How approvals work in Agent host: a risky call is suspended, appears in the inbox, and a person of the workspace approves or denies it. Your AI cannot.

Updated 18 October 2026 · View as Markdown

When an agent wants to make a risky call, the call is suspended inside the agent and an approval appears in the inbox: what, which agent, since when. A person of the workspace approves or denies it. The hub records the decision and tells the agent with a signed call.

A scheduled run waits too.
The AI door can read the queue and cannot answer it.
A denied call is reported to the model as a failure.