Human confirmation

An agent may initiate a request only after its user asks. Include requested_by: agent and identify the agent in agent_context.

{
  "requested_by": "agent",
  "agent_context": {
    "name": "Acme Assistant",
    "provider": "Example AI",
    "identifier": "agent_7f3c",
    "acting_for": "the email recipient"
  }
}

The create response has status pending_confirmation and a challenge UUID. Contact Button sends the code directly to the human’s email. Submit it to:

POST /v1/public/pages/{page_id}/confirmation-challenges/{challenge_id}/confirm

Do not ask a human to paste the OTP into an untrusted third-party agent. If the user declines, stop. A challenge expires after 15 minutes and locks after repeated invalid attempts.

Agent onboarding

Protocols