Approve an agent's sends

With Confirm before sending (on by default), an agent can never send an email on its own, even with the Everything, including sending level. Every send or scheduled send waits for your decision.

How it works

1. The agent asks to send. Heron holds the email and tells the agent it’s waiting for your approval.
2. You get a notification, for example “Claude wants to send an email”. In the Heron apps, a banner shows Claude wants to send an email to … with a View button.
3. You see the full email: sender, recipients, subject, text, attachments, and the original message if it’s a reply.
4. Choose Approve and send (or Approve schedule for a scheduled send), or Reject. The agent is told your decision.

If several requests are waiting, move between them with Previous request and Next request. On mobile, the notification also offers Approve and Reject directly.

After your decision

• An approved email goes out the usual way: undo send delay and scheduled send included.
• If you don’t answer, the request expires after 24 hours and nothing is sent.
• A request handled on one device disappears from the others.
• The agent can check the status of its request (with the CLI: heron pending <id>).

Pending requests are also listed in the AI agents view (Awaiting your approval), reachable from the sidebar if Show in sidebar is on.

Turn confirmation off?

You can, in Settings → AI agents, but agents allowed to send will then do so without asking you. We recommend keeping it on: a malicious email could push an agent to send something you didn’t ask for. See Security best practices.

Good to know: an email “sent” by an agent didn’t go out? It’s probably waiting for your approval: check the notification or the banner in Heron.