GET	/api/approvals/:token
POST	/api/approvals/:token

Peek approval-link request summary

GET/api/approvals/:token

Render data for the confirmation page (no consume)

Authentication: none — the token in the request is the credential.

Path parameters

Name	Type	Notes
token	string

curl -X GET "https://shellius.example.com/api/approvals/{token}"

200 OK

{ "success": true, "data": { … } }

Approve/reject via email link

POST/api/approvals/:token

Apply the decision (consumes the token)

Authentication: none — the token in the request is the credential.

Path parameters

Name	Type	Notes
token	string

Request body

Name	Type	Required	Notes
decision	string	Yes	One of approve, reject.
reason	string	No	At most 1000 characters. May be null.

curl -X POST "https://shellius.example.com/api/approvals/{token}" \
  -H "Content-Type: application/json" \
  -d '{
    "decision": "approve"
  }'

200 OK

{ "success": true, "data": { … } }