Questions, answered
Understand the decision boundary.
Security, workflow behavior, integrations, and what Nodsend deliberately does not do.
What is Nodsend?+
Nodsend is human approval infrastructure for AI agents. Your server creates a decision request, Nodsend presents it to an authorized person, and your workflow resumes from a signed outcome.
Why not ask the model to request approval itself?+
A model-callable tool is useful, but it is not a security boundary because the model may omit it. Put the protected side effect behind an application-enforced Nodsend checkpoint.
Does the approver need a Nodsend account?+
No. Email recipients use an opaque, single-use link scoped to one approval. Workspace authentication and human decision authorization remain separate.
How do I know a decision is authentic?+
Nodsend signs webhook events with HMAC-SHA256. Your server verifies the signature, timestamp, and event ID before resuming the workflow.
What happens if two people decide at once?+
The decision transition is atomic. Only the first valid pending-to-terminal transition succeeds; later attempts receive the already-decided state.
What happens when a request expires?+
Expired requests cannot be approved or rejected. Your workflow can treat expiry as its own terminal outcome and escalate, retry, or stop safely.
Which agent frameworks are supported?+
The core API works with any stack. The repository also includes optional Python adapters for LangChain/LangGraph, CrewAI, and AutoGen using each framework’s native control-flow patterns.
Can Nodsend execute the sensitive action for me?+
No. Nodsend records authority; your trusted application owns execution. This keeps credentials and side effects inside your infrastructure.
Is Slack available?+
Email delivery is the supported channel today. We do not advertise Slack as available until its authentication, interaction security, and delivery lifecycle are complete.
Where should API keys be stored?+
Only on your server or in a secrets manager. Never put an API key in frontend code, a public URL, or a model prompt.