List the pending work in this API key's authoring capability's scope

curl --request GET \
  --url https://api.meshqu.com/v1/authoring-capabilities/current/pending-work \
  --header 'Authorization: Bearer <token>' \
  --header 'X-MeshQu-Tenant-Id: <api-key>'

import requests

url = "https://api.meshqu.com/v1/authoring-capabilities/current/pending-work"

headers = {
    "Authorization": "Bearer <token>",
    "X-MeshQu-Tenant-Id": "<api-key>"
}

response = requests.get(url, headers=headers)

print(response.text)

const options = {
  method: 'GET',
  headers: {Authorization: 'Bearer <token>', 'X-MeshQu-Tenant-Id': '<api-key>'}
};

fetch('https://api.meshqu.com/v1/authoring-capabilities/current/pending-work', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.meshqu.com/v1/authoring-capabilities/current/pending-work",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "X-MeshQu-Tenant-Id: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.meshqu.com/v1/authoring-capabilities/current/pending-work"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("X-MeshQu-Tenant-Id", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.get("https://api.meshqu.com/v1/authoring-capabilities/current/pending-work")
  .header("Authorization", "Bearer <token>")
  .header("X-MeshQu-Tenant-Id", "<api-key>")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.meshqu.com/v1/authoring-capabilities/current/pending-work")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
request["X-MeshQu-Tenant-Id"] = '<api-key>'

response = http.request(request)
puts response.read_body

{
  "capability_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "root_capability_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "policy_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "policy_version_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "policy_version_number": 2,
  "observed_at": "2023-11-07T05:31:56Z",
  "items": [
    {
      "kind": "review",
      "requested_act": "review",
      "policy_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "policy_name": "<string>",
      "policy_code": "<string>",
      "policy_version_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "version": 2,
      "status": "draft",
      "draft_revision": 1,
      "entered_state_at": "2023-11-07T05:31:56Z",
      "entered_state_source": "submitted_at",
      "submission_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "submission_sequence": 2,
      "candidate_revision": 2,
      "accept_record_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "superseded_by_version": 2
    }
  ],
  "returns_not_answerable": [
    {
      "policy_version_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "version": 2,
      "submission_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "review_record_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "returned_by": "<string>",
      "returned_at": "2023-11-07T05:31:56Z",
      "reason": "not_lineage_previous"
    }
  ],
  "next_seal_answers": {
    "policy_version_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "version": 2,
    "submission_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "review_record_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "returned_by": "<string>",
    "returned_at": "2023-11-07T05:31:56Z"
  },
  "lineage_unresolved": true,
  "lineage_not_backed_by_grant": true
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "details": "<unknown>"
  },
  "correlation_id": "<string>"
}

Authoring Capabilities

List the pending work in this API key's authoring capability's scope

The pending review and activation work (the GET /v1/work/pending items) for the policy version the calling key’s governing authoring capability names and, at most, the ONE earlier draft that version’s next seal is bound to (included only when a grant of the same capability chain names it); the return that next seal must name as answers_record_id, if any; and the unanswered returns in view that no seal can answer, as information. The scope comes only from the key’s signed grants: the request takes no path, body or query parameters. Nothing in the response names who acts next or grants anything; review, ratify and activate stay human.

Reachable only by a credential holding the authoring:capability scope and no policies:read / policies:write, whose capability grants BOTH policy.read and review.retrieve (after any intent narrowing). A broad key and a human session receive 403 FORBIDDEN; a capability that is missing, revoked or exhausted (anywhere in its chain), expired, not yet valid or fails integrity receives the gate’s 403 AUTHORING_CAPABILITY_* code; a grant lacking either action receives 403 AUTHORING_CAPABILITY_OUT_OF_SCOPE; a key holding policies:read or policies:write beside the carrier scope, or a capability carried to a successor while the read ran, receives 403 AUTHORING_CAPABILITY_OBJECT_MISMATCH.

Not a snapshot: several statements, and a seal, return or record can commit between them. Re-read the exact subject before acting. Poll no more than once a minute while something is pending, backing off to five minutes when nothing changes. Writes nothing.

