Action approvals and risk

AgentStack classifies actions as low or high risk. Lead Collection, Web Search, Custom Button, Custom Form, and both Human Handoff destinations are low risk. Stripe, Slack, Calendly, Cal.com, Custom API, and Client-Side Action are high risk because they can affect an external system or ask the host site to do so.

High risk does not mean that the dashboard has an approval queue. In widget chat, when the caller has enabled action approval, a visitor sees Confirm this action with Cancel and Confirm before a high-risk tool call proceeds. Cancelling shows Action cancelled in that chat. This confirmation is not a universal policy for every channel, and it is not a dashboard setting you can use to approve actions on somebody else's behalf. Test the exact customer experience on the channel you deploy.

Every action has a bounded execution window and records execution data where possible. Retry-safe operations can be retried automatically; potentially mutating operations such as booking, sending Slack messages, billing updates, and mutating custom API requests are deliberately not automatically retried. Configure the smallest practical capability set, protect connected credentials, and use the action log to investigate errors before trying a new conversation.