AI apps (MCP)

Approve AI actions in Clikso

View as Markdown Open in Claude Open in ChatGPT

In short

When a tool is set to Needs approval, the AI app cannot run it alone. In Claude, ChatGPT and VS Code, Clikso shows a card in the chat. Other apps give you a link to a Clikso page. Either way you check what will change and press Approve, and Clikso makes the change right then.

Which apps show the card

A card in the chat: Claude on the web and desktop, ChatGPT and VS Code, when Clikso could verify the app at sign-in. A verified app shows its own name and icon on the Clikso sign-in page.
A link to a Clikso page: every other app, such as Claude Code, Cursor and Gemini, and any app the sign-in page marked "Unverified app".

Both work the same way and follow the same rules. The card also has an Or approve in Clikso link, if you would rather use the page.

Approve in the chat

1. The AI app asks, and Clikso shows a card in the chat
Point the summer link at the autumn page.
That needs your approval. Use the Clikso card below.
Clikso needs your approval
Claude wants to update link
Update https://clik.is/summer: destination → https://example.com/autumn
What will change
Destinationhttps://example.com/summer→https://example.com/autumn
Workspace Acme · expires in 9:42
Always allow “Update link” for Claude
DenyApprove
Or approve in Clikso
Claude cannot make this change on its own. Clikso shows exactly what will change, and waits for you.
2. You press Approve, and the change happens at once
Approved
Done. Updated https://clik.is/summer.
Done. https://clik.is/summer now goes to the autumn page.
The card says what happened and lets Claude know. It runs only once.
Other ways it can end
Denied
Nothing was changed.
This request expired
Nothing was changed. Ask Claude to try again.
Approved, but it didn’t work
No link with that id or short URL in this workspace.
You pressed Deny; nobody pressed anything for 10 minutes; or Clikso ran it and it failed.

The first time, Claude may ask whether it can show the Clikso app in the chat. Choose Allow or Always allow. If you say no, ask Claude for the approval link instead.

Approve on the Clikso page

Apps without the card show you a link. It opens a Clikso page with the same details and the same buttons.

1. The AI app asks, and Clikso sends a link
Point the summer link at the autumn page.
This needs your approval in Clikso. Open app.clik.so/ai/approve/0192… and press Approve. The link works for 10 minutes.
Claude Code cannot make this change on its own. It shows you the approval link instead.
2. You check exactly what will change, then approve
app.clik.so/ai/approve/0192…
Claude Code wants to update link
Update https://clik.is/summer: destination → https://example.com/autumn
Destination
https://example.com/summer → https://example.com/autumn
Workspace: Acme · asked 1 min ago · expires in 9 min
Always allow “Update link” for Claude Code
DenyApprove
The approval page. It opens only for the person who connected the app, signed in to Clikso.
3. Clikso makes the change at once
app.clik.so/ai/approve/0192…
Done
Done. Updated https://clik.is/summer. You can go back to Claude Code.
Pressing Approve runs the action right away, exactly as shown. It runs only once.
4. The AI app picks up the result
done
Updated https://clik.is/summer. It now goes to the autumn page.
Claude Code calls run_approved_action. It reads the result; it cannot run the action a second time.

The rules

Only you can approve. The card shows only in your own chat. A Clikso link opens only for the account that connected the app, signed in. Anyone else sees "Request not found".
The AI cannot press Approve for you. The card's buttons use tools that apps hide from the AI model and refuse if it calls them. Each card also carries a one-time key that only the card gets.
It runs once, at approval. Pressing Approve makes the change straight away. The AI app can then call run_approved_action to read the result. It cannot run the action a second time.
It runs as the app, not as you. The action keeps the app's limits: its access, its workspaces and your plan. Approving never gives the app your full rights.
It expires. After 10 minutes the card and the link stop working. Ask the app to try again for a new one.
What you see is what runs. You see the values Clikso saved when the app asked. Web addresses show as plain text, never as links you could click by mistake.

Approve, deny or always allow

Approve runs the action and shows "Done" with what changed. If the action fails, you see "Approved, but it didn't work" and why.
Deny stops it. Nothing changes, and the AI app is told not to try again.
Always allow is a checkbox above the buttons. Tick it before you approve, and that tool switches to Always allow for this app. Next time it runs without asking.

When Clikso refuses to run it

Things can change between the request and your click. If they do, Clikso stops and says "Clikso can't run this now", with the reason. Nothing runs, and the request stays open.

This happens when:

you blocked the tool after the app asked,
you made the connection View only,
you took the workspace out of the connection, or
the saved details are no longer valid.

Find waiting requests

Open Settings → AI connections. Requests that still need you appear under Waiting for your approval, with the number waiting. Each app's page also shows them in its Activity list.

Good to know

On the Clikso page you need to be signed in. If you are not, Clikso asks you to sign in first, then brings you back.
If a card shows only Approve in Clikso, the app did not pass the card what it needs. Use that button to approve on the Clikso page.
Any tool can be set to Needs approval, even a read tool. Then even a search waits for you.
If you approve but the app never collects the result, the change still happened. Check the link in your dashboard.