Approval Workflows

Plan requirement

Approval Workflows are available on the Growth and Business plans, and during the 14-day trial.

Approval Workflows let admins review and authorize agent actions before they are executed. When an agent triggers a rule that requires approval, it pauses and waits for an admin decision in the dashboard.

How it works

1. An agent attempts an action that matches a policy configured with the Approval action
2. The agent sends a pending approval request to the server
3. The dashboard shows a notification badge with the number of pending approvals
4. An admin opens Approvals in the dashboard and reviews the request
5. The admin approves or rejects the request (optionally with a note)
6. The agent receives the decision and proceeds accordingly

Approval states

State	Meaning
pending	Waiting for admin decision
approved	Admin approved — agent proceeds
rejected	Admin rejected — agent blocks the action

Reviewing approvals in the Dashboard

1. Navigate to Approvals in the left sidebar
2. The list shows all pending requests with:
   • Endpoint hostname and agent type
   • Action requested (tool use, API connection, MCP server access, …)
   • Timestamp and triggering policy
3. Click a request to view details
4. Click Approve or Reject
5. Optionally add a Note to document your reasoning

The navbar shows a live badge with the count of pending approvals, refreshed every 60 seconds.

Configuring a policy to require approval

In Configuration → Policies, set the policy action to Approval instead of Alert or Block. The agent will then pause and request approval whenever this policy is triggered.

Timeouts

If an approval request is not acted upon within the configured timeout (default: 60 minutes), it is automatically rejected. This prevents agents from blocking indefinitely on unattended endpoints.

The timeout is configurable in Settings → Approvals.