# Actionbox

> Actionbox is a server-authoritative human decision layer for automation and AI agents.

## Overview
- [Documentation](https://actionbox.cloud/docs): Full developer guide, API reference, and SDK tutorials.
- [Human Approval API](https://actionbox.cloud/human-approval-api): Add a durable approval gate to AI agents, scripts, and automations.
- [Pricing](https://actionbox.cloud/pricing): Transparent unit economics, free Developer tier, and Pro/Team plans.
- [MCP Setup](https://actionbox.cloud/mcp): Connect Claude Code, Codex, Cursor, and AI agents through Model Context Protocol.
- [System Status](https://actionbox.cloud/status): Live health metrics for Actionbox Cloud API, push gateways, and webhook queues.
- [Terms of Service](https://actionbox.cloud/terms): Commercial terms, multi-tenant isolation, and service agreements.
- [Privacy Policy](https://actionbox.cloud/privacy): Data protection, tenant privacy, and zero training on private customer payloads.

## Core API Primitives
- [Action Lifecycle](https://actionbox.cloud/docs/actions): Server-owned state machine (`open`, `resolved`, `cancelled`, `expired`).
- [Interaction Types](https://actionbox.cloud/docs/interaction-types): Typed choices, text, numbers, ratings, and forms.
- [Signed Webhook Callbacks](https://actionbox.cloud/docs/webhooks): HMAC-SHA256 authenticated callback delivery.
- [Heartbeat Watches](https://actionbox.cloud/docs/watches): Missed schedules and runtime overruns become ordinary durable Actions.
- [Execution Outcomes](https://actionbox.cloud/docs/decisions-outcomes): Bind one immutable execution result to the exact approved Action.
- [API Reference](https://actionbox.cloud/docs/api-reference): Source-authenticated REST endpoints and typed payloads.
- [MCP Human Input](https://actionbox.cloud/docs/mcp-gate): Connect an MCP-capable agent to durable ask_human and get_action tools through the public CLI bridge.

