# Requires the executions:manage key scope.
# Idempotency-Key is optional: send one to make a retry safe.
curl -X POST "https://api.triggr-app.com/api/v1/approvals/<approvalId>/approve" \
-H "Authorization: Bearer $TRIGGR_API_KEY" \
-H "Idempotency-Key: $(uuidgen)" \
-H "Content-Type: application/json" \
-d '{
"actor": {
"name": "Sam Tech",
"email": "sam@acme-msp.com"
},
"response": "Looks good"
}'// Requires the executions:manage key scope.
// Idempotency-Key is optional: send one to make a retry safe.
const res = await fetch("https://api.triggr-app.com/api/v1/approvals/<approvalId>/approve", {
method: "POST",
headers: {
"Authorization": `Bearer ${process.env.TRIGGR_API_KEY}`,
"Content-Type": "application/json",
"Idempotency-Key": crypto.randomUUID(),
},
body: JSON.stringify({
"actor": {
"name": "Sam Tech",
"email": "sam@acme-msp.com"
},
"response": "Looks good"
}),
});
if (!res.ok) throw new Error(`Triggr ${res.status}: ${await res.text()}`);
const data = await res.json();# Requires the executions:manage key scope.
# Idempotency-Key is optional: send one to make a retry safe.
$headers = @{
Authorization = "Bearer $env:TRIGGR_API_KEY"
'Idempotency-Key' = [guid]::NewGuid().ToString()
}
$body = @'
{
"actor": {
"name": "Sam Tech",
"email": "sam@acme-msp.com"
},
"response": "Looks good"
}
'@
Invoke-RestMethod -Method Post -Uri 'https://api.triggr-app.com/api/v1/approvals/<approvalId>/approve' -Headers $headers -ContentType 'application/json' -Body $bodyimport requests
url = "https://api.triggr-app.com/api/v1/approvals/{approvalId}/approve"
payload = {
"actor": {
"email": "sam@acme-msp.com",
"name": "Sam Tech"
},
"response": "Looks good"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({actor: {email: 'sam@acme-msp.com', name: 'Sam Tech'}, response: 'Looks good'})
};
fetch('https://api.triggr-app.com/api/v1/approvals/{approvalId}/approve', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.triggr-app.com/api/v1/approvals/{approvalId}/approve",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'actor' => [
'email' => 'sam@acme-msp.com',
'name' => 'Sam Tech'
],
'response' => 'Looks good'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.triggr-app.com/api/v1/approvals/{approvalId}/approve"
payload := strings.NewReader("{\n \"actor\": {\n \"email\": \"sam@acme-msp.com\",\n \"name\": \"Sam Tech\"\n },\n \"response\": \"Looks good\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.triggr-app.com/api/v1/approvals/{approvalId}/approve")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"actor\": {\n \"email\": \"sam@acme-msp.com\",\n \"name\": \"Sam Tech\"\n },\n \"response\": \"Looks good\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.triggr-app.com/api/v1/approvals/{approvalId}/approve")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"actor\": {\n \"email\": \"sam@acme-msp.com\",\n \"name\": \"Sam Tech\"\n },\n \"response\": \"Looks good\"\n}"
response = http.request(request)
puts response.read_body{
"approval": {
"approver": "manager@acme.com",
"body": "Jane Doe leaves on 12 September. Approve to start the offboarding run.",
"completedAt": "2026-09-07T10:05:00Z",
"createdAt": "2026-09-07T10:00:30Z",
"decidedBy": {
"email": "sam@acme-msp.com",
"id": "",
"name": "Sam Tech"
},
"executionId": "1b4e28ba-2fa1-11d2-883f-0016d3cca427",
"expiresAt": "2026-09-09T10:00:00Z",
"id": "a7c19f02-8d3e-4b61-9f5a-2c8e7d4b1a03",
"reference": "REQ-4821",
"response": "Looks good",
"status": "approved",
"subject": "Approve offboarding for Jane Doe",
"type": "single",
"updatedAt": "2026-09-07T10:05:00Z"
}
}{
"error": "<string>"
}{
"error": "<string>"
}{
"error": "<string>"
}{
"error": "<string>"
}{
"error": "<string>"
}{
"error": "<string>"
}{
"error": "<string>"
}Approve
Records actor (your signed-in person) on the approval and resumes the run. The key’s scope is the authority, and your portal decides which of its people may act. Requires the executions:manage key scope.
