When an agent's call needs your confirmation, nothing runs until you approve it under Needs you, at the top of Files › Document tasks.
Some calls always ask you first: changing what agents may do on your Mac, making or showing a key, spending money, and anything your permission settings set to ask. The agent is told confirmation_required with a confirmation_id, and the call waits for you for 24 hours.
It is listed under Needs you with its own Approve and Reject buttons, whether the agent runs in an AgentSky chat or connects with your own key from another app, such as Claude Code. A chat's agent also shows the same card in that chat.
- Approve — the call runs once, as you. What it answers (a new key, a checkout link) is shown to you only, once.
- Reject — it never runs.
Where: Files › Document tasks, Needs you (web and Mac); in the chat, for a chat's agent. Agents cannot approve; they read where it stands with the MCP tool get_confirmation (GET /v1/confirmations/{id}). It is also listed by list_action_items and list_asks, where only you can answer it.
Good to know: a call nobody decides expires after 24 hours. An agent should not repeat the call while it waits. Related: Action items, Set permission policies for agents.