Who can approve the payments created by the API?

Any account user with permission to approve transactions. You can enable/disable these permissions on the “Roles and Permissions” section, under the "Users" link in the menu.