Access & Onboarding Requests

List access requests

get

Query Parameters

capability_profile_activeboolean
statusstring

Allowed values:newscoredinviteddeclinedclosed

Example:scored

limitinteger

Default:25

>= 1<= 100

cursorstring

Response

application/json

Results list

dataarray
Show Child Parameters
pageobject

Cursor-based pagination.

Show Child Parameters
get/requests
 
application/json

Log an access request

Typically called from the internal service catalog’s request form.

post

Body

application/json

AccessRequestInput

requester_first_namestring

Example:Anna

requester_last_namestringrequired

Example:Bergmann

emailstring(email)required

Example:a.bergmann@nexora.example

business_unitstring

Example:Revenue Operations

consentobjectrequired

Record of consent under applicable data protection policy.

Show Child Parameters
requested_capability_profileobject
Show Child Parameters

Response

application/json

Logged

AccessRequest

requester_first_namestring

Example:Anna

requester_last_namestringrequired

Example:Bergmann

emailstring(email)required

Example:a.bergmann@nexora.example

business_unitstring

Example:Revenue Operations

consentobjectrequired

Record of consent under applicable data protection policy.

Show Child Parameters
requested_capability_profileobject
Show Child Parameters
idstring

Example:req_71ab

statusstring

Allowed values:newscoredinviteddeclinedclosed

Example:scored

retention_untilstring(date)

Automatically set deletion deadline. Anonymized after it passes.

Example:2027-02-18

created_atstring(date-time)

Example:2026-08-18T10:22:04Z

post/requests

Body

{ "requester_first_name": "Anna", "requester_last_name": "Bergmann", "email": "a.bergmann@nexora.example", "business_unit": "Revenue Operations", "consent": { "purpose": "access_grant", "granted_at": "2026-08-18T10:22:00Z" }, "requested_capability_profile": { "agent_categories": [ "copilot", "workflow-agent" ], "business_units": [ "Revenue Operations" ], "min_integration_count": 3, "max_cost_per_1k_tokens_usd": 0.02, "requires_compliance_certification": true } }
 
application/json

Retrieve an access request

get

Path Parameters

requestIdstringrequired

Example:req_71ab

Response

application/json

Access request

AccessRequest

requester_first_namestring

Example:Anna

requester_last_namestringrequired

Example:Bergmann

emailstring(email)required

Example:a.bergmann@nexora.example

business_unitstring

Example:Revenue Operations

consentobjectrequired

Record of consent under applicable data protection policy.

Show Child Parameters
requested_capability_profileobject
Show Child Parameters
idstring

Example:req_71ab

statusstring

Allowed values:newscoredinviteddeclinedclosed

Example:scored

retention_untilstring(date)

Automatically set deletion deadline. Anonymized after it passes.

Example:2027-02-18

created_atstring(date-time)

Example:2026-08-18T10:22:04Z

get/requests/{requestId}
 
application/json

Request deletion

Carries out a data subject’s rights request immediately. Personal
fields are permanently removed; activity that must be retained for
audit purposes remains pseudonymized.

post

Path Parameters

requestIdstringrequired

Example:req_71ab

Body

application/json
reasonstringrequired

Allowed values:data_subject_requestretention_expiredduplicate

sourcestring

Example:email dated 2026-08-18

Response

202 application/json

Deletion initiated

request_idstring
anonymized_atstring(date-time)
post/requests/{requestId}/deletion

Body

{ "reason": "data_subject_request" }
 
202 application/json

Matching