Skip to content

List approval instance rows

Platform module

GET/approval-instancesapprovalInstances.list

An approval in flight for one subject. Returns a cursor page of approval instance rows the caller may see. The default order is `created_at` ascending. Supports sparse fieldsets and the filter grammar.

  • Requires the capability inbox.notifications.read.
  • OAuth scopes: inbox.
  • Cursor-paginated: limit, cursor, fields, sort and filter apply.
  • Error statuses: 400, 401, 429. Errors are RFC 9457 problem details.

Path and query parameters

approvalInstances.list: Path and query parameters
FieldTypeRequiredDescription
limitLimitNoPage size. Default 50, maximum 200.Constraints: range 1 to 200
cursorCursorNoOpaque cursor from `next_cursor` of the previous page.Constraints: length 1 to any
fieldsFieldsNoSparse fieldset: a comma-separated list of top-level fields to return. `id` is always returned.Constraints: pattern ^[a-z_][a-z0-9_]*(,[a-z_][a-z0-9_]*)*$
sortSortNoSort keys, comma-separated; a leading `-` sorts descending. Without `sort`, the documented default order applies (coded lists sort in numeric code order).Constraints: pattern ^-?[a-z_][a-z0-9_]*(,-?[a-z_][a-z0-9_]*)*$
filterFilterNoFilter grammar `filter[field][op]=value`. Operators: eq, ne, lt, lte, gt, gte, in (comma-separated values), is_null (true or false) and contains. Conditions combine with AND.

Response 200: a page of ApprovalInstance

approvalInstances.list: ApprovalInstance
FieldTypeRequiredDescription
idstring (uuid)YesIdentifier of the approval instance.
org_idstring (uuid)YesIdentifier of the owning organization, derived from the parent row and never accepted from the caller.
created_atstring (date-time)YesWhen the row was created.
created_bystring (uuid) | nullYesIdentifier of the person who created the row; null when a seed, platform or system process created it.
updated_atstring (date-time)YesWhen the row was last updated.
updated_bystring (uuid) | nullYesIdentifier of the person who last updated the row; null when a seed, platform or system process updated it.
approval_policy_idstring (uuid)YesIdentifier of the approval policy.
requested_bystring (uuid)YesIdentifier of the requester.
approval_state"In Review" | "Approved" | "Rejected" | "Canceled"YesApproval state.
document_type"Purchase Order" | "Change Order" | "Expense" | "Invoice Approval" | "Payroll Run" | "Requisition"YesSpend document type.
document_idstring (uuid)YesIdentifier of the spend document submitted for approval.
subject_tablestringYesTable of the document.Constraints: pattern ^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$
subject_referencestring | nullYesThe document's own number or name.Constraints: length 1 to 300
project_idstring (uuid) | nullYesIdentifier of the project of the document.
amount_minorinteger (int64) | nullYesAmount submitted; the approval covers the document while its amount stays at or below it. Never null: an unpriced document is not submitted. Integer minor units of the resource currency; null means unpriced, never zero.
currency_codestringYesISO 4217 currency of the amount.Constraints: pattern ^[A-Z]{3}$
current_stepintegerYesStep the approval waits on; the last step once decided.Constraints: range 1 to any
decided_atstring (date-time) | nullYesWhen it was approved, rejected or canceled.
{
  "data": [
    {
      "id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
      "org_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
      "created_at": "2026-10-08T14:30:00Z",
      "created_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
      "updated_at": "2026-10-08T14:30:00Z",
      "updated_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
      "approval_policy_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
      "requested_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
      "approval_state": "In Review",
      "document_type": "Purchase Order",
      "document_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
      "subject_table": "purchase_orders",
      "subject_reference": "17",
      "project_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
      "amount_minor": 4000000,
      "currency_code": "USD",
      "current_step": 1,
      "decided_at": "2026-10-08T14:30:00Z"
    }
  ],
  "next_cursor": null
}

Code samples

curl -X GET "$XOS_BASE_URL/approval-instances" \
  -H "Authorization: Bearer $XOS_API_KEY"
for await (const row of xos.approvalInstances.listAll()) {
  console.log(row);
}
for row in xos.approval_instances.list_all():
    print(row)
xos approval-instances list --all