diff --git a/apps/api/src/server.ts b/apps/api/src/server.ts
index 9fc5298..c0cd5cf 100644
--- a/apps/api/src/server.ts
+++ b/apps/api/src/server.ts
@@ -103,7 +103,7 @@ app.get('/api/v1/access/requests', requireAccessApprover, async (req, res) => {
 })
 
 app.post('/api/v1/access/requests/:subject/approve', requireAccessApprover, async (req, res) => {
-  const request = await reviewAccessRequest(req.params.subject, 'approved', req.identity!.subject)
+  const request = await reviewAccessRequest(String(req.params.subject), 'approved', req.identity!.subject)
   if (!request) {
     res.status(404).json({ error: 'access_request_not_found' })
     return
@@ -113,7 +113,7 @@ app.post('/api/v1/access/requests/:subject/approve', requireAccessApprover, asyn
 })
 
 app.post('/api/v1/access/requests/:subject/reject', requireAccessApprover, async (req, res) => {
-  const request = await reviewAccessRequest(req.params.subject, 'rejected', req.identity!.subject)
+  const request = await reviewAccessRequest(String(req.params.subject), 'rejected', req.identity!.subject)
   if (!request) {
     res.status(404).json({ error: 'access_request_not_found' })
     return