Approve every fax from Gemini CLI

Updated

By default Gemini CLI with the Fax for Agents extension sends inside your organization's limits with no approval per fax. When you want a person to approve every fax, an owner turns off the Connected apps switch in Settings. This guide shows what Gemini does then. It quotes the fax and asks a person. The person approves, and only then does Gemini send. It was recorded in Sandbox mode with the switch turned off, so nothing reached a real fax line.

Screenshots taken on .

Before you start

  • A Fax for Agents account and a connected app API key, as in Send a fax from Gemini CLI.
  • Gemini CLI with the Fax for Agents extension installed, started with a current model, for example gemini -m gemini-3.5-flash-lite.
  • In Settings, Connected apps, an owner has turned off "Let connected apps send without asking" and chosen Save. The switch is on by default.
  • For the approver: the ffa command line with an API key of your organization that carries approval:decide. The dashboard Approvals page works too.

1.Open Gemini CLI

Open Gemini CLI in the folder you work in. The extension is already installed, so the footer shows "1 MCP server".

Gemini CLI at its prompt with the Fax for Agents extension loaded, the footer showing 1 MCP server.
The owner has turned off the Connected apps switch in Settings, so every send waits for a person.

2.Allow the fax tools

Type what the fax should say and where it goes, and ask for a quote. Gemini CLI asks once before it runs a tool from the extension.

Gemini CLI asks Allow execution of MCP tool prepare_fax from server faxforagents, with three Allow options and No, suggest changes.
Choose "Allow all server tools for this session". Gemini CLI stops asking for the rest of the session.

3.Read the quote

Gemini prepares the page and asks for a quote. Nothing is sent yet.

The quote for one page to +15550000001 with the policy decision deny, because the Connected apps switch is off.
Gemini reports "Fax prepared and quoted successfully" with the document id, the quote id, the destination and the price. Its last line reads "Approval required". The quote itself says a person must approve it before it is sent, because the Connected apps policy is disabled.

4.Ask a person

Say "Ask a person to approve it."

Gemini has opened an approval request, status pending, bound to the quote.
Gemini reports "Human review requested" with the approval request id, "Status: Pending", the quote id and the destination. The request is bound to this one quote and expires with it.

5.List pending requests

A person on the team opens their own shell.

A second shell below Gemini CLI runs ffa approvals list with the status