# Approvals

> How approvals work in Agent host: a risky call is suspended, appears in the inbox, and a person of the workspace approves or denies it. Your AI cannot.

Source: https://agenthost.geenius.io/docs/approvals/

When an agent wants to make a risky call, the call is **suspended** inside the agent and an approval appears in the **inbox**: what, which agent, since when. A person of the workspace approves or denies it. The hub records the decision and tells the agent with a signed call.

- A scheduled run waits too.
- The AI door can read the queue and cannot answer it.
- A denied call is reported to the model as a failure.