Skip to content

Help center

Approvals

Bots read your apps freely. Writes to your connected apps, and steps on the computer that would commit something, wait for you. Only your own decision approves an action; nothing in a web page, email or document can.

What waits for you

  • Writes to your connected apps: sending, posting, sharing, updating a record, deleting, and any action Krafty doesn't recognize.
  • Steps on the computer that would commit something, such as buying, submitting a form or sending a message.
  • Commands on the computer that send data out, such as uploading or pushing code. The card shows the exact command, and approving runs it once, as you saw it.
  • Not held: a plain email a Bot sends only to an address verified on your Krafty account, up to 3 per reply. More than that waits too.

Where to approve

When one reply prepares several actions, such as one email per client, the cards show Approve all and Decline all. You can still decide each one separately.

  • On the card in the chat.
  • On the Activity page, under Waiting for you. The sidebar shows how many are waiting.
  • From the notification on your phone, if you use the app, with Approve, Always allow and Decline.

What happens when you decide

  • Approve: for an app action, the exact action you saw runs right away, and the Bot is told the result. For a computer step, the Bot looks at the screen again and repeats the step.
  • Decline: the Bot is told, and it can't ask for another approval in the turn your decline starts. The same app request, unchanged, is refused without a new card for the next 24 hours.
  • Do nothing: requests expire after 7 days. To do it later, ask the Bot again.

Always allow

Always allow approves this request and lets that Bot take the same action, in the same connected account, without asking again. It covers that Bot, action and account only.

High-risk actions can never be always allowed: sending, posting, sharing, paying, deleting, anything that touches money, grades, rosters or access, and actions Krafty doesn't recognize. Neither can computer steps. On those, Always allow counts as a single approval.

To remove a rule, open Activity and select Remove next to it under Always allowed.

Approvals on the computer

Every click, drag, Enter and non-navigation key a Bot sends on the computer is checked first by a separate model, using a screenshot the server takes. A step it judges to commit something stops and waits for you. The card shows the screenshot, and the site when the check could read it. The approval covers that step, on that site, for a short time.

Some steps are never approvable: changing passwords, permissions or ownership on an account, and typing commands into a terminal on the desktop. The Bot asks you to do those yourself.

If the check can't run, the step doesn't either.

What approvals can't catch

  • The computer check is a model reading pixels. It can be wrong, or fooled by a misleading page, and a page can change between the screenshot and the click.
  • Typing without pressing Enter can still submit on some sites.
  • The Bots' commands on the computer can still reach the internet. Only commands that obviously send data out wait for approval, so a script can still post data, and a page can try to talk a Bot into that.
  • A decline on the computer lasts for that turn only. If the Bot asks again later, you'll see a new card, and nothing runs without your approval.

Questions

No. Only your decision, from the card, the Activity page or your phone, approves an action.

All help topics

Still stuck?

Email support@kraftybot.app. Say what you were trying to do, what happened, and whether you were on the web or the phone app. Never send passwords, sign-in codes, API keys or card numbers.

The support page has more on reporting a problem and on privacy.