@appmonster/approval

Ask a human before an AI agent does something irreversible. Every K-MCP server runs its write tools through this.

import { writeGateFromEnv, takeConfirmToken } from "@appmonster/approval";

const gate = writeGateFromEnv(process.env, { source: "my-server" });
const { args, token } = takeConfirmToken(rawArgs);
const g = await gate.check("toss_cancel_payment", args, token);
if (!g.ok) return g.message;   // preview / rejected / quota — show it to the agent

| Mode | Env | Behaviour | |---|---|---| | confirm (default) | — | First call returns a preview + one-time confirm_token; runs only when re-called with it (same args, 10 min). | | approval | OKAGENT_API_KEY=ok_… | Creates a request at OK Agent; the owner approves on KakaoTalk (or an auto-approve rule does). | | direct | KMCP_WRITE_MODE=direct | No check. |

Other env: OKAGENT_URL (default https://okagent.kr), APPROVAL_TIMEOUT_SEC (default 600), APPROVAL_SOURCE. Legacy APPROVAL_URL / APPROVAL_API_KEY still work.

Lower level: ApprovalClient (create / get / ask) and createApprover() for hosts that only want a boolean approveWrite hook.

MIT