curl -X POST 'https://api.github.com/orgs/example-org/personal-access-token-requests/10' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{
  "action": "approve"
}'

# POST /orgs/{org}/personal-access-token-requests/{pat_request_id} (GitHub API)
Base URL: https://api.github.com
Auth: Authorization; GitHub token; required.
Request formats: application/json.
Last verified: 2026-10-20

> Review a request to access organization resources with a fine-grained personal access token

## Critical Gotchas
* GitHub recommends an `Accept: application/vnd.github+json` header and an explicit `X-GitHub-Api-Version` header.
* Fine-grained tokens only authorize repositories and permissions selected when the token is created.

## cURL
curl -X POST 'https://api.github.com/orgs/example-org/personal-access-token-requests/10' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{
  "action": "approve"
}'

## Parameters
| Name | In | Type | Required | Description |
| :--- | :--- | :--- | :--- | :--- |
| org | path | string | Yes | The organization name. The name is not case sensitive. |
| pat_request_id | path | integer | Yes | Unique identifier of the request for access via fine-grained personal access... |
| action | body | string | Yes | Action to apply to the request. |
| reason | body | string | No | Reason for approving or denying the request. Max 1024 characters. |

## Response example
null

---
Need an API key? Get one at https://github.com/settings/tokens

POST

POST /orgs/{org}/personal-access-token-requests/{pat_request_id} — GitHub API

GitHub token (required); https://api.github.com

GitHub API

Review a request to access organization resources with a fine-grained personal access token

Base URL: https://api.github.com
Auth: Authorization: Bearer <GITHUB_API_KEY>
Last verified: 2026-10-20 · upstream hash matched

Actions Try in browser→

Agents: curl -H "Accept: text/markdown" this URL
→ 266 tokens · Vary: Accept

Critical gotchas

GitHub recommends an Accept: application/vnd.github+json header and an explicit X-GitHub-Api-Version header.

Fine-grained tokens only authorize repositories and permissions selected when the token is created.

cURL

curl -X POST 'https://api.github.com/orgs/example-org/personal-access-token-requests/10' \  -H "Authorization: Bearer $GITHUB_TOKEN" \  -H 'Accept: application/vnd.github+json' \  -H 'X-GitHub-Api-Version: 2026-03-10' \  -H 'Content-Type: application/json' \  -d '{  "action": "approve"}'

Parameters

Name	In	Type	Required	Description
org	path	string	Yes	The organization name. The name is not case sensitive.
pat_request_id	path	integer	Yes	Unique identifier of the request for access via fine-grained personal access token.
action	body	string	Yes	Action to apply to the request.
reason	body	string	No	Reason for approving or denying the request. Max 1024 characters.

Response 200 OK

null

Get a free GitHub API key → sponsored

Affiliate link - we may earn a commission, at no extra cost to you.