--- title: "Update pending approval" method: PUT path: "/api/v2/pendingapprovals/{approvalId}" tags: ["Pending approval"] --- # Update pending approval `PUT /api/v2/pendingapprovals/{approvalId}` Updates the state of a pending approval to `approved` or `rejected`. You can manage pending approvals programmatically by API or with the BitGo web UI. Ensure your authentication token has the proper scope. When creating an access token in the web UI, check the permission, "Update Pending Approvals" (under "Account Settings" > "Developer Options" > "Access Tokens"). BitGo recommends that you create a webhook policy so that you can automate approving and rejecting transactions. ## Path parameters - `approvalId` string, required ## Request body - object — Request body for updating a pending approval. Matches platform.yaml: otp and state (both strings). - `otp` string — Second factor authentication token - `state` string, required — Pending approval state to apply (e.g. approved or rejected) ## Response `200` OK - PendingApproval - `id` string, required - `coin` string — A cryptocurrency or token ticker symbol. - `wallet` string - `walletType` string - `walletSubType` string — The subtype of the wallet (e.g., custodialHot) - `wallets` string[] - `enterprise` string - `organization` string - `safeId` string — The safe the pending approval is scoped to - `organizationName` string — The organization name - `bitgoOrg` string — The BitGo organization - `creator` string, required - `createDate` string, date-time, required — The creation date of the pending approval - `approvedDate` string, date-time — The date when the approval was granted - `updatedAt` string, date-time — The date when the approval was last updated (any update, not just processing) - `keyCurve` 'secp256k1' | 'ed25519' | 'bls12_381' — The key curve of the coin attached to this pending approval - `info` PendingApprovalInfo, required - `type` 'userChangeRequest' | 'transactionRequest' | 'transactionRequestFull' | 'policyRuleRequest' | 'updateApprovalsRequiredRequest' | 'updateEnterpriseRequest' | 'updateOrganizationRequest' | 'genericRequest' | 'enterpriseInviteRequest' | 'updateWalletSettingRequest' | 'updateWalletTagsRequest', required - `userChangeRequest` object - `action` string — The action taken - `permissions` string[] - `userChanged` string — The user that changed - `transactionRequest` object - `buildParams` unknown - `coinSpecific` unknown - `comment` string, nullable — The comment for the transaction request - `fee` unknown - `isUnsigned` boolean, nullable — Indicates if the transaction is unsigned - `policyUniqueId` unknown - `recipients` object[] - `address` string — The address of the recipient - `amount` string — The amount to be transferred - `data` string — Additional data for the transaction - `requestedAmount` unknown - `sourceWallet` unknown - `triggeredPolicy` unknown - `validTransaction` string — Indicates if the transaction is valid - `validTransactionHash` string — The hash of the valid transaction - `verificationItems` string[], nullable — The verification items for the transaction - `verificationRuleId` string, nullable — The ID of the verification rule - `videoApprovers` unknown[] - unknown - `transactionRequestFull` object - `intent` union - object — ============================================================================ REUSABLE SCHEMA FRAGMENTS FOR ASSET-CONTAINING INTENTS ============================================================================ These schemas define reusable building blocks that concrete intent schemas can compose with. They serve multiple purposes: 1. **Schema Reuse**: Concrete intents can intersect with these fragments 2. **Pattern Matching**: getAssetsFromIntent utility matches against these 3. **Type Safety**: Ensures consistency across all asset-containing intents 4. **Documentation**: Clearly shows which intents handle which asset types By using the actual RecipientEntry and TokenRecipientEntry types, we ensure these patterns exactly match the structures used in concrete intents. - `intentType` 'payment', required — Must be "payment". - `sequenceId` string - `comment` string - `nonce` union — Override the on-chain nonce for this transaction. - string - number - `recipients` object[], required - `address` Address, required - … - `amount` Amount, required - … - `data` string - object — ============================================================================ REUSABLE SCHEMA FRAGMENTS FOR ASSET-CONTAINING INTENTS ============================================================================ These schemas define reusable building blocks that concrete intent schemas can compose with. They serve multiple purposes: 1. **Schema Reuse**: Concrete intents can intersect with these fragments 2. **Pattern Matching**: getAssetsFromIntent utility matches against these 3. **Type Safety**: Ensures consistency across all asset-containing intents 4. **Documentation**: Clearly shows which intents handle which asset types By using the actual RecipientEntry and TokenRecipientEntry types, we ensure these patterns exactly match the structures used in concrete intents. - `intentType` 'payment', required — Must be "payment". - `sequenceId` string - `comment` string - `nonce` union — Override the on-chain nonce for this transaction. - string - number - `recipients` object[], required - `address` Address, required - … - `amount` Amount, required - … - `data` string - `isTestTransaction` boolean, required — When true, marks this as a test transaction (not broadcast to the network). - `policyUniqueId` string — The unique ID for the policy - `txRequest` union — The transaction request details - TransactionRequestLite - `intent` union - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - object — The intent of the transaction request - … - `unsignedTxs` object[] - `parsedTx` ParsedTx, required - … - `serializedTxHex` string, required — The unsigned transaction as a hex string. - `signableHex` string, required — The portion of a transaction used to generate a signature (may or may not be the same as serializedTxHex) as a hex string. - `derivationPath` string — A bip32 path. - `coinSpecific` object — Coin specific information. - … - `feeInfo` object - … - `signatureShares` object[] - `vssProof` string — The VSS proof of the signature share - `privateShareProof` string — The private share proof - `publicShare` string — The public share - `from` 'user' | 'backup' | 'bitgo', required - `to` 'user' | 'backup' | 'bitgo', required - `share` string, required — The signature share - `commitmentShares` object[] - `type` 'commitment', required — The type of the commitment share - `from` 'user' | 'backup' | 'bitgo', required - `to` 'user' | 'backup' | 'bitgo', required - `share` string, required — The commitment share. - `txHashes` string[] - `apiVersion` 'lite' | 'full' — The API version of the transaction request - `txRequestId` string, uuid, required - `idempotencyKey` string — The idempotency key of the transaction request - `walletId` string, required - `walletType` 'backing' | 'cold' | 'custodial' | 'custodialPaired' | 'hot' | 'advanced' | 'trading' — The type describes who owns the keys to the wallet associated to the TxRequest. - `version` number, required — The version of the transaction request - `enterpriseId` string — If the wallet that owns the TxRequest is owned by an enterprise then this is the Id of said enterprise. - `organizationId` string — The id of the organization the TxRequest's wallet belongs to. - `state` 'pendingApproval' | 'canceled' | 'rejected' | 'initialized' | 'pendingDelivery' | 'delivered' | 'pendingUserSignature' | 'pendingUserCommitment' | 'pendingUserRShare' | 'pendingUserGShare' | 'readyToSend' | 'signed' | 'failed', required - `date` string, date-time, required — The date and time this version of the TxRequest document was created. - `createdDate` string, date-time, required — The date and time the version 1 TxRequest document was created. - `userId` string, required — The Id of the User that produced this version of the TxRequest document. Could have created a new document or updated an existing document. - `initiatedBy` string, required — The Id of the User that originally created the TxRequest document (initiated the TxRequest). - `updatedBy` string, required — The Id of the User that last updated the TxRequest document. This is an alias for the userId field. - `intents` unknown[], required - unknown - `pendingApprovalId` string — The id of the Pending Approval that was created for the TxRequest if one was required. - `policiesChecked` boolean - `latest` boolean, required — Indicates if this is the latest transaction request - `isCanceled` boolean — True, if the transaction request is canceled. - `cancelReason` string — The reason the transaction request was canceled, if applicable. - `initiatedByDAppClient` boolean — True when the txRequest was initiated by a dApp OAuth client (e.g. Narval). - `txChannel` object — Immutable DeFi / marketplace channel classification (DEFI-300). - `clientId` string — OAuth dApp client id (Narval). - `connector` 'narval' | 'walletconnect' — External entry connector (narval, walletconnect). Omitted for internal BitGo flows. - `defiAction` 'approve' | 'deposit' | 'withdraw' - `protocol` 'morpho' | 'aave' | 'concrete' — DeFi protocol (morpho, aave, concrete). - `source` 'internal' | 'external', required - `type` 'defi', required - `vaultId` string - `walletConnectRequestId` string — defi-service walletconnect_requests.id when supplied on the intent. - TransactionRequestFull - `transactions` object[] - `state` 'initialized' | 'pendingSignature' | 'eddsaPendingCommitment' | 'eddsaPendingRShare' | 'eddsaPendingGShare' | 'ecdsaMPCv2Round1' | 'ecdsaMPCv2Round2' | 'ecdsaMPCv2Round3' | 'eddsaMPCv2Round1' | 'eddsaMPCv2Round2' | 'eddsaMPCv2Round3' | 'readyToCombineShares' | 'signed' | 'held' | 'delivered' | 'invalidSignature' | 'rejected', required — If supplied, only transaction request transaction state changes from the provided list will trigger notifications. If not provided, all transaction request transaction state changes will trigger notifications. - `unsignedTx` UnsignedTransaction, required - … - `signatureShares` object[] - … - `commitmentShares` object[] - … - `txHash` string - `updatedDate` string, date-time - `createdDate` string, date-time - `messages` object[] - `state` 'initialized' | 'pendingSignature' | 'eddsaPendingCommitment' | 'eddsaPendingRShare' | 'eddsaPendingGShare' | 'ecdsaMPCv2Round1' | 'ecdsaMPCv2Round2' | 'ecdsaMPCv2Round3' | 'eddsaMPCv2Round1' | 'eddsaMPCv2Round2' | 'eddsaMPCv2Round3' | 'readyToCombineShares' | 'signed' | 'held' | 'delivered' | 'invalidSignature' | 'rejected', required — If supplied, only transaction request transaction state changes from the provided list will trigger notifications. If not provided, all transaction request transaction state changes will trigger notifications. - `messageRaw` string, required — The raw message to be signed - `signatureShares` object[] - … - `privateSignatureShares` object[] - … - `commitmentShares` object[] - … - `encryptedShares` object[] - … - `txHash` string — Transaction hash - `updatedDate` string, date-time — Date when the message was last updated - `createdDate` string, date-time — Date when the message was created - `messageEncoded` string — The encoded message - `messageBroadcastable` string — The broadcastable message - `messageStandardType` string — The encoded message - `derivationPath` string — Derivation path for the message - `combineSigShare` string — Combined signature share - `coin` string — Coin type for the message - `bitgoPaillierChallenge` unknown - `encryptedChallenge` string — BitGo's encrypted challenge for ECDSA with Range Proofs - `apiVersion` 'lite' | 'full' — The API version of the transaction request - `txRequestId` string, uuid, required - `idempotencyKey` string — The idempotency key of the transaction request - `walletId` string, required - `walletType` 'backing' | 'cold' | 'custodial' | 'custodialPaired' | 'hot' | 'advanced' | 'trading' — The type describes who owns the keys to the wallet associated to the TxRequest. - `version` number, required — The version of the transaction request - `enterpriseId` string — If the wallet that owns the TxRequest is owned by an enterprise then this is the Id of said enterprise. - `organizationId` string — The id of the organization the TxRequest's wallet belongs to. - `state` 'pendingApproval' | 'canceled' | 'rejected' | 'initialized' | 'pendingDelivery' | 'delivered' | 'pendingUserSignature' | 'pendingUserCommitment' | 'pendingUserRShare' | 'pendingUserGShare' | 'readyToSend' | 'signed' | 'failed', required - `date` string, date-time, required — The date and time this version of the TxRequest document was created. - `createdDate` string, date-time, required — The date and time the version 1 TxRequest document was created. - `userId` string, required — The Id of the User that produced this version of the TxRequest document. Could have created a new document or updated an existing document. - `initiatedBy` string, required — The Id of the User that originally created the TxRequest document (initiated the TxRequest). - `updatedBy` string, required — The Id of the User that last updated the TxRequest