# Requires the executions:manage key scope.
# Idempotency-Key is optional: send one to make a retry safe.
curl -X POST "https://api.triggr-app.com/api/v1/approvals/<approvalId>/approve" \
-H "Authorization: Bearer $TRIGGR_API_KEY" \
-H "Idempotency-Key: $(uuidgen)" \
-H "Content-Type: application/json" \
-d '{
"actor": {
"name": "Sam Tech",
"email": "sam@acme-msp.com"
},
"response": "Looks good"
}'// Requires the executions:manage key scope.
// Idempotency-Key is optional: send one to make a retry safe.
const res = await fetch("https://api.triggr-app.com/api/v1/approvals/<approvalId>/approve", {
method: "POST",
headers: {
"Authorization": `Bearer ${process.env.TRIGGR_API_KEY}`,
"Content-Type": "application/json",
"Idempotency-Key": crypto.randomUUID(),
},
body: JSON.stringify({
"actor": {
"name": "Sam Tech",
"email": "sam@acme-msp.com"
},
"response": "Looks good"
}),
});
if (!res.ok) throw new Error(`Triggr ${res.status}: ${await res.text()}`);
const data = await res.json();# Requires the executions:manage key scope.
# Idempotency-Key is optional: send one to make a retry safe.
$headers = @{
Authorization = "Bearer $env:TRIGGR_API_KEY"
'Idempotency-Key' = [guid]::NewGuid().ToString()
}
$body = @'
{
"actor": {
"name": "Sam Tech",
"email": "sam@acme-msp.com"
},
"response": "Looks good"
}
'@
Invoke-RestMethod -Method Post -Uri 'https://api.triggr-app.com/api/v1/approvals/<approvalId>/approve' -Headers $headers -ContentType 'application/json' -Body $bodyimport requests
url = "https://api.triggr-app.com/api/v1/approvals/{approvalId}/approve"
payload = {
"actor": {
"email": "sam@acme-msp.com",
"name": "Sam Tech"
},
"response": "Looks good"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({actor: {email: 'sam@acme-msp.com', name: 'Sam Tech'}, response: 'Looks good'})
};
fetch('https://api.triggr-app.com/api/v1/approvals/{approvalId}/approve', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.triggr-app.com/api/v1/approvals/{approvalId}/approve",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'actor' => [
'email' => 'sam@acme-msp.com',
'name' => 'Sam Tech'
],
'response' => 'Looks good'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.triggr-app.com/api/v1/approvals/{approvalId}/approve"
payload := strings.NewReader("{\n \"actor\": {\n \"email\": \"sam@acme-msp.com\",\n \"name\": \"Sam Tech\"\n },\n \"response\": \"Looks good\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.triggr-app.com/api/v1/approvals/{approvalId}/approve")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"actor\": {\n \"email\": \"sam@acme-msp.com\",\n \"name\": \"Sam Tech\"\n },\n \"response\": \"Looks good\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.triggr-app.com/api/v1/approvals/{approvalId}/approve")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"actor\": {\n \"email\": \"sam@acme-msp.com\",\n \"name\": \"Sam Tech\"\n },\n \"response\": \"Looks good\"\n}"
response = http.request(request)
puts response.read_body{
"approval": {
"approver": "manager@acme.com",
"body": "Jane Doe leaves on 12 September. Approve to start the offboarding run.",
"completedAt": "2026-09-07T10:05:00Z",
"createdAt": "2026-09-07T10:00:30Z",
"decidedBy": {
"email": "sam@acme-msp.com",
"id": "",
"name": "Sam Tech"
},
"executionId": "1b4e28ba-2fa1-11d2-883f-0016d3cca427",
"expiresAt": "2026-09-09T10:00:00Z",
"id": "a7c19f02-8d3e-4b61-9f5a-2c8e7d4b1a03",
"reference": "REQ-4821",
"response": "Looks good",
"status": "approved",
"subject": "Approve offboarding for Jane Doe",
"type": "single",
"updatedAt": "2026-09-07T10:05:00Z"
}
}{
"error": "<string>"
}{
"error": "<string>"
}{
"error": "<string>"
}{
"error": "<string>"
}{
"error": "<string>"
}{
"error": "<string>"
}{
"error": "<string>"
}Authorizations
Organisation API key. Scoped operations carry x-triggr-scope; the scopes themselves are described in x-triggr-scopes.
Headers
OPTIONAL — omit it and this operation behaves exactly as it always has. A unique value (a UUID) you choose per request. A retry with the same key and the same method, path and body within 24 hours gets the first response replayed (status and body, with Idempotent-Replayed: true) instead of running again; the same key with a different request is refused with 422. A 5xx is not stored, so that retry runs. A one-time credential is never stored: on a replay any secret is null, with an idempotentReplayNote explaining it.
1 - 255Path Parameters
Body
Response
OK
Show child attributes
Show child attributes

