--- title: Bulk approve / deny / assign_to_me — POST /api/v1/executions/review_bulk_actions description: Always asynchronous. Approve/deny enqueue the resume per execution (enqueued counts them). Cap of 25 ids per request. canonical_url: "https://cascades.crscreditapi.com/docs/api/executions/bulk-review-actions" doc_version: "1.0.0" last_updated: "2026-10-09T18:04:24Z" source: "public/api-docs/v1/swagger.yaml#bulkReviewActions" --- # Bulk approve / deny / assign_to_me — POST /api/v1/executions/review_bulk_actions `POST https://cascades.crscreditapi.com/api/v1/executions/review_bulk_actions` - Operation id: `bulkReviewActions` - Scopes: `executions:write` - Idempotent: no - OpenAPI: https://cascades.crscreditapi.com/openapi.json · https://cascades.crscreditapi.com/openapi.yaml (operationId `bulkReviewActions`) Always asynchronous. Approve/deny enqueue the resume per execution (`enqueued` counts them). Cap of 25 ids per request. Ids that do not resolve in the caller's scope are reported as `not_found` in `skipped` so existence is not leaked. Requires `executions:write`. ## Request body `application/json` — `BulkReviewRequest` | Field | Type | Required | Description | |---|---|---|---| | `execution_ids` | array of integer | yes | | | `bulk_action` | string | yes | One of: `"approve"`, `"deny"`, `"assign_to_me"`. | | `note` | string | no | | ```json { "execution_ids": [ 1842, 1843, 1844, 1845, 1846 ], "bulk_action": "approve", "note": "Manual review batch 2026-09-09 — OFAC and credit clean." } ``` ## Responses ### 202 — Bulk action processed `application/json` | Field | Type | Required | Description | |---|---|---|---| | `data` | BulkReviewResult | no | | |   `object` | string | no | | |   `applied` | integer | no | | |   `enqueued` | integer | no | | |   `skipped` | array of object | no | | |     `id` | integer | no | | |     `reason` | string | no | One of: `"not_awaiting_review"`, `"review_not_pending"`, `"assigned_elsewhere"`, `"live_mode_forbidden"`, `"already_assigned"`, `"not_found"`. | | `meta` | Meta | no | | |   `request_id` | string | yes | Correlation id for this request. Also sent as the `X-Request-Id` response header; quote it when contacting support. | ```json { "data": { "object": "bulk_review_result", "applied": 4, "enqueued": 4, "skipped": [ { "id": 1846, "reason": "not_found" } ] }, "meta": { "request_id": "7d4c2f48-9a1b-4c3d-8e2f-1a2b3c4d5e6f" } } ``` ### 401 — Missing, malformed, expired or revoked bearer token. The `WWW-Authenticate` header carries the RFC 6750 challenge. `application/json` — `ErrorEnvelope` ```json { "error": { "code": "unauthorized", "message": "A valid bearer token is required.", "details": [], "request_id": "7d4c2f48-9a1b-4c3d-8e2f-1a2b3c4d5e6f", "doc_url": "https://cascades.crscreditapi.com/docs/api/errors/unauthorized" } } ``` ### 403 — Token does not hold the required scope. `details` lists the scope(s) that were checked. `application/json` — `ErrorEnvelope` ```json { "error": { "code": "insufficient_scope", "message": "This token does not have the required scope.", "details": [ { "field": "scope", "message": "executions:write" } ], "request_id": "7d4c2f48-9a1b-4c3d-8e2f-1a2b3c4d5e6f", "doc_url": "https://cascades.crscreditapi.com/docs/api/errors/insufficient_scope" } } ``` ### 422 — `validation_failed` — unknown `bulk_action`, empty `execution_ids`, or more than 25 ids `application/json` — `ErrorEnvelope` ```json { "error": { "code": "validation_failed", "message": "Bulk action exceeds the per-request maximum.", "details": [ { "field": "execution_ids", "message": "max 25 ids per request" } ], "request_id": "7d4c2f48-9a1b-4c3d-8e2f-1a2b3c4d5e6f", "doc_url": "https://cascades.crscreditapi.com/docs/api/errors/validation_failed" } } ``` ### 429 — Rate limit exceeded (60 req/min per IP on `/api/v1`, 600 req/hour per token prefix, or 300 req/5 min per IP globally). The body is the standard error envelope and `Retry-After` gives the seconds until the window resets. `application/json` — `ErrorEnvelope` ```json { "error": { "code": "rate_limited", "message": "Rate limit exceeded. Retry later.", "details": [], "request_id": "7d4c2f48-9a1b-4c3d-8e2f-1a2b3c4d5e6f", "doc_url": "https://cascades.crscreditapi.com/docs/api/errors/rate_limited" } } ``` ## Code samples ### cURL ```shell curl -X POST "https://cascades.crscreditapi.com/api/v1/executions/review_bulk_actions" \ -H "Authorization: Bearer {{API_KEY}}" \ -H "Content-Type: application/json" \ -d '{ "execution_ids": [ 1842, 1843, 1844, 1845, 1846 ], "bulk_action": "approve", "note": "Manual review batch 2026-09-09 — OFAC and credit clean." }' ``` ### Node.js ```javascript const response = await fetch("https://cascades.crscreditapi.com/api/v1/executions/review_bulk_actions", { method: "POST", headers: { "Authorization": "Bearer {{API_KEY}}", "Content-Type": "application/json" }, body: JSON.stringify({ "execution_ids": [ 1842, 1843, 1844, 1845, 1846 ], "bulk_action": "approve", "note": "Manual review batch 2026-09-09 — OFAC and credit clean." }) }); const { data, meta } = await response.json(); console.log(response.status, data, meta.request_id); ``` ### Python ```python import requests response = requests.post( "https://cascades.crscreditapi.com/api/v1/executions/review_bulk_actions", headers={ "Authorization": "Bearer {{API_KEY}}", }, json={ "execution_ids": [ 1842, 1843, 1844, 1845, 1846 ], "bulk_action": "approve", "note": "Manual review batch 2026-09-09 — OFAC and credit clean." }, ) response.raise_for_status() payload = response.json() print(payload["data"], payload["meta"]["request_id"]) ``` ### Ruby ```ruby require "net/http" require "json" uri = URI("https://cascades.crscreditapi.com/api/v1/executions/review_bulk_actions") request = Net::HTTP::Post.new(uri) request["Authorization"] = "Bearer {{API_KEY}}" request["Content-Type"] = "application/json" request.body = <<~JSON { "execution_ids": [ 1842, 1843, 1844, 1845, 1846 ], "bulk_action": "approve", "note": "Manual review batch 2026-09-09 — OFAC and credit clean." } JSON response = Net::HTTP.start(uri.host, uri.port, use_ssl: uri.scheme == "https") do |http| http.request(request) end payload = JSON.parse(response.body) puts payload["data"], payload.dig("meta", "request_id") ``` ### Go ```go package main import ( "bytes" "fmt" "io" "net/http" ) func main() { body := []byte(`{ "execution_ids": [ 1842, 1843, 1844, 1845, 1846 ], "bulk_action": "approve", "note": "Manual review batch 2026-09-09 — OFAC and credit clean." }`) req, err := http.NewRequest("POST", "https://cascades.crscreditapi.com/api/v1/executions/review_bulk_actions", bytes.NewBuffer(body)) if err != nil { panic(err) } req.Header.Set("Authorization", "Bearer {{API_KEY}}") req.Header.Set("Content-Type", "application/json") resp, err := http.DefaultClient.Do(req) if err != nil { panic(err) } defer resp.Body.Close() out, _ := io.ReadAll(resp.Body) fmt.Println(resp.StatusCode, string(out)) } ``` ### Agent ```shell claude mcp add cascades \ -e CASCADES_API_KEY={{API_KEY}} \ -e CASCADES_PROD_BASE_URL=https://cascades.crscreditapi.com \ -- npx -y @crscreditapi/cascades-mcp-server # Then ask your assistant: # "Bulk approve / deny / assign_to_me using the Cascades API." # No MCP tool covers this endpoint yet; the assistant can call POST /executions/review_bulk_actions with curl. ``` ## Related - [Human review](https://cascades.crscreditapi.com/docs/concepts/human-review) - [Handle human review](https://cascades.crscreditapi.com/docs/guides/handle-human-review) ## Sitemap See the full [sitemap](https://cascades.crscreditapi.com/sitemap.md) for all pages.