# Approvals and permission modes

> How Koshra's Allow, Ask and Block rules, approval cards and per-bot permission modes keep a person in charge of anything that goes out.

Canonical: https://koshra.com/docs/approvals
Last updated: 2026-11-02

Koshra drafts; you decide. Every tool call is checked against rules before it runs.

## Allow, Ask, Block

Each tool has a rule: Allow runs it, Ask stops for your approval, Block refuses it. Rules can be set for your account and for each space.

## Approval cards

When a rule says Ask, the bot pauses and an approval card appears with what it wants to do. You answer Allow or Deny. Web Push alerts can reach your phone, and the approvals inbox only shows cards to the space owner and admins.

## What always waits for you

- Outbound Slack posts and emails
- Creating a new bot
- Creating or changing a schedule
- Bulk CRM changes, and any write over 25 records

## What is always blocked

- Deleting, merging, purging or wiping CRM records
- Deleting or merging items in the project tracker

## Permission modes

Each bot has a permission mode on top of the rules. A mode can make a bot stricter, never looser than the rules allow.