Action approvals and risk

AgentStack classifies actions as low or high risk. Lead Collection, Web Search, Custom Button, Custom Form, and both Human Handoff destinations are low risk. Stripe, Slack, Calendly, Cal.com, Custom API, and Client-Side Action are high risk. These actions can affect an external system, or ask the host site to affect one.

High risk does not mean that the dashboard has an approval queue. In widget chat, if the caller turns on action approval, a visitor sees a Confirm this action prompt before a high-risk tool call runs. The prompt has Cancel and Confirm buttons. If the visitor selects Cancel, the chat shows Action cancelled. This confirmation does not apply to every channel. It is not a dashboard setting, and you cannot use it to approve actions for another user. Test the exact customer experience on the channel you deploy.

Every action has a bounded execution window and records execution data where possible. The system retries retry-safe operations automatically. It does not automatically retry operations that can change data. This includes bookings, Slack messages, billing updates, and custom API requests that mutate data. This is intentional.

Configure the smallest practical capability set. Protect connected credentials. Before you try a new conversation, use the action log to investigate errors.