Machine admin
Waiting approvals (machine)
GET
/v1/admin/approvalsapprovals:read. What is waiting and since when, plus suggested rules. A machine reads approvals; it never decides them.
#Authentication
Service token
A scoped machine token (ims_...) made by an owner or admin under Settings, sent as Authorization: Bearer. Each route needs one scope; tokens expire within 90 days and can be pinned to address ranges. A token can stop agents but never start them, and never decides an approval.