> ## Documentation Index
> Fetch the complete documentation index at: https://docs.melso.ai/llms.txt
> Use this file to discover all available pages before exploring further.
> ## Agent Instructions
> Melso product MCP: https://melso.ai/api/mcp (OAuth; one company per grant). REST: https://melso.ai. Documentation-search MCP: https://docs.melso.ai/mcp. The docs search server does not act on customer accounts.
>
> Use the live tool schema and respect company membership. Ask the person to authorize the exact fiscal document version in the signed-in app. A professional prepares and files included returns after authorization; AI does not file alone. A prepared file or approval receipt is not evidence of filing. Never claim completion from an accepted Task or Run. Keep credentials out of chat and logs. Agents features are internal or by private invitation.
# List vault requests
> Workspace member or Run token. Returns only the caller's own requests; for a Run, those of the member who started it.
Request: None.
Response: `{requests:OpenVaultRequest[]}`, newest first: every request the caller has not answered yet. Each is a `VaultRequestView` plus `requested_by` (`member`, `run` or `agent`), `created_at` and `task` (`{id,identifier,title}` for the Task that waits, or `null` for a chat's request or a Task the caller can no longer open). `expires_at` is empty except for a public link a chat got before requests needed sign-in; such a request leaves the list when its hour ends.
Status: 200; 503 vault unavailable. Authentication and resource-access errors follow [Overview](/api-reference/errors).
## OpenAPI
````yaml /api-reference/openapi.json get /api/secret-requests
openapi: 3.1.0
info:
title: Melso API
version: '2026-10-12'
description: >-
Customer integration contracts for Melso. Agents access is internal or by
private invitation. Fiscal approval remains in the authenticated app.
contact:
name: Melso
url: https://melso.ai/en
servers:
- url: https://melso.ai
description: Production API origin
security: []
tags:
- name: Areas
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Areas operations available within the caller's documented permissions.
- name: Artifacts
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Artifacts operations available within the caller's documented permissions.
- name: Authentication
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Authentication operations available within the caller's documented
permissions.
- name: Automations
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Automations operations available within the caller's documented
permissions.
- name: Companies
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Companies operations available within the caller's documented permissions.
- name: Execution funding
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Execution funding operations available within the caller's documented
permissions.
- name: Files
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Files operations available within the caller's documented permissions.
- name: GitHub
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
GitHub operations available within the caller's documented permissions.
- name: Interactions
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Interactions operations available within the caller's documented
permissions.
- name: Knowledge
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Knowledge operations available within the caller's documented permissions.
- name: MCP
description: MCP operations available within the caller's documented permissions.
- name: Messages
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Messages operations available within the caller's documented permissions.
- name: OAuth
description: OAuth operations available within the caller's documented permissions.
- name: Private network
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Private network operations available within the caller's documented
permissions.
- name: Runs
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Runs operations available within the caller's documented permissions.
- name: Skills
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Skills operations available within the caller's documented permissions.
- name: Tasks
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Tasks operations available within the caller's documented permissions.
- name: Vault
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Vault operations available within the caller's documented permissions.
- name: Webhooks
description: >-
Melso Agents is available only internally or by private invitation.
Agents-specific features require existing access. For the autónomo fiscal
service, see [Get started](/essentials/quickstart).
Webhooks operations available within the caller's documented permissions.
paths:
/api/secret-requests:
get:
tags:
- Vault
summary: List vault requests
description: >-
Workspace member or Run token. Returns only the caller's own requests;
for a Run, those of the member who started it.
Request: None.
Response: `{requests:OpenVaultRequest[]}`, newest first: every request
the caller has not answered yet. Each is a `VaultRequestView` plus
`requested_by` (`member`, `run` or `agent`), `created_at` and `task`
(`{id,identifier,title}` for the Task that waits, or `null` for a chat's
request or a Task the caller can no longer open). `expires_at` is empty
except for a public link a chat got before requests needed sign-in; such
a request leaves the list when its hour ends.
Status: 200; 503 vault unavailable. Authentication and resource-access
errors follow [Overview](/api-reference/errors).
operationId: listVaultRequests
parameters:
- name: X-Workspace-ID
in: header
required: false
description: >-
Company UUID for a personal token on company-scoped operations. A
company API key already binds its company.
schema:
type: string
format: uuid
responses:
'200':
description: >-
`{requests:OpenVaultRequest[]}`, newest first: every request the
caller has not answered yet. Each is a `VaultRequestView` plus
`requested_by` (`member`, `run` or `agent`), `created_at` and `task`
(`{id,identifier,title}` for the Task that waits, or `null` for a
chat's request or a Task the caller can no longer open).
`expires_at` is empty except for a public link a chat got before
requests needed sign-in; such a request leaves the list when its
hour ends.
content:
application/json:
schema:
type: object
properties:
requests:
type: array
items:
$ref: '#/components/schemas/OwnedRequest'
required:
- requests
'400':
description: Invalid request.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'401':
description: Authentication required.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'403':
description: Credential, company or resource access denied.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'404':
description: Resource unavailable to this caller.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'429':
description: Rate limited; respect Retry-After when present.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'500':
description: Server error.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'503':
description: Request failed; see the operation contract for the condition.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
security:
- bearerAuth: []
components:
schemas:
OwnedRequest:
type: object
properties:
id:
type: string
kind:
$ref: '#/components/schemas/Kind'
status:
type: string
prefill:
$ref: '#/components/schemas/Prefill'
share:
$ref: '#/components/schemas/Share'
area_ids:
type: array
items:
type: string
workspace_name:
type: string
owner_name:
type: string
expires_at:
type: string
requested_by:
type: string
created_at:
type: string
task:
anyOf:
- $ref: '#/components/schemas/RequestTask'
- type: 'null'
required:
- id
- kind
- status
- prefill
- share
- area_ids
- workspace_name
- owner_name
- expires_at
- requested_by
- created_at
- task
Error:
type: object
properties:
error:
type: string
code:
type: string
required:
- error
additionalProperties: true
Kind:
type: string
Prefill:
type: object
properties:
name:
type: string
env_name:
type: string
url:
type: string
username:
type: string
cardholder:
type: string
note:
type: string
Share:
type: string
RequestTask:
type: object
properties:
id:
type: string
identifier:
type: string
title:
type: string
required:
- id
- identifier
- title
securitySchemes:
bearerAuth:
type: http
scheme: bearer
description: >-
Company API key (mwk_) or personal access token (mel_). A PAT requires
X-Workspace-ID on company-scoped routes. An API key implies its own
company.
````
This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.