The approval flow

AAP separates proposing an action, deciding whether it is allowed and executing it. The adapter connects these steps at the point where a tool would run, asking the provider whether the call may proceed.

Tool call flow

sequenceDiagram
    accTitle: Tool call approval flow
    accDescr: The adapter intercepts an agent's tool call and requests approval from the provider. It validates the outcome before executing an approved call or reporting why the call did not run.
    participant Agent as Agent / harness
    participant Adapter
    participant Provider as Approval provider
    participant Tool
    Agent->>Adapter: Propose tool call
    Adapter->>Provider: Request approval with instance credential
    Note over Provider: Decide whether the tool call should run
    Provider-->>Adapter: Outcome
    alt Approved and approval still valid
        Adapter->>Tool: Execute approved call
        Tool-->>Adapter: Result
        Adapter-->>Agent: Result
    else Call not permitted
        Adapter-->>Agent: Explain why the call did not run
    end

1. The agent proposes a tool call through its harness.
2. The adapter captures the tool name and arguments before any side effects occur.
3. The adapter submits an approval request using its instance credential.
4. The provider records a decision, immediately or after review.
5. The adapter validates the result and either executes the approved call or reports why it did not run.

AAP is transparent to the underlying agent. It does not know that it exists.

Instances and credentials

An instance identifies a particular running or installed agent. It can submit many approval requests over its lifetime.

A provisioner creates and manages instances. Each instance receives a credential that its adapter uses for approval requests. This keeps management access separate from the agent's approval traffic.

See identity and authentication for the credential requirements.

Modes

Human review can take hours or longer. AAP supports two ways to wait for a decision, depending on whether the harness can suspend and resume execution.

Check your adapter's guide for its waiting behavior and time limits.

Read synchronous mode and asynchronous mode for their complete contracts.