GET

authoring-capabilities

current

pending-work

List the pending work in this API key's authoring capability's scope

curl --request GET \
  --url https://api.meshqu.com/v1/authoring-capabilities/current/pending-work \
  --header 'Authorization: Bearer <token>' \
  --header 'X-MeshQu-Tenant-Id: <api-key>'

import requests

url = "https://api.meshqu.com/v1/authoring-capabilities/current/pending-work"

headers = {
    "Authorization": "Bearer <token>",
    "X-MeshQu-Tenant-Id": "<api-key>"
}

response = requests.get(url, headers=headers)

print(response.text)

const options = {
  method: 'GET',
  headers: {Authorization: 'Bearer <token>', 'X-MeshQu-Tenant-Id': '<api-key>'}
};

fetch('https://api.meshqu.com/v1/authoring-capabilities/current/pending-work', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.meshqu.com/v1/authoring-capabilities/current/pending-work",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "X-MeshQu-Tenant-Id: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.meshqu.com/v1/authoring-capabilities/current/pending-work"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("X-MeshQu-Tenant-Id", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.get("https://api.meshqu.com/v1/authoring-capabilities/current/pending-work")
  .header("Authorization", "Bearer <token>")
  .header("X-MeshQu-Tenant-Id", "<api-key>")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.meshqu.com/v1/authoring-capabilities/current/pending-work")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
request["X-MeshQu-Tenant-Id"] = '<api-key>'

response = http.request(request)
puts response.read_body

{
  "capability_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "root_capability_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "policy_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "policy_version_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "policy_version_number": 2,
  "observed_at": "2023-11-07T05:31:56Z",
  "items": [
    {
      "kind": "review",
      "requested_act": "review",
      "policy_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "policy_name": "<string>",
      "policy_code": "<string>",
      "policy_version_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "version": 2,
      "status": "draft",
      "draft_revision": 1,
      "entered_state_at": "2023-11-07T05:31:56Z",
      "entered_state_source": "submitted_at",
      "submission_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "submission_sequence": 2,
      "candidate_revision": 2,
      "accept_record_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "superseded_by_version": 2
    }
  ],
  "returns_not_answerable": [
    {
      "policy_version_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "version": 2,
      "submission_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "review_record_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "returned_by": "<string>",
      "returned_at": "2023-11-07T05:31:56Z",
      "reason": "not_lineage_previous"
    }
  ],
  "next_seal_answers": {
    "policy_version_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "version": 2,
    "submission_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "review_record_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "returned_by": "<string>",
    "returned_at": "2023-11-07T05:31:56Z"
  },
  "lineage_unresolved": true,
  "lineage_not_backed_by_grant": true
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "details": "<unknown>"
  },
  "correlation_id": "<string>"
}

Authorizations

Authorization

string

header

required

MeshQu API key passed as a bearer token: Authorization: Bearer mqu_…. Mint one in the console (Settings → API keys).

X-MeshQu-Tenant-Id

string

header

required

Tenant UUID for multi-tenant isolation. Required on all authenticated routes — validated before authentication (middleware/tenant.ts), so a missing or non-UUID header returns 400 (MISSING_TENANT_ID / INVALID_TENANT_ID) before the API key is checked.

Response

Default Response

capability_id

string<uuid>

required

The grant whose signed chain scoped this read: the grant governing the key when the read ran. Compare it with the grant you hold; a difference means the capability was carried.

root_capability_id

string<uuid>

required

The grant that chain starts at (equal to capability_id unless it was carried).

policy_id

string<uuid>

required

The governing grant's policy.

policy_version_id

string<uuid>

required

The governing grant's policy version: the head.

policy_version_number

integer

required

Required range: x >= 1

observed_at

string<date-time>

required

Server time at the start of the read. It is NOT a snapshot time: the read is several statements, and a seal, return or record can commit between them. Before acting, re-read the exact subject.

items

object[]

required

SW-201 pending-work items for the head and, at most, the ONE earlier draft the head's next seal is bound to (the lineage-previous version, when a grant of this capability's chain names it). Always present; may be empty. Names no actor and no eligibility.

Show child attributes

returns_not_answerable

object[]

required

Unanswered returns in view that no seal is required to answer and none can. Information, not a task. Always present; may be empty.

Show child attributes

next_seal_answers

object

The one return the NEXT SEAL OF THIS VERSION must name as answers_record_id, whoever makes it. Present exactly when the lineage-previous submission (the same lookup the seal route refuses on) was returned and this version is draft or submitted. Absent otherwise.

Show child attributes

lineage_unresolved

enum<boolean>

Present when this version's draft-supersession lineage could not be followed back (a cycle, more than 64 links, or a dangling link) at ANY point — the same meaning as on the review-submission list read. The absence of next_seal_answers, of an earlier draft's item, or of a return then says nothing. Only when no sealed version was reached before the failure is the next seal refused 409 LINEAGE_UNRESOLVED; a failure beyond the sealed version the next seal answers does not refuse it, and next_seal_answers is then still given.

Available options:

true

lineage_not_backed_by_grant

enum<boolean>

Present when the lineage-previous version (the one the next seal is bound to) was found but no grant of this capability's chain names it, so that version's items are not listed. The seal is not refused for this reason, which is why next_seal_answers is still given. It can appear together with lineage_unresolved when the walk failed only BEYOND that version.

Available options:

true

Getting Started

Concepts

API Reference

SDK

Guides

Recipes

Security

Meta

List the pending work in this API key's authoring capability's scope

Authorizations

Response