Approve a version (or withdraw approval)

POST

/v1/home/approvals

curl --request POST \
  --url https://shareout.site/v1/home/approvals \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "artifactId": "example", "versionId": "example", "approved": true }'

• Production

Records that the caller approved a version — the live one unless versionId is given. Approvals are a record shown in History and Details, not a publish gate. Needs comment access (owner, collaborator, internal member of a workspace- or public-visible artifact, or a comment grant). The only REST path for approvals; session cookie or Bearer token.

Authorizations

• bearerAuth

Request Body^required

Media typeapplication/json

object

artifactId

required

string

versionId

A version id (ver_…); defaults to the live version.

string

approved

false withdraws the caller’s approval.

boolean

default: true

Responses

200

Review state after the change

Media typeapplication/json

object

live_version_id

string | null

live_version_no

integer | null

can_review

Caller may resolve, assign and approve.

boolean

approvals

Array<object>

object

version_id

string

version_no

integer

user_id

string

name

string | null

email

string | null

created_at

string format: date-time

my_approvals

Version ids the caller (any linked account) approved.

Array<string>

Example^generated

{
  "live_version_id": "example",
  "live_version_no": 1,
  "can_review": true,
  "approvals": [
    {
      "version_id": "example",
      "version_no": 1,
      "user_id": "example",
      "name": "example",
      "email": "example",
      "created_at": "2026-04-15T12:00:00Z"
    }
  ],
  "my_approvals": [
    "example"
  ]
}

400

Invalid request

Media typeapplication/json

object

success

required

boolean

error

required

Human-readable message.

string

code

required

Machine-readable error code.

string

request_id

Correlation id (also the X-Request-Id header). Quote it in support tickets.

string

reason

Finer cause under code. For UNAUTHORIZED: missing, invalid, revoked or expired.

string

hint

What to do next, in plain words.

string

suggestion

string

param

The request field at fault.

string

docs

Doc page for this error.

string

redirect_url

string

support

Present on 5xx — how to reach a human.

object

how

string

include

Array<string>

Example

{
  "success": false,
  "support": {
    "how": "POST /v1/support/tickets",
    "include": [
      "request_id"
    ]
  }
}

403

FORBIDDEN — you need comment access to approve

404

NOT_FOUND (artifact) or VERSION_NOT_FOUND