capabilities module route (requires capabilities:config:write)

POST

/v1/m/capabilities/toolpins/approve

curl --request POST \
  --url https://example.com/v1/m/capabilities/toolpins/approve \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "expected_drift_fingerprint": "example", "expected_version": 1, "fingerprint": "example", "from_drift": true, "tool": "example" }'

• this engine

Approves one tool pin; the call requires an Idempotency-Key header and the version the caller expects, and answers 501 when no pin verifier is wired.

Authorizations

• bearerAuth

Parameters

Header Parameters

X-Olivares-Tenant

string format: uuid

Target tenant id; required when the principal can act in more than one tenant.

Request Body ^required

Media type application/json

Any of:

object

object

expected_drift_fingerprint

Any of:

string

string

null

null

expected_version

required

integer

fingerprint

required

string

>= 1 characters

from_drift

Any of:

boolean

boolean

null

null

tool

required

string

>= 1 characters

key

additional properties

any

object

object

expected_drift_fingerprint

required

string

>= 1 characters

expected_version

required

integer

fingerprint

Any of:

string

string

null

null

from_drift

required

tool

required

string

>= 1 characters

key

additional properties

any

Responses

200

OK

Media type application/json

object

Example ^generated

{}

400

Bad request

Media type application/json

object

Example ^generated

{}

401

Unauthenticated

Media type application/json

object

Example ^generated

{}

403

Forbidden

Media type application/json

object

Example ^generated

{}

404

Not found

Media type application/json

object

Example ^generated

{}

409

Conflict / setup required

Media type application/json

object

Example ^generated

{}

429

Rate limited

Media type application/json

object

Example ^generated

{}