curl --request POST \
--url https://api.gigstack.io/v2/users/me/account-approvals/{id}/reconcile \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{}'const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({})
};
fetch('https://api.gigstack.io/v2/users/me/account-approvals/{id}/reconcile', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.gigstack.io/v2/users/me/account-approvals/{id}/reconcile"
payload = {}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text){
"success": true,
"data": {
"id": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
"operation_id": "00000000-0000-4000-8000-000000000001",
"action": "managed_users.create_admin",
"team": {
"id": "team_example",
"legal_name": null,
"tax_id": null
},
"billing_account_id": "billing_example",
"payload": {
"email": "managed@example.test"
},
"requested_modes": [],
"effect_scope": "managed_identity",
"status": "activation_required",
"created_at": 1700000000000,
"expires_at": 1700000600000,
"completed_at": null,
"review_url": "https://app.gigstack.pro/account/approvals/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
"can_cancel": false,
"disclosure_version": "managed-identity-v1",
"existing_key_ids": [],
"terms": null,
"receipt": null,
"error": null,
"membership_change": null,
"invitation_change": null,
"managed_identity_change": {
"user_id": "managed_example",
"email": "managed@example.test",
"profile": {},
"team_id": "team_example",
"billing_account_id": "billing_example",
"role": "admin",
"auto_join": true,
"credential_delivery": "none",
"initial_auth_state": "disabled",
"bootstrap_effects": [
"profile_initialization",
"membership_usage_initialization",
"support_identity_claims"
]
},
"managed_identity_execution": {
"phase": "activation_required",
"auth_state": "disabled",
"membership_granted": false,
"started_at": 1700000000000,
"updated_at": 1700000000100,
"error_code": null
},
"managed_session_change": null,
"managed_session_execution": null
},
"timestamp": 1700000000000
}Reconcile managed identity provisioning evidence
Using the originating personal Firebase/MCP credential, read Auth by the reserved user ID and update this managed creation receipt. No creation, activation, membership grant, email or credential issuance occurs. Missing identity after a timeout remains unknown. activation_required means return to the private browser for a new review; only completed confirms enabled Auth and the recorded membership grant. API/OAuth team keys cannot use this personal account operation.
curl --request POST \
--url https://api.gigstack.io/v2/users/me/account-approvals/{id}/reconcile \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{}'const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({})
};
fetch('https://api.gigstack.io/v2/users/me/account-approvals/{id}/reconcile', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.gigstack.io/v2/users/me/account-approvals/{id}/reconcile"
payload = {}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text){
"success": true,
"data": {
"id": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
"operation_id": "00000000-0000-4000-8000-000000000001",
"action": "managed_users.create_admin",
"team": {
"id": "team_example",
"legal_name": null,
"tax_id": null
},
"billing_account_id": "billing_example",
"payload": {
"email": "managed@example.test"
},
"requested_modes": [],
"effect_scope": "managed_identity",
"status": "activation_required",
"created_at": 1700000000000,
"expires_at": 1700000600000,
"completed_at": null,
"review_url": "https://app.gigstack.pro/account/approvals/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
"can_cancel": false,
"disclosure_version": "managed-identity-v1",
"existing_key_ids": [],
"terms": null,
"receipt": null,
"error": null,
"membership_change": null,
"invitation_change": null,
"managed_identity_change": {
"user_id": "managed_example",
"email": "managed@example.test",
"profile": {},
"team_id": "team_example",
"billing_account_id": "billing_example",
"role": "admin",
"auto_join": true,
"credential_delivery": "none",
"initial_auth_state": "disabled",
"bootstrap_effects": [
"profile_initialization",
"membership_usage_initialization",
"support_identity_claims"
]
},
"managed_identity_execution": {
"phase": "activation_required",
"auth_state": "disabled",
"membership_granted": false,
"started_at": 1700000000000,
"updated_at": 1700000000100,
"error_code": null
},
"managed_session_change": null,
"managed_session_execution": null
},
"timestamp": 1700000000000
}Authorizations
Authentication Method: HTTP Bearer token.
The runtime requires the literal Bearer prefix — a bare token in the
Authorization header is rejected with 401 unauthorized.
Header Format: Authorization: Bearer YOUR_API_KEY
Your API key is a JWT. Live keys operate on live data (livemode: true);
test keys operate on isolated test data (livemode: false).
Get your key at: app.gigstack.pro/settings?tab=api
Errors: credential failures are answered by the authentication layer with a raw
{ "message": … } body, not the standardized envelope — 401 for a missing, malformed or
expired token, 403 for a revoked key or a plan without API access. See the Unauthorized
and AuthForbidden responses.
Path Parameters
^[a-f0-9]{64}$Query Parameters
gigstack Connect: Target team ID for multi-team access.
Requires gigstack Connect enabled on your team and shared billing account.
Also requires the multipleIssuerAccounts feature on your plan. Requests targeting a
team other than the one your API key belongs to return 403 without it.
Only API keys can use it: an OAuth access token sent with another team's id is rejected with
403 Team mismatch with OAuth token.
Optional — omit it entirely unless you are acting on another team. It deliberately
carries no example value so generated snippets do not emit ?team=undefined; when the
parameter is absent, the team is derived from your API key.
Example: ?team=team_xyz789
Body
The body is of type object.