document. This is an alias for the userId field. - `intent` unknown - `intents` unknown[], required - unknown - `pendingApprovalId` string — The id of the Pending Approval that was created for the TxRequest if one was required. - `policiesChecked` boolean - `latest` boolean, required — Indicates if this is the latest transaction request - `isCanceled` boolean — True, if the transaction request is canceled. - `cancelReason` string — The reason the transaction request was canceled, if applicable. - `initiatedByDAppClient` boolean — True when the txRequest was initiated by a dApp OAuth client (e.g. Narval). - `txChannel` object — Immutable DeFi / marketplace channel classification (DEFI-300). - `clientId` string — OAuth dApp client id (Narval). - `connector` 'narval' | 'walletconnect' — External entry connector (narval, walletconnect). Omitted for internal BitGo flows. - `defiAction` 'approve' | 'deposit' | 'withdraw' - `protocol` 'morpho' | 'aave' | 'concrete' — DeFi protocol (morpho, aave, concrete). - `source` 'internal' | 'external', required - `type` 'defi', required - `vaultId` string - `walletConnectRequestId` string — defi-service walletconnect_requests.id when supplied on the intent. - `txRequestId` string, uuid, required - `verificationItems` string[] - `verificationRuleId` string — The ID of the verification rule - `videoApprovers` string[] - `walletRebalanceEventId` string — The ID of the wallet rebalance event - `policyRuleRequest` object - `action` string — The action of the policy rule request - `batch` object — Present when this approval is one batch of a split submission - `groupId` string, required - `index` number, required - `total` number, required - `update` object — The update details of the policy rule request (single-wallet) - `action` PolicyRuleAction - `type` 'deny' | 'getApproval' | 'getEnterpriseUserApproval' | 'getUserRoleApproval' | 'getAnyApproval' | 'getFinalApproval' | 'getVideoApproval' | 'getIdVerification' | 'verifyWalletRebalance' | 'getCustodianApproval' | 'getCustodialSignature' | 'triggerWebhookNotification' | 'performLivenessVerification' | 'recommendBackingWalletRouting' | 'getManualTrustReview' | 'getManualSupportReview' | 'getSupportManagerApproval' | 'getVideoApprovalFromSupport' | 'evaluateFraudRisk', required - `userIds` string[] - `coin` string — A cryptocurrency symbol or token ticker symbol - `condition` union - AddressListRuleUpdateCondition - `add` string - `remove` string - `metaData` object - AdvancedListRuleUpdateCondition - `add` AdvancedListRuleEntry - … - `remove` object - … - `verifyItems` object - … - TxUsdThresholdRuleCondition - `lowerBound` string, required - `upperBound` string - LimitRuleCondition - `amountString` string, required - `timeWindow` number, required — Time window in seconds for a velocity limit, between 1 and 30 days - `groupTags` string[] - `startDate` string, date-time - WebhookRuleCondition - `url` string, required — The url to query for the webhook - `generatePolicy` boolean — Should generate new whitelist policy when generatePolicy is undefined * - `id` string — The ID of the policy rule - `lockDate` string, date - `type` 'advancedWhitelist' | 'coinAddressWhitelist' | 'coinAddressBlacklist' - `walletId` string — Optional walletId field for multi-wallet updates - `updates` object[] - `action` PolicyRuleAction - `type` 'deny' | 'getApproval' | 'getEnterpriseUserApproval' | 'getUserRoleApproval' | 'getAnyApproval' | 'getFinalApproval' | 'getVideoApproval' | 'getIdVerification' | 'verifyWalletRebalance' | 'getCustodianApproval' | 'getCustodialSignature' | 'triggerWebhookNotification' | 'performLivenessVerification' | 'recommendBackingWalletRouting' | 'getManualTrustReview' | 'getManualSupportReview' | 'getSupportManagerApproval' | 'getVideoApprovalFromSupport' | 'evaluateFraudRisk', required - `userIds` string[] - `coin` string — A cryptocurrency symbol or token ticker symbol - `condition` union - AddressListRuleUpdateCondition - `add` string - `remove` string - `metaData` object - AdvancedListRuleUpdateCondition - `add` AdvancedListRuleEntry - … - `remove` object - … - `verifyItems` object - … - TxUsdThresholdRuleCondition - `lowerBound` string, required - `upperBound` string - LimitRuleCondition - `amountString` string, required - `timeWindow` number, required — Time window in seconds for a velocity limit, between 1 and 30 days - `groupTags` string[] - `startDate` string, date-time - WebhookRuleCondition - `url` string, required — The url to query for the webhook - `generatePolicy` boolean — Should generate new whitelist policy when generatePolicy is undefined * - `id` string — The ID of the policy rule - `lockDate` string, date - `type` 'advancedWhitelist' | 'coinAddressWhitelist' | 'coinAddressBlacklist' - `walletId` string — Optional walletId field for multi-wallet updates - `updateApprovalsRequiredRequest` object - `requestedApprovalsRequired` number — The number of requested approvals required - `updateEnterpriseRequest` object - `action` 'add' | 'update' | 'remove' - `email` string — The email of the user - `isVideoIdUser` boolean — Indicates if the user is a video ID user - `permissions` 'admin' | 'auditor' | 'wallet.create' — The permissions associated with the update - `userId` string — The ID of the user - `updateOrganizationRequest` object - `action` 'add' | 'update' | 'remove' - `email` string — The email of the user - `inviterInfo` object — CaaS org add-invite only (`POST /api/v2/organization/{orgId}/user`); UMS org user changes use `genericRequest`. - `email` string, required - `fullName` string, required - `id` string, required - `role` 'serviceUser' | 'admin' | 'member' | 'customer' — The role of the user in the organization - `userId` string — The ID of the user - `genericRequest` object - `anchors` object[] - `anchorType` 'policyRuleId' | 'settlementId' | 'crossChainRecoveryId', required - `key` string, required — The key of the anchor - `value` string, required — The value of the anchor - `changeType` 'create' | 'update' | 'delete' | 'unlock' | 'bulkUnlock' | 'bulkArchive' | 'duplicate' - `currentId` string — The current ID associated with the request - `description` string — The description of the request - `metadata` object — The metadata of the request - `proposedId` string — The proposed ID associated with the request - `resources` object[] - `currentId` string - `metadata` object - `proposedId` string - `resourceType` string — The resource type of the request - `enterpriseInviteRequest` object - `action` 'add' | 'update' | 'remove' - `email` string — The email of the user - `enterpriseInfo` object — Additional info used by the client accepting the invite - `id` string, required - `invitedBy` CaasOrganizationInviteInviterInfo, required — Inviter snapshot on CaaS org add-invite `inviterInfo` and enterprise invite `invitedBy`. Not used for UMS `genericRequest`. - `id` string, required - `email` string, required - `fullName` string, required - `name` string, required - `requiredVerificationStep` string, required - `userKycState` string - `isVideoIdUser` boolean — Indicates if the user is a video ID user - `permissions` 'admin' | 'auditor' | 'wallet.create' — The permissions associated with the invite - `userId` string — The ID of the user - `updateWalletSettingRequest` object - `userKeySigningRequired` object - `newValue` boolean, required - `oldValue` boolean, required - `updateWalletTagsRequest` object - `action` 'add' | 'remove', required - `customTags` string[], required - `state` union, required - 'pending' | 'awaitingSignature' | 'pendingFinalApproval' | 'pendingCustodianApproval' | 'pendingVideoApproval' | 'pendingIdVerification' | 'pendingLivenessVerification' | 'pendingManualTrustReview' | 'pendingManualSupportReview' | 'pendingVideoApprovalFromSupport' | 'pendingFraudRiskEvaluation' - 'approved' | 'processing' | 'rejected' - 'pendingVideoApproval' | 'pendingIdVerification' | 'awaitingSignature' | 'pendingCustodianApproval' | 'pendingManualTrustReview' | 'pendingFraudRiskEvaluation' - 'pendingVideoApproval' | 'pendingIdVerification' | 'awaitingSignature' | 'pendingCustodianApproval' | 'pendingManualTrustReview' | 'pendingFraudRiskEvaluation' - `scope` 'enterprise' | 'wallet' | 'organization' | 'global' | 'safe', required — What kind of entity the Pending Approval is tied to - `userIds` string[] - `approvalsRequired` number - `walletLabel` string — Label for the wallet - `addressLabels` object[] - `address` string, required - `label` string, required — The label - `walletLabel` string — The wallet label - `resolvers` object[] - `autoApproved` boolean — Whether the resolution was auto approved - `date` string, date-time — The date of resolution - `resolutionAction` 'approve' | 'reject' | 'skip' | 'fail' — Action taken during resolution - `resolutionMemo` string — Memo regarding the resolution - `resolutionType` 