Creates an action and returns the full enriched action object.
If Idempotency-Key or dedupe matches an existing recent action, this returns that existing action with deduplicated: true.
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Optional client request ID. Echoed back on response.
Deduplicates create-action requests within a 24-hour window.
^application/json(;.*)?$GET, POST, PUT, PATCH, DELETE 1 <= x <= 100When true, the request blocks until the action reaches a terminal status (completed, failed, or cancelled) and returns the final action object. Default timeout is 30 seconds (max 120 seconds). Cannot be combined with approve: true.
Send a magic-link approval email when approve: true. The email contains approve and reject buttons. Requires RESEND_API_KEY to be configured.
Existing deduplicated/idempotent action returned
^act_[A-Za-z0-9_-]+$"act_M4qT8YH7xW2pL9nB"
pending, active, awaiting_approval, completed, failed, cancelled GET, POST, PUT, PATCH, DELETE x >= 01 <= x <= 100x >= 0x >= 0Allowed operations for the current status.
approve, cancel, retry Structured error detail present when status is failed.
Shareable URL for this action's receipt page (e.g. /r/rcpt_...). No authentication required — secured by the unguessable receipt token.