The Veto Agent (Focus: Token Vault & Asynchronous Authorization)

The Challenge

Create an AI agent that is integrated with a user’s third-party service (e.g., Google Calendar, Slack, GitHub) to perform automated tasks. However, any high-impact action must be approved by the user outside of the chat session.

Goal

• Use Token Vault to securely manage the access tokens for the third-party service.
• Implement Asynchronous Authorization (CIBA) to pause the agent’s flow and send a push notification/email for user approval before executing a critical task (e.g., “AI Agent wants to delete all unread emails” or “AI Agent wants to schedule a meeting with the CEO”).

Success Criteria

The agent successfully fetches data from the third-party service, but a specific, sensitive command triggers an out-of-band request for user consent, halting execution until approval is received.

How to Submit

Share a link of your code repository!