Skip to main content
Some permitted operations require an owner’s decision before they execute. Access presents those requests in Inbox.

​
Review a request

Check the requesting profile, connection, operation, and arguments. Approve only when they match what you intended. Decline a request that needs to be revised. A chat message telling an agent “approved” does not replace the decision in Access. The request must be decided through the application’s approval flow.

​
What the agent should do next

When an operation returns approval_required, the agent should retain the request ID and wait for the owner decision. It should then call approval_request_read to inspect the request and its saved result or error. Do not repeat the original operation to collect its result. An approved request may already have executed. Repeating it can duplicate a write. If the request was declined, the agent should revise the proposed action or stop. If the result is uncertain, it should inspect the connected service or report the uncertainty before attempting another mutation.

​
Inspect the audit log

Open Audit Log and filter for the relevant profile or activity. Use it to understand allowed operations, denials, and reported outcomes. The audit log helps explain what Access handled. For an external service’s final state, also inspect the operation result or the service itself when needed. If a request is unexpectedly denied, check the profile’s current permissions, credential, reviewed tool definition, and approval state. See Profiles and permissions.