A tool confirmation decision approves or rejects a pending tool call before execution. The decision can be selective across a batch, and approved calls may carry modified arguments. section 6.3.7
A confirmation-aware agent follows this execution flow:
- Store approval-required calls in execution state without executing them or creating results. section 6.3.7
Selective approval
When an agent requests three tool calls, a user can approve two and reject one. File deletion and payment processing must wait for approval because executing first cannot be undone. section 6.3.7
