List approval rules
Your Always allow and two-people rules, every change to them, and what can never be always allowed.
GET
/
employees
/
approval-rules
List approval rules
curl --request GET \
--url https://app.mithunai.com/mithunai/api/v1/employees/approval-rules \
--header 'Authorization: Bearer <token>'import requests
url = "https://app.mithunai.com/mithunai/api/v1/employees/approval-rules"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://app.mithunai.com/mithunai/api/v1/employees/approval-rules', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"rules": [
{}
],
"changes": [
{}
],
"never_always_allowed": [
{}
]
}Each rule is for one employee, one tool and one kind of action — never a blanket allow.
changes
lists every rule added and revoked, newest first, with who and when. Requires agent.read, so an API
key can read.
AI employees are in beta. Every route answers
404 unless your deployment has switched the
beta on, and these routes need a second switch, off by default. See Approval
rules.Query
string
Only this employee’s changes:
support, itsm, devops, marketer, sales or finance.integer
How many changes, 1 to 100. Default 50.
Response
object[]
required
role, tool, action_type, title, mode (always_allow or two_people), created_by and
created_at.object[]
required
role, action_type, title, mode, change (added or revoked), changed_by and
changed_at.object[]
required
action_type and why (money, deleting, publishing or permissions): kinds of action no
rule and no policy can let run without a person.Last modified on November 7, 2026
List approval rules
curl --request GET \
--url https://app.mithunai.com/mithunai/api/v1/employees/approval-rules \
--header 'Authorization: Bearer <token>'import requests
url = "https://app.mithunai.com/mithunai/api/v1/employees/approval-rules"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://app.mithunai.com/mithunai/api/v1/employees/approval-rules', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"rules": [
{}
],
"changes": [
{}
],
"never_always_allowed": [
{}
]
}