elaichi__access_request__list
Access requests members have filed — the ADMIN QUEUE by default, or the CALLER’S OWN requests with mine: true. The default needs member:manage (the same permission that gates inviting people and changing roles, because acting on a request always ends in one of those) and is refused without it; mine: true needs nothing beyond org membership, the same nothing that filing a request needed, and is how the person who filed one finds it again. Use mine: true whenever the question is about the user’s own asks ("did my request go through", "what have I asked for") — the default answers a different question and will refuse most people. status defaults to "pending" (the open queue) when omitted; pass "all" to see the full history including withdrawn ones. q matches the requested TOOL name or the requester’s own note (not the requester’s name — resolve that from the requester field on each row instead, and not tool_label, which is resolved outside the searchable store). Admin-queue rows carry requester and, once resolved, resolved_by — both { id, name, email } — plus can_resolve, which is false on the caller’s OWN row: nobody decides their own request, so offer access_request.withdraw there instead of a decision — that row’s can_withdraw is true, because a queue row carries both capabilities. mine: true rows are the requester’s own narrower shape instead — can_withdraw, and a bare resolved_by_user_id rather than a resolved name, because resolving an id into a name and email is a member-directory lookup this view does not hand a plain member for free. Returns { result: [...], nextCursor, prevCursor } — camelCase here, unlike the REST API’s next_cursor. Page by sending nextCursor back as cursor until it is null. Sensitive read: returns records an operator treats as confidential (audit history, credential metadata, offboarding detail). Read-only, but not harmless — do not echo the contents further than needed.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| q | No | Case-insensitive substring of the requested tool name or the requester’s note, matched before paging. | |
| mine | No | True to list only the requests THIS user filed, which needs no permission. Scoped to the signed-in user server-side — there is no field here that could name somebody else, and asking for another person’s requests is not something this operation can do. Omit (or false) for the org-wide admin queue, which needs member:manage. | |
| limit | No | Rows per page, 1–200 (default 50). Larger values are clamped, not rejected. | |
| cursor | No | Opaque cursor taken verbatim from a previous call’s `nextCursor`. Omit for the first page. | |
| status | No | Defaults to "pending". Pass "all" for the full history. |