Website
Action Approval
Passkey approval of sensitive actions on your WebsitePublisher account (layer B). When approval_enabled is on, actions in the tier map need the owner's passkey: T1 actions (e.g. delete_page) need an approval window for this AI connection, T2 actions (e.g. vault_store_secret) a touch for each exact call. A guarded call returns approval_required with a link for the owner; after the touch, repeat exactly the same call. status shows the tiers and whether a window is open; open-window asks for a window up front, so a series of T1 actions needs one touch; close-window ends it early; list shows recent requests. Switch it on and change tiers with the passkeys integration (set-config). Nothing is approved through this API.
Endpoints (4)
Whether action approval is on, the window length, whether this AI connection has an open window (and until when) and the tier of every guarded action (defaults plus your overrides; actions not listed are T0). Optional action: also return the tier of that one action.
| Field | Type | Required | Description |
|---|---|---|---|
action |
string | No | An action key: a tool name ("delete_page"), "tool:operation" ("capreq_admin:notify_built") or "execute_integration:<service>.<endpoint>". |
Ask for an approval window for this AI connection before a series of T1 actions. Returns approval_required with a link for the owner (valid for pending_ttl_minutes); after their touch, T1 actions of this connection need no new touch for window_hours. Returns status open when a window is already open. T2 actions still need their own touch. Give the owner the url; do not open it yourself.
No input parameters required.
Close the open approval window of this AI connection now, for example when the work is done.
No input parameters required.
The last 50 passkey requests of the account (connections, windows, single actions, settings changes) with their status: pending (with link), approved, consumed, denied or expired.
No input parameters required.
MCP Tool Names
When using this integration through an AI assistant (Claude, ChatGPT, Cursor, etc.), the endpoints are available as MCP tools:
| Endpoint | MCP Tool Name |
|---|---|
| status | action_approval_status |
| open-window | action_approval_open_window |
| close-window | action_approval_close_window |
| list | action_approval_list |