Human-approval tool calls: how to do it with AI
Last checked 2026-10-15
AdvancedBot with human review ⚙️ Automation & agents
Agents that pause for approval before acting.
1. Bot automation level
Bot with human review Agents act on real systems; review plans, approvals and results before trusting them.
2. Before you hand it to the bot
- Gather inputs: files, data samples, links and any templates.
- Set up access: connect only the apps/repos the agent needs, with least-privilege accounts.
- Context: tell the bot audience, purpose, constraints and examples of good output.
- Privacy check: remove personal, confidential or regulated data unless your plan/workspace is approved for it.
- Success criteria: write down what 'done' looks like (length, format, tests passing, fields filled).
3. Copy-paste prompts
Main prompt
Add a human approval step before the agent sends any email.
Beginner-friendly
Add a human approval step before the agent sends any email. I'm new to this: explain each step in plain words and ask me for anything you need before starting.
Check-your-work
Add a human approval step before the agent sends any email. When you finish, list any assumptions you made, anything you're unsure about, and what I should double-check before using the result.
Free tiers that can handle this (verified): n8n. Others: check plan.
4. Step-by-step
- Pick a bot/platform from the list below and confirm your plan includes the needed agent features.
- Connect the required tools (repo, apps, MCP servers or connectors) in a test/sandbox first.
- Paste the agent instructions below; include success criteria and where to stop for approval.
- Run once on a small sample and watch each step/log.
- Review the plan, actions and output; fix instructions and re-run.
- Add approval steps, error handling and notifications before running on real data.
- Verify the final result against your success criteria; then schedule or enable it.
5. Which bots and plans can do it
| Tool | What's different here | Plan limits | Source |
|---|---|---|---|
| n8n | — | Self-host Community Edition free, or Cloud plans (EUR); AI nodes need model credentials or Assistant credits. | n8n.io/pricing/ |
| ChatGPT (incl. Work & Codex) | — | Free tier has limited deep research, Codex and Work; scheduled tasks need Go or higher (per chatgpt.com/pricing). | help.openai.com/en/articles/20001275-chatgpt-work-and-codex |
| Claude (incl. Claude Code) | — | Claude Code and Research need Pro or higher; computer use is Pro/Max only (research preview). | code.claude.com/docs/en/desktop |
Free or paid?
- n8n: Free: yes. Community Edition is free if you self-host. Paid: price not verified, so check the official site. Its free tier can handle this task.
- ChatGPT (incl. Work & Codex): Free plan: yes. unlimited text chats; limited uploads, images, voice, deep research and Codex. Paid: price not verified, so check the official site. For this task, check the plan.
- Claude (incl. Claude Code): Free plan: yes. chat, web search, files & code execution, Artifacts, connectors. Claude Code and Research need Pro. Paid: the lowest price we could verify on the official pricing page is $20/month (other plans may exist). For this task, check the plan.
6. Risks and what to double-check
- Start with a dry run and an approval step; add logging and a kill switch.
- AI can hallucinate facts — verify anything that matters.
- Watch for prompt injection from web pages, emails or files the agent reads.