Approval Authority panel

Approvals

Risky actions from any channel (an AI agent over MCP, a browser agent, or you) wait here as pending operations. Nothing runs until a human approves exactly what is shown, once, before it expires.

Email approval is off by default. Your AI assistant may control your inbox, so an email reply or link does not approve anything unless you turn on "Approve by email" in the Policy panel for your own sandbox (it waits for your phone, and even then it never clears bank requests, your own website requests, settings changes, holds or connections). Approvals need the PIN you chose, typed on the phone you paired separately (scan the QR on Account → Trusted device); the fallback is the PIN plus the code the phone shows.

Select an operation to review it.