Approve an item
https://api.norreach.app/v1/approvals/{key}/approveSays yes as the key's creator — it goes out (or goes live) through the same checks as the Approvals page: the outreach pause, the creator's role, the item re-read in this workspace. Optional edits change the words (or a meeting's time, length, email or host) as it is approved. An ad launch also needs ads:spend, a landing page pages:publish, a plan card plans:approve. Already decided → 409 already_decided; a claim that needs checking → 409 conflict (decide it in the app). dry_run=true checks it still waits and changes nothing.
curl -X POST "https://api.norreach.app/v1/approvals/{key}/approve" \
-H "Authorization: Bearer $NORREACH_API_KEY" \
-H "Idempotency-Key: $(uuidgen)" \
-H "Content-Type: application/json" \
-d '{
"edits": {
"body": "Hi Anna, a shorter version …"
}
}'{
"object": "approval_decision",
"key": "plan_card:5b6c7d8e-9f0a-4b1c-8d2e-3f4a5b6c7d8e",
"decision": "approve",
"status": "approved",
"count": 1,
"note": "Approved — it goes out on schedule."
}Authorizations
Bearer authentication: send Authorization: Bearer <key>, with an API key or an OAuth access token. The key needs the scope approvals:decide. API keys and scopes
Path parameters
An approval key, e.g. plan_card:<uuid>, meeting:<uuid>, rule_send:<uuid> (URL-encode the colon in paths).
Query parameters
Run every check and return what would happen, changing nothing.
Headers
Any unique string (≤ 255). The same key with the same request returns the first answer for 24 hours.
Body
application/json
Edits approved together with the item.
Show child attributesHide child attributes
The edited words (email body, message text, a card's words).
Show child attributesHide child attributes
Another member to host it (staff only).
Approve even though the host's calendar shows a clash.
Response
200application/json— Approve an item
Errors
Errors are application/problem+json with a stable code.
| Status | Code | Meaning |
|---|---|---|
| 400 | bad_request | The request couldn't be read. |
| 400 | unknown_field | The request has a field this operation doesn't know. |
| 400 | idempotency_key_required | This operation needs an Idempotency-Key header. |
| 401 | unauthorized | A valid API key is required. |
| 403 | insufficient_scope | This API key doesn't have the scope this operation needs. |
| 403 | feature_not_enabled | The API isn't switched on for this workspace. |
| 403 | role_forbidden | The key's creator's role can't do this. |
| 404 | not_found | That doesn't exist. |
| 409 | idempotency_in_progress | A request with this Idempotency-Key is still running. |
| 409 | already_decided | Already handled. |
| 409 | conflict | That conflicts with the current state. |
| 409 | outreach_paused | Outreach is paused for this workspace. |
| 413 | too_large | The request body is too large. |
| 422 | validation_failed | The request has invalid fields. |
| 422 | idempotency_mismatch | This Idempotency-Key was used with a different request. |
| 429 | rate_limited | Too many requests. Slow down and try again. |
| 429 | number_cap_reached | The workspace's limit for buying numbers through the API is reached. |
| 500 | server_error | Something went wrong on our side. |
| 503 | unavailable | The API isn't available right now. Try again shortly. |