Approval Rules

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Auto-approve small agent actions under your rules; approval cards for the rest.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Approval Rules": {
      "url": "https://approve.cloudforbots.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (6)

• check_action

  Before a consequential action, ask whether the user's rules auto-approve it. Returns auto_approve, needs_approval (with a plain-English approval card and a link the user can tap) or deny. Free plan is watch-only: it reports what it WOULD decide and logs it for the weekly report, but nothing counts as approved, so ask your user as you normally would.

  Parameters:

  • action (required) — object — The action your agent wants to take.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_decision

  Check whether the user approved or rejected an approval card (by card_id and card_token). Only act when status is approved.

  Parameters:

  • card_id (required) — string
  • card_token (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• set_rules

  Save the user's rules (needs an API key so they stay yours). Each rule: {name, when:{type:[...], max_usd, min_usd, reversible, target_ends_with:[...]}, verdict:"auto"|"ask"|"deny"}. First matching rule wins; anything unmatched needs approval. Call once without confirm to preview, then with confirm=true.

  Parameters:

  • rules (required) — array
  • confirm — boolean

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_rules

  Show the rules in effect for your key (or the default starter rules).

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• weekly_report

  Draft a plain-English report of the last 7 days: actions checked, how many your rules would auto-approve, how many needed you, top kinds of asks, and rule suggestions. Read-only; sends nothing.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• usage_and_upgrade

  Show today's usage for your key or IP and the $49/month All Access upgrade link (cloudforbots.com/offer). Free tier: 200 calls/day. Not metered.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.