Create an approval request

POST

/api/v1/approvals

curl --request POST \
  --url https://api.pkgplease.com/api/v1/approvals \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "package_name": "example", "version": "example", "trust": 1, "threat": 1, "signals": [], "reason": "example", "justification": "example" }'

• Production

Also backs the MCP request_approval tool. If the package/version has no fresh score, enqueues scoring. Fans out a Slack notification and records a approval.requested audit event.

Authorizations

• orgToken

Request Body^required

Media typeapplication/json

object

package_name

required

string

version

required

string

trust

number

threat

number

signals

Array<object>

default:

One scoring-rule contribution to a package's trust or threat score.

object

axis

string

Allowed values: trust threat

points

number

possible

number

reason

string

abstained

boolean

reason

string

justification

string

Responses

201

Created approval row

Media typeapplication/json

object

id

string

Example^generated

{
  "id": "example"
}

400

Missing package_name or version

Media typeapplication/json

object

error

required

string

Example^generated

{
  "error": "example"
}