Répondre à une mise en attente

POST/api/public/v1/holds/{native_tool_use_id}/answer

cURL

curl --fail-with-body -X POST 'https://app.openlatch.ai/api/public/v1/holds/<native_tool_use_id>/answer' \
  -H "Authorization: Bearer $OPENLATCH_API_KEY" \
  -H 'Content-Type: application/json' \
  -d '{"decision":"approve"}'

Python

import json
import os
import urllib.request

body = '{"decision":"approve"}'
request = urllib.request.Request(
    'https://app.openlatch.ai/api/public/v1/holds/<native_tool_use_id>/answer',
    method='POST',
    data=body.encode(),
    headers={
        'Authorization': 'Bearer ' + os.environ['OPENLATCH_API_KEY'],
        'Content-Type': 'application/json',
    },
)
with urllib.request.urlopen(request) as response:
    text = response.read().decode()
    print(json.dumps(json.loads(text), indent=2) if text else response.status)

Bash

#!/usr/bin/env bash
set -euo pipefail

curl -sS --fail-with-body -X POST 'https://app.openlatch.ai/api/public/v1/holds/<native_tool_use_id>/answer' \
  -H "Authorization: Bearer $OPENLATCH_API_KEY" \
  -H 'Content-Type: application/json' \
  -d '{"decision":"approve"}' | jq .

PowerShell

$headers = @{
  Authorization = "Bearer $env:OPENLATCH_API_KEY"
}
$body = '{"decision":"approve"}'
Invoke-RestMethod -Method POST -Uri 'https://app.openlatch.ai/api/public/v1/holds/<native_tool_use_id>/answer' -Headers $headers -ContentType 'application/json; charset=utf-8' -Body $body | ConvertTo-Json -Depth 20

Autorisation

Rôle dans l’organisation	Ce point de terminaison
owner	Autorisé
admin	Autorisé
editor	Autorisé
viewer	Non autorisé

Une clé porte le rôle que son propriétaire détient dans l’organisation. Voir Authentification.

Portée de clé d’API : triage:write

Paramètres de chemin

Paramètre	Type	Description
native_tool_use_id	string	Obligatoire.

Paramètres d’en-tête

Paramètre	Type	Description
Idempotency-Key	string or null	Optional. Makes the request safe to retry: the same key and the same request, within 24 hours, returns the stored response with Idempotent-Replayed: true and runs once.

Corps de la requête

Champ	Type	Description
decision	string — one of approve, reject	Obligatoire.

Réponse

• 200 OK — l’appel a réussi.
• 400 Bad Request — BAD_REQUEST
• 401 Unauthorized — UNAUTHORIZED
• 402 Payment Required — license_expired
• 403 Forbidden — FEATURE_DISABLED, FORBIDDEN, INSUFFICIENT_SCOPE
• 404 Not Found — NOT_FOUND
• 409 Conflict — IDEMPOTENCY_IN_PROGRESS, NOT_PENDING
• 422 Unprocessable Content — IDEMPOTENCY_KEY_REUSED, INVALID_ID, VALIDATION_ERROR
• 429 Too Many Requests — TOO_MANY_REQUESTS
• 500 Internal Server Error — INTERNAL_SERVER_ERROR, tenant_isolation_violation
• 503 Service Unavailable — FEATURE_STATE_UNAVAILABLE, SERVICE_UNAVAILABLE

Champs de la réponse

Champ	Type	Description
data	object	Obligatoire.
data.action_summary	string or null
data.agent_id	string or null
data.decided_at	string (date-time) or null
data.effects	array of object
data.id	string	Obligatoire.
data.native_tool_use_id	string	Obligatoire.
data.policy_public_id	string or null
data.requested_at	string (date-time)	Obligatoire.
data.state	string	Obligatoire.
data.timeout_at	string (date-time)	Obligatoire.

Exemple de réponse

{
  "data": {
    "action_summary": "string",
    "agent_id": "agt_01jbwa2k1vfrn9y42xhgxhmzj2",
    "decided_at": "2026-01-15T14:32:05Z",
    "effects": [
      {}
    ],
    "id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10",
    "native_tool_use_id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10",
    "policy_public_id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10",
    "requested_at": "2026-01-15T14:32:05Z",
    "state": "string",
    "timeout_at": "2026-01-15T14:32:05Z"
  }
}

Voir aussi

• GET Anomalies
• GET Détail d’une anomalie
• PATCH Modifier une anomalie