Get an approval
Error codes: invalid_api_key, parameter_invalid, resource_not_found, scope_missing, rate_limited.
Authorizations
Server API key, scoped. pk_test_ keys hit the sandbox tenant.
Headers
Optional client correlation id, up to 128 characters. It is not echoed: the response's X-Request-Id is always
our own req_… id. We log your value with the request as client_request_id, so support can find a request by
either id. A longer value is refused with 400 parameter_invalid.
128Path Parameters
apr_…
^apr_[0-9A-HJKMNP-TV-Z]{26}$Response
The approval.
The shared Approval (CONVENTIONS §9) plus what the customer approval screens show. Generic over every
customer ApprovalKind; payment-specific fields are present only for payment kinds.
apr_…
"approval"What an approval is for. Customers see transfer, batch, pay_run, agent_payment, member_role_change and limit_change; the other kinds are PanoFlow's own and never returned to customers.
transfer, batch, pay_run, agent_payment, member_role_change, limit_change, business_approval, business_freeze, business_unfreeze, payment_reversal, ledger_adjustment, recon_resolution, fee_refund, staff_role_change, staff_super_admin, str_filing, pricing_change, risk_rule_change, feature_flag_change, partner_secret_rotation Id of the thing being approved.
Approval state.
pending, approved, rejected, expired, canceled Who did something. Shown in activity, approvals and the audit log.
RFC 3339, UTC.
"2026-10-27T08:41:00Z"
One-line human summary, e.g. "Pay ₦850,000.00 to NGOZI ADEYEMI".
An amount in minor units (kobo, cents) with its currency. Never a decimal.
Why the requester asked.
Note from the person who decided.
Who did something. Shown in activity, approvals and the audit log.
RFC 3339, UTC.
"2026-10-27T08:41:00Z"
RFC 3339, UTC.
"2026-10-27T08:41:00Z"
Object type of subject_id, e.g. transfer, batch, pay_run, membership.
Why it needs approval.
For transfer and agent_payment, the account being paid ("••••4120 · First Bank · name confirmed").
Enough of a PanoFlow account to show it ("Naira · Main · ••••6789"). Full account in the Accounts API.
For agent_payment, the agent (agt_…).
For agent_payment, the MCP client the agent used ("through Claude").