Approval Policies

Authentication

Authenticate with Authorization: Bearer ak_... — see API keys. Entity-scoped routes use entityId in the query or body; a mismatched entityId returns 403.

Endpoints

List approval policies

GET /api/approval-policies?entityId={entityId}

Returns an array of approval policies.

[
  {
    "id": "policy_abc123",
    "name": "Journal entry approval",
    "trigger": "journal_entry",
    "threshold": 10000,
    "approvers": ["user_1", "user_2"]
  }
]

Create policy

POST /api/approval-policies

Body: { "entityId", "name", "trigger", "threshold?", "approvers" }

Update / Delete

PUT /api/approval-policies — body: { "entityId", "policyId", ...fields }

DELETE /api/approval-policies — body: { "entityId", "policyId" }