Your AI can watch your agents. It cannot approve them.
How your own AI works with Agent host through Geenius OS: it lists agents, talks to them and reads digests and approvals, but has no approve action by design.
If you already work with an AI, it is natural to ask it about your agents. Agent host lets it, with one deliberate gap.
What it can do#
Through Geenius OS your AI gets a tool called geenius_agenthost with one area, agents, and six actions. It can list the agents with their state, get one with its versions and connectors, send one message to a deployed agent and read the answer, read the approvals queue, read the last digest of a scheduled agent and check usage.
What it cannot do#
It cannot approve or deny anything. It cannot create or change an agent. It cannot read a connector secret, because nothing returns one. Those are for people, in the app.
Why no approve#
The approval gate exists so that an agent cannot do something risky on its own. If another AI could answer the approval, the question would just move: an AI that talks to an agent could approve the agent's webhook. We took the approve action out of the door altogether so that there is nothing to misuse.
What a risky action looks like through the door#
Your AI sends a message. If the agent decides to make a risky call, the answer comes back as pending approval with an id, and the agent waits. Your AI can tell you there is something waiting. You open the app, read what it wants and decide.
A first ask#
Ask your AI to list your agents, say which are running, and read the last digest of the research agent, without sending anything. It reads, it summarises and you stay in charge.
Why it is still useful#
A lot of the value is in reading. Ask your AI each morning which agents ran, whether any is waiting on you and what the last digest said, and you get a short briefing without opening the app. If something is waiting, you open the approvals inbox and decide. The loop is: your AI notices, you decide, the agent continues. That keeps the speed of an assistant and the safety of a gate.
On which plans#
The door is on every plan. During early access people request access, and payments are in test mode.
See use with your AI.