Skip to main content
Step-up requests human approval for an action that meets the tool’s approval conditions. Use the approval prompt shown on your device. The method depends on your account and integration.

​
When approval is required

For payment tools that evaluate the envelope, an amount at or above step_up_amount_cents requests step-up if the other policy checks pass. agent.grant.issue and vault.rotateSigner require approval independently of the payment amount. Other tools can declare human-approval requirements that their configured integration must implement. An amount-cap breach, an unapproved destination or an exceeded transaction-frequency limit is a denial. Approval does not override that denial. Read-only calls and permitted actions below an applicable threshold do not each require approval. There is no universal every-payment approval default across skills. Review the installed envelope and the specific tool’s requirements.

​
Review the request

Check the agent, requested action, amount and destination. For access changes, review the requested permissions or signing key. Approve only through the flow provided for that action. Lock-screen approval, Face ID and a particular passkey or two-factor method are not guaranteed. URL-mode approvals are not fully connected in this release; opening an approval page alone does not authorize the action. If the flow cannot complete, keep the action pending and contact support.

​
Follow the existing action

For payments.initiate, a step-up response refers to a pending payment. Follow its supplied approval URL and track that payment. Do not create a second payment to work around an incomplete approval. Some treasury tools use a two-call contract: request approval, then submit a single-use approval token with the original parameters. Use that pattern only when the tool’s input schema includes step_up_sigil. See the tool reference.

​
What approval means

Approval authorizes a specific action. It does not establish that a payment, signer change or allocation has settled. Review the recorded outcome and any required vault signatures.

​
Next