## Blog: Workflows with Human Sign-Off
Copy-paste approval workflows for deployments, data pipelines, cron jobs, incident response, ML model promotion, and secret rotation. Each post includes complete, runnable code.
- [MCP Security and Authorization: OAuth, Permissions, and Approval](https://actionbox.cloud/blog/mcp-security-authorization/): Secure an MCP integration by separating OAuth authorization, tool permissions, human approval, secret handling, and auditable execution outcomes.
- [AI Agent Observability: Trace Tool Calls, Decisions, and Outcomes](https://actionbox.cloud/blog/ai-agent-observability/): Design AI agent observability that connects model and tool traces with human decisions, execution outcomes, failures, and rollback evidence.
- [AI Agent Governance: Approval Policies, Audit Trails, and Outcomes](https://actionbox.cloud/blog/ai-agent-governance/): Build practical AI agent governance with risk policies, human approval, version-bound decisions, execution outcomes, and reviewable evidence.
- [Webhook Human Approval Integration: Resume Work Safely](https://actionbox.cloud/blog/webhook-human-approval-integration/): Build and verify a signed Actionbox approval webhook that resumes a deployment exactly once, with tested Python code and a real end-to-end walkthrough.
- [Production AI Agent Deployment: Human Approval Checklist](https://actionbox.cloud/blog/production-ai-agent-deployment-guide/): A production AI agent deployment checklist covering identity, tool permissions, approvals, durable state, observability, and rollback.
- [OpenAI Agents SDK Human-in-the-Loop Approval with Actionbox](https://actionbox.cloud/blog/openai-agents-sdk-human-in-the-loop/): Connect OpenAI Agents SDK human-in-the-loop tool approvals to Actionbox with needs_approval, typed decisions, and fail-closed resume.
- [Adding Human Oversight to LLM Pipelines: A Practical Approval Step](https://actionbox.cloud/blog/llm-human-approval-step/): Add a human approval step to an LLM pipeline before tool calls, customer-facing output, or irreversible automation continues.
- [LangGraph Human-in-the-Loop Approval with Actionbox](https://actionbox.cloud/blog/langgraph-human-in-the-loop/): Add LangGraph human-in-the-loop approval with interrupt, a stable thread_id, Actionbox review, and fail-closed Command resume.
- [Human-in-the-Loop API vs Building Your Own Approval System](https://actionbox.cloud/blog/human-in-the-loop-api-vs-build-your-own/): Compare a human-in-the-loop API with an in-house approval system across state, notifications, security, auditability, and long-term maintenance.
- [Durable Execution Explained: Pause and Resume Stateful AI Agents](https://actionbox.cloud/blog/durable-execution-explained/): What durable execution means for stateful AI agents, how checkpoints survive restarts, and where human approval belongs before side effects.
- [Human Approval Tools for AI Agents: 2026 Evaluation Guide](https://actionbox.cloud/blog/best-human-approval-tools-for-ai-agents/): A practical framework for evaluating human approval tools for AI agents: state, safety, typed decisions, audit trails, and developer fit.
- [AI Agent Audit Trails: Approval and Execution Best Practices](https://actionbox.cloud/blog/ai-agent-audit-trail-best-practices/): Build an AI agent audit log that records the proposed tool call, human decision, exact payload, and real execution outcome.
- [Actionbox Review: Human Approval API Alternatives for AI Agents](https://actionbox.cloud/blog/actionbox-vs-alternatives/): An honest Actionbox review and alternatives guide for teams choosing between framework interrupts, workflow engines, alerts, and a human approval API.
- [Actionbox 0.1.4: Watches, Agent Runs, and Outcomes](https://actionbox.cloud/blog/actionbox-0-1-4-autonomy-foundations/): Actionbox 0.1.4 adds heartbeat and progress Watches, immutable execution outcomes, and bounded Agent Run context.
- [Heartbeat Watches: turn a silent job into a durable Action](https://actionbox.cloud/blog/heartbeat-watches-that-turn-silence-into-an-action/): A practical heartbeat-monitoring workflow for backups, cron jobs, CI runners, and agent tasks that must report liveness without building a second incident system.
- [Terraform plan approval: protect destroy and replace operations](https://actionbox.cloud/blog/terraform-destroy-gate/): A copy-paste Terraform plan approval gate that detects destroy and replace operations in CI, blocks apply, and records the human decision.
- [Stripe refund approval workflow: route high-value refunds](https://actionbox.cloud/blog/refund-approval-workflow/): A copy-paste Stripe refund approval workflow that routes high-value refunds to a manager with context, a decision SLA, idempotency, and an audit trail.
- [JIT privileged access approval workflow: grant, expire, revoke](https://actionbox.cloud/blog/privileged-access-approval/): A copy-paste JIT privileged access approval workflow with bounded grants, automatic revocation, expiry, and an audit trail without standing access.
- [Policy Exceptions Workflow: Approve, Expire, and Audit](https://actionbox.cloud/blog/policy-exception-approval/): A practical policy exceptions workflow that records approvals, expiry, renewal, owners, and compliance evidence for deviations.
- [GitHub Actions Manual Approval and Deployment Gate](https://actionbox.cloud/blog/github-actions-deploy-gate/): Add GitHub Actions manual approval before production with bounded waiting, rejection handling, cleanup, reviewed context, and a recorded deployment outcome.
- [Flaky test retry approval in CI: quarantine failures safely](https://actionbox.cloud/blog/flaky-test-retry-approval/): A copy-paste flaky test retry approval workflow for CI that limits retries, records the decision, and fails closed when quarantine is rejected.
- [Feature flag rollout approval: gate 5%, 25%, and 100% exposure](https://actionbox.cloud/blog/feature-flag-rollout-approval/): A copy-paste feature flag rollout approval workflow that gates each exposure stage with evidence, guardrails, sequential decisions, and rollback.
- [Dependabot and Renovate approval: gate major dependency updates](https://actionbox.cloud/blog/dependency-pr-approval/): A copy-paste dependency update approval workflow for Dependabot and Renovate that auto-merges safe updates and routes major changes to a human.
- [Database migration approval workflow: block destructive PostgreSQL DDL](https://actionbox.cloud/blog/database-migration-gate/): A copy-paste database migration approval workflow that blocks destructive PostgreSQL DDL in CI with risk detection, lock budgets, and audit history.
- [Argo CD production sync approval: a Kubernetes GitOps gate](https://actionbox.cloud/blog/argocd-approval-gate/): A copy-paste Argo CD production sync approval workflow for Kubernetes GitOps: keep auto-sync safe, review the revision, and fail closed.
- [Human-in-the-Loop AI Agents: Approval Workflow Guide](https://actionbox.cloud/blog/ai-agent-approval-gate/): Understand where human approval belongs in AI agent tool calls, compare OpenAI Agents, LangGraph, and MCP, and choose an integration path.
- [dbt full-refresh approval: gate expensive models and backfills](https://actionbox.cloud/blog/dbt-full-refresh-gate/): A copy-paste dbt full-refresh approval workflow that gates expensive models and backfills with warehouse-cost context, timeouts, and a safe reject path.
- [Cron job approval workflow: gate scheduled automation before it acts](https://actionbox.cloud/blog/cron-jobs-that-ask/): A copy-paste cron job approval workflow that gates cleanup, backup, and rotation tasks before they run, with explicit timeout and audit behavior.
- [Incident response approval workflow with an SLA countdown](https://actionbox.cloud/blog/incident-runbook-sla/): A copy-paste incident response approval workflow for rollbacks, scaling, and kill switches with a visible SLA countdown and fail-closed timeout.
- [ML model promotion approval workflow: staging to production safely](https://actionbox.cloud/blog/ml-model-promotion-gate/): A copy-paste ML model promotion approval workflow that gates staging-to-production releases with evaluation metrics and safe rollback behavior.
- [Secret rotation approval workflow: stage, approve, and swap safely](https://actionbox.cloud/blog/secret-rotation-sign-off/): A copy-paste secret rotation approval workflow that stages a new credential, requires approval before production swap, and records audit evidence.