VAULT (encrypted secret storage for this agent) or PHONE_NUMBER (a provisioned number, Starter+ only).
VAULT, PHONE_NUMBER Why the agent needs this, shown verbatim to the owner. Required — an unexplained ask is not a decidable one.
1 - 500Agent identifier. Optional when using an agent API key (resolved automatically); required when using a master key.
^[0-9a-z]+$Resource-specific options; ignored for resources that take none
Response
OK
The created request, plus whether the owner notification actually went out
Unique provisioning request identifier
Agent the resource would belong to
Agent display name, so the owner knows who is asking
Resource being requested: VAULT (encrypted secret storage for this agent), PHONE_NUMBER (a provisioned number, Starter+ only), or GENERIC (a master-gated operation the agent tried to perform; approving grants permission rather than provisioning anything).
VAULT, PHONE_NUMBER, GENERIC The agent's stated justification
Lifecycle status: PENDING (awaiting the owner), APPROVED (resource provisioned), DECLINED (owner refused — soft, the agent may ask again), EXPIRED (7-day TTL elapsed unanswered), CANCELLED (withdrawn by the agent).
PENDING, APPROVED, DECLINED, EXPIRED, CANCELLED Resource-specific options, if any
What the agent was refused, when this request records a permission rather than a resource
When an unanswered request stops being actionable
When the owner decided; null while PENDING
The owner's note, typically the reason for a decline — surfaced so a second attempt can address the objection instead of repeating the first
Id of what approval created (vault identity or phone identity); null unless APPROVED
When the agent asked
Whether the owner was successfully emailed. False means the request is still live and visible in the console — the notification failed, not the request.
