---
title: "Review a request to access organization resources with a fine-grained personal access token"
method: POST
path: "/orgs/{org}/personal-access-token-requests/{pat_request_id}"
tags: ["orgs"]
---

# Review a request to access organization resources with a fine-grained personal access token

`POST /orgs/{org}/personal-access-token-requests/{pat_request_id}`

Approves or denies a pending request to access organization resources via a fine-grained personal access token.

Only GitHub Apps can use this endpoint.

## Path parameters

- `org` string, required
- `pat_request_id` integer, required

## Request body

- object
  - `action` 'approve' | 'deny', required — Action to apply to the request.
  - `reason` string, nullable — Reason for approving or denying the request. Max 1024 characters.

## Response `204`

A header with no content is returned.

## Other responses

- `403` — Forbidden
- `404` — Resource not found
- `422` — Validation failed, or the endpoint has been spammed.
- `500` — Internal Error

---

[API](https://skmtc.net/github/apis/github-v3-rest-api.md) · [All operations](https://skmtc.net/github/apis/github-v3-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/github/github-v3-rest-api/versions/a367f7028301/schema)