Authorization

Use a server-side API key with the listed grants and permitted resource access.

operations:write

Request headers

X-Api-Keyrequired: Your server-side integration credential.
Idempotency-Keyrequired: Stable key for this intended action. Reuse it for retries of the same request.
If-Matchrequired: Current ETag for the resource being changed. A stale version returns 412.
Content-Typeapplication/json: Encode the request body as JSON.

Path parameters

idstring · required: Opaque identifier in the authorized resource scope. Nested identifiers must belong to their parent resource.

Request body

outcomestring · required: An allowed outcome on the current work item.
reasonstring · required: A clear reason for this action, retained in the audit history.
actorReferencestring · optional: Your staff-user reference. Audit metadata, not an authorization grant.

Response

201Created

Returns the authorized resource or result for this operation. List results use items, nextCursor, and hasMore.

Errors

Authentication failures return 401 or 403. Inaccessible resources return 404. Business and idempotency conflicts return 409. Rate limits return 429 with retry guidance.

Error handling guide

curl --request POST 'https://api.wincora.com/api/v1/tenant/work-items/id_example/decisions' \ --header 'X-Api-Key: YOUR_API_KEY' \ --header 'Idempotency-Key: request-example-001' \ --header 'If-Match: "resource-version"' \ --header 'Content-Type: application/json' \ --data '{ "outcome": "approve", "reason": "All required evidence has been reviewed.", "actorReference": "agent-17" }'

import os import requests response = requests.request( 'POST', 'https://api.wincora.com/api/v1/tenant/work-items/id_example/decisions', headers={ "X-Api-Key": os.environ["WINCORA_API_KEY"], "Idempotency-Key": "request-example-001", "If-Match": "\"resource-version\"", "Content-Type": "application/json" }, json={ "outcome": "approve", "reason": "All required evidence has been reviewed.", "actorReference": "agent-17" }, timeout=30, ) response.raise_for_status() result = response.json()