Log an access request
Typically called from the internal service catalog’s request form.
post
Body
application/json
Body
application/json
AccessRequestInput
requester_first_namestring
Example:Anna
requester_last_namestringrequired
Example:Bergmann
emailstring(email)required
Example:a.bergmann@nexora.example
business_unitstring
Example:Revenue Operations
consentobjectrequired
Record of consent under applicable data protection policy.
Show Child Parameters
requested_capability_profileobject
Show Child Parameters
Response
application/json
Response
application/json
Logged
AccessRequest
requester_first_namestring
Example:Anna
requester_last_namestringrequired
Example:Bergmann
emailstring(email)required
Example:a.bergmann@nexora.example
business_unitstring
Example:Revenue Operations
consentobjectrequired
Record of consent under applicable data protection policy.
Show Child Parameters
requested_capability_profileobject
Show Child Parameters
idstring
Example:req_71ab
statusstring
Allowed values:newscoredinviteddeclinedclosed
Example:scored
retention_untilstring(date)
Automatically set deletion deadline. Anonymized after it passes.
Example:2027-02-18
created_atstring(date-time)
Example:2026-08-18T10:22:04Z
post/requests
Authentication
Body
{
"requester_first_name": "Anna",
"requester_last_name": "Bergmann",
"email": "a.bergmann@nexora.example",
"business_unit": "Revenue Operations",
"consent": {
"purpose": "access_grant",
"granted_at": "2026-08-18T10:22:00Z"
},
"requested_capability_profile": {
"agent_categories": [
"copilot",
"workflow-agent"
],
"business_units": [
"Revenue Operations"
],
"min_integration_count": 3,
"max_cost_per_1k_tokens_usd": 0.02,
"requires_compliance_certification": true
}
}
application/json
Retrieve an access request
get
Path Parameters
requestIdstringrequired
Example:req_71ab
Response
application/json
Response
application/json
Access request
AccessRequest
requester_first_namestring
Example:Anna
requester_last_namestringrequired
Example:Bergmann
emailstring(email)required
Example:a.bergmann@nexora.example
business_unitstring
Example:Revenue Operations
consentobjectrequired
Record of consent under applicable data protection policy.
Show Child Parameters
requested_capability_profileobject
Show Child Parameters
idstring
Example:req_71ab
statusstring
Allowed values:newscoredinviteddeclinedclosed
Example:scored
retention_untilstring(date)
Automatically set deletion deadline. Anonymized after it passes.
Example:2027-02-18
created_atstring(date-time)
Example:2026-08-18T10:22:04Z
get/requests/{requestId}
Authentication
Path Parameters
application/json
Request deletion
Carries out a data subject’s rights request immediately. Personal
fields are permanently removed; activity that must be retained for
audit purposes remains pseudonymized.
post
Path Parameters
requestIdstringrequired
Example:req_71ab
Body
application/json
Body
application/json
reasonstringrequired
Allowed values:data_subject_requestretention_expiredduplicate
sourcestring
Example:email dated 2026-08-18
Response
202 application/json
Response
202 application/json
Deletion initiated
request_idstring
anonymized_atstring(date-time)
post/requests/{requestId}/deletion
Authentication
Path Parameters
Body
{
"reason": "data_subject_request"
}
202 application/json
Matching
Retrieve an access request's score
Shows how well the capability profile and the agent match - with the
individual criteria, so the rating stays traceable.
get
Path Parameters
requestIdstringrequired
Example:req_71ab
Response
200 application/json
Response
200 application/json
Score
Score
request_idstring
Example:req_71ab
agent_idstring
Example:agt_8f2c1a
pointsinteger
>= 0<= 100
Example:82
ratingstring
Allowed values:lowmediumhigh
criteriaarray[object]
Show Child Parameters
get/requests/{requestId}/score
Authentication
Path Parameters
200 application/json