'pending' | 'awaitingSignature' | 'pendingFinalApproval' | 'pendingCustodianApproval' | 'pendingVideoApproval' | 'pendingIdVerification' | 'pendingLivenessVerification' | 'pendingManualTrustReview' | 'pendingManualSupportReview' | 'pendingVideoApprovalFromSupport' | 'pendingFraudRiskEvaluation', required - `user` string — The user who resolved the approval - `videoApprover` string — The approver of the video resolution - `videoException` string — Exception details for the video - `videoLink` string — Link to the resolution video - `approvers` string[] - `singleRunResults` object[] - `ruleId` string — The rule ID - `triggered` boolean — Whether the rule was triggered - `txRequestId` string, uuid — Transaction request ID - `videoId` object — ID for the video related to the approval - `date` string, date-time — The date of the video ID - `user` string — The user associated with the video ID - `videoApprover` string — The approver of the video - `videoException` string — The exception related to the video - `videoLink` string — The link to the video - `version` number — Version of the pending approval - `policyEvaluationId` string — ID for the policy evaluation - `actions` object[] - `approvers` string[] - `excludedApprovers` string[] - `id` string, required — The ID of the action - `name` string, required — The name of the action - `operator` 'AND' | 'OR' — The operator of the action - `parameters` PolicyActionParameters, required - `minRequired` union - string - number - `userIds` string[] - `initiatorIsAllowedToApprove` boolean - `webhookURL` string - `livenessCheckUser` 'transactionInitiator' | 'walletAdmins' | 'videoIdUsers' | 'enterpriseAdmin' - `isFallback` boolean - `walletSubtype` 'custodialCold' | 'custodialHot' | 'lightningCustody' - `userRoleIds` string[] - `resolvers` object[] - `autoApproved` boolean — Whether the resolution was auto approved - `date` string, date-time — The date of resolution - `resolutionAction` 'approve' | 'reject' | 'skip' | 'fail' — Action taken during resolution - `resolutionMemo` string — Memo regarding the resolution - `resolutionType` 'pending' | 'awaitingSignature' | 'pendingFinalApproval' | 'pendingCustodianApproval' | 'pendingVideoApproval' | 'pendingIdVerification' | 'pendingLivenessVerification' | 'pendingManualTrustReview' | 'pendingManualSupportReview' | 'pendingVideoApprovalFromSupport' | 'pendingFraudRiskEvaluation', required - `user` string — The user who resolved the approval - `videoApprover` string — The approver of the video resolution - `videoException` string — Exception details for the video - `videoLink` string — Link to the resolution video - `status` 'SKIPPED' | 'PENDING' | 'NOT_NEEDED' | 'COMPLETE' | 'CANCELLED' | 'FAILED' | 'AUTO_CANCELLED', required - `resolutionOrder` object[] - `actions` string[], required - `useLegacyPolicyEngine` boolean — Flag to use legacy policy engine - `videoCallId` string — ID for the video call - `lastUpdated` string, date-time — The last date the approval was processing - `freeze` object — The freeze state - `actions` object[] - `reason` string - `state` 'frozen' | 'unFrozen' - `time` string, date-time - `userId` string - `username` string - `state` 'frozen' | 'unFrozen' - `memo` object[] - `text` string, required — The text of the memo - `time` string, date-time, required — The time the memo was created - `userId` string, required — The user ID of the admin who created the memo - `username` string, required — The username of the admin who created the memo - `associatedInquiries` object[] - `inquiryId` string, required - `inquiryStatus` 'completed' | 'failed', required - `inquirySubType` 'withdrawalLivenessCheck' | 'managePolicyLivenessCheck' | 'govIdSelfie', required - `inquiryType` 'livenessCheck', required - `securityControlEvents` object[] - `control` string — The security control that was evaluated - `date` string, date-time, required — The date the event was recorded - `ip` string — The IP address of the user - `message` string — Message from the security control - `result` 'allowed' | 'blocked', required — Whether the user was allowed or blocked - `user` string, required — The user who triggered the security control check ## Other responses - `202` — Accepted --- [API](https://skmtc.net/bitgo/apis/bitgo-api.md) · [All operations](https://skmtc.net/bitgo/apis/bitgo-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bitgo/bitgo-api/revisions/e445c15e5bee/schema)