Flow API
Predominant token scope: any. You do not have to specify a scope. The grant is automatically available when you specify any valid scope, such as agent, certificate, or ssh.
The Flow API manages the sequence of tasks. If one of the tasks is has an 'approval required', Flow Tickets manages that approval.