SDK — withdraw the caller's approval

DELETE

sdk

{environmentId}

businessAccounts

{businessAccountId}

proposals

{proposalId}

approvals

SDK — withdraw the caller's approval

curl --request DELETE \
  --url https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals"

headers = {"Authorization": "Bearer <token>"}

response = requests.delete(url, headers=headers)

print(response.text)

const options = {method: 'DELETE', headers: {Authorization: 'Bearer <token>'}};

fetch('https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "DELETE",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals"

	req, _ := http.NewRequest("DELETE", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.delete("https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals")
  .header("Authorization", "Bearer <token>")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Delete.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "businessAccountId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "actionType": "addMember",
  "status": "pending",
  "initiatorUserId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "intent": {},
  "completeBy": "2023-11-07T05:31:56Z",
  "createdAt": "2023-11-07T05:31:56Z",
  "approvals": [
    {
      "approverUserId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "approvedAt": "2023-11-07T05:31:56Z",
      "revokedAt": "2023-11-07T05:31:56Z"
    }
  ],
  "consumedAt": "2023-11-07T05:31:56Z",
  "autoExecute": true,
  "subjects": [
    {
      "userId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "email": "<string>"
    }
  ],
  "approvalRequirements": [
    {
      "action": "addMember",
      "requirementId": "<string>",
      "required": 123,
      "approved": 123,
      "satisfied": true,
      "unmetMandatoryRoles": [
        "<string>"
      ]
    }
  ]
}

{
  "error": "<string>"
}

{
  "error": "No jwt provided!"
}

{
  "error": "Access Forbidden",
  "approvalRequirements": [
    {
      "action": "addMember",
      "requirementId": "<string>",
      "required": 123,
      "approved": 123,
      "satisfied": true,
      "unmetMandatoryRoles": [
        "<string>"
      ]
    }
  ]
}

{
  "error": "Not Found",
  "code": "not_found"
}

{
  "error": "Conflict: invalid state transition"
}

{
  "error": "Internal Server Error"
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

environmentId

string

required

ID of the environment

Required string length: 36

Pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$

Example:

"95b11417-f18f-457f-8804-68e361f9164f"

businessAccountId

string

required

ID of the business account

Required string length: 36

Pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$

Example:

"95b11417-f18f-457f-8804-68e361f9164f"

proposalId

string

required

ID of the business account proposal

Required string length: 36

Pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$

Example:

"95b11417-f18f-457f-8804-68e361f9164f"

Response

Approval withdrawn; the proposal with its remaining approvals

A governed mutation waiting on consent. Untrusted workflow state: it records what was proposed and who has signed, and the enclave verifies every signature when the proposal is executed. The signature is over intent as stored, so an approver must sign these exact bytes — re-deriving the intent would produce a different intentId and invalidate the approvals already collected.

string<uuid>

required

businessAccountId

string<uuid>

required

actionType

enum<string>

required

A business-account mutation that an approval requirement can gate.

Available options:

addMember,

removeMember,

updateMemberRole,

transferOwnership,

createWallet,

linkWallet,

removeWallet,

addSignerToWallet,

removeSignerFromWallet,

setGovernance,

defineRole,

deleteRole

status

enum<string>

required

Lifecycle of a governed mutation awaiting approvals. Only pending accepts approvals; the other three are terminal.

Available options:

pending,

executed,

vetoed,

expired

initiatorUserId

string<uuid>

required

Who proposed it. They can never approve their own intent, so they are never counted toward a requirement.

intent

object

required

The initiator's proposal, signed with their session key. Built by the API, not the client — sign these exact bytes verbatim, because re-serializing can change them and invalidate the signature. autoExecute is inside the signed bytes, so an approver consents to it and nothing can flip it afterwards.

completeBy

string<date-time>

required

The one deadline for the whole proposal, derived from the signed intent's createdAt. Past it the proposal accepts no further approvals AND can no longer be executed.

createdAt

string<date-time>

required

approvals

object[]

required

Show child attributes

consumedAt

string<date-time> | null

When it left pending; null while still open.

autoExecute

boolean

Whether this applies as soon as its quorum is met, or waits for an explicit execute. A copy of the flag inside the signed intent, which is the authority. An approver needs this to know whether their approval is the one that lands the change.

subjects

object[]

The users this change is about, resolved for display — the member being added, the signer being removed, the new owner. Empty for a change that names no user, such as setGovernance.

Show child attributes

approvalRequirements

object[]

Every governance rule matching this proposal, with how close each is. Do NOT derive progress from approvals — that counts rows, including approvers outside a rule's pool and approvers demoted since they signed. Absent means the tally is unknown (not fetched, or no longer pending); an empty array means nothing is outstanding. Treat the two differently.

Show child attributes

Last modified on September 9, 2026

⌘I

SDK — withdraw the caller's approval

curl --request DELETE \
  --url https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals"

headers = {"Authorization": "Bearer <token>"}

response = requests.delete(url, headers=headers)

print(response.text)

const options = {method: 'DELETE', headers: {Authorization: 'Bearer <token>'}};

fetch('https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "DELETE",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals"

	req, _ := http.NewRequest("DELETE", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.delete("https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals")
  .header("Authorization", "Bearer <token>")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/proposals/{proposalId}/approvals")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Delete.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "businessAccountId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "actionType": "addMember",
  "status": "pending",
  "initiatorUserId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "intent": {},
  "completeBy": "2023-11-07T05:31:56Z",
  "createdAt": "2023-11-07T05:31:56Z",
  "approvals": [
    {
      "approverUserId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "approvedAt": "2023-11-07T05:31:56Z",
      "revokedAt": "2023-11-07T05:31:56Z"
    }
  ],
  "consumedAt": "2023-11-07T05:31:56Z",
  "autoExecute": true,
  "subjects": [
    {
      "userId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "email": "<string>"
    }
  ],
  "approvalRequirements": [
    {
      "action": "addMember",
      "requirementId": "<string>",
      "required": 123,
      "approved": 123,
      "satisfied": true,
      "unmetMandatoryRoles": [
        "<string>"
      ]
    }
  ]
}

{
  "error": "<string>"
}

{
  "error": "No jwt provided!"
}

{
  "error": "Access Forbidden",
  "approvalRequirements": [
    {
      "action": "addMember",
      "requirementId": "<string>",
      "required": 123,
      "approved": 123,
      "satisfied": true,
      "unmetMandatoryRoles": [
        "<string>"
      ]
    }
  ]
}

{
  "error": "Not Found",
  "code": "not_found"
}

{
  "error": "Conflict: invalid state transition"
}

{
  "error": "Internal Server Error"
}

Overview

Endpoints

Schemas

SDK — withdraw the caller's approval

Authorizations

Path Parameters

Response