Approving an action

Some things Claude can do on your club's behalf only happen after you say yes: anything that emails or texts a member, moves money, changes a credential, or exports personal information. Claude can't do these on its own, even if you've connected it and turned on making changes.

The approvals list shows each waiting batch as a link with a visible keyboard focus outline. Opening that link only shows the review; it approves nothing.

1. Claude asks to do something that needs your approval. For example, replying to a support ticket.

2. You get an email with a link, and Claude tells you the same thing: it's waiting on you.

3. Open the link from the email and sign in if you're not already. The approvals page is not in the admin sidebar. The emailed link is how you get there. (If you have lost the email, the page is at /admin/approvals and shows whatever is waiting on you specifically.)

4. You'll see exactly what Claude wants to do, written out in plain text, never as something that could run on its own just by you looking at it. If it would email or text someone, the page shows who and, if your club is in quiet mode, says so.

5. Check the boxes for what you want to approve (nothing is checked by default), and press Approve checked. Anything you leave unchecked stays waiting: you can come back to it later or deny it.

Nothing runs until you press that button. If Claude asks for something else while you're looking at the page, it shows up as a new item. It's never silently added to what you already approved.

The link you get by email works for a little while and only proves it's you because it's the only thing sent to your own inbox. Opening it keeps you "trusted" for the next 15 minutes, so a batch of a few small approvals in a row doesn't ask you to prove who you are every single time.

Two things ask for more, even with a fresh link:

• You showed up a different way. If you go straight to the Approvals page instead of clicking the email, or your link has expired, you'll be asked for a short code. Texted to your phone if you have one on file, otherwise emailed.

• It's a lot of money. A club can set a dollar threshold in Settings; anything above it always asks for a code, even right after you clicked the link.

Deny an item instead of approving it. Nothing happens, and it's recorded that you said no. Every approved action is logged the same way as anything else in the audit log, and it can be undone the same way a member of staff could undo it themselves, within the usual window.

An API key (used for scripts and integrations, not a person) can't reach anything that needs this kind of approval. There's no one to ask. Those stay limited to lookups and everyday changes.