Records that a person approved the SHA-256 of a folder's flagged agent configuration, so sessions of the tools that read it may start until one character of it changes.

POST

/v1/m/sessions/workspaces/{ref}/project-config/approve

curl --request POST \
  --url https://example.com/v1/m/sessions/workspaces/example/project-config/approve \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "sha256": "example" }'

• this engine

Records that a person approved the SHA-256 of a folder’s flagged agent configuration, so sessions of the tools that read it may start until one character of it changes.

Authorizations

• bearerAuth
• browserSession

Parameters

Path Parameters

ref

required

string

Path parameter ref.

Header Parameters

X-Olivares-Tenant

string format: uuid

Target tenant id; required when the principal can act in more than one tenant.

Request Body ^required

Media type application/json

object

sha256

required

SHA-256 of the flagged project agent configuration reviewed, as the report or the refused start shows it.

string

/^[0-9a-f]{64}$/

Example ^generated

{
  "sha256": "example"
}

Responses

200

Who approved which SHA-256, and when

Media type application/json

object

actor

required

string

at

required

string format: date-time

sha256

required

string

/^[0-9a-f]{64}$/

Example ^generated

{
  "actor": "example",
  "at": "2026-04-15T12:00:00Z",
  "sha256": "example"
}

400

Bad request

Media type application/json

object

Example ^generated

{}

401

Unauthenticated

Media type application/json

object

Example ^generated

{}

403

Forbidden

Media type application/json

object

Example ^generated

{}

404

Not found

Media type application/json

object

Example ^generated

{}

409

Conflict / setup required

Media type application/json

object

Example ^generated

{}

429

Rate limited

Media type application/json

object

Example ^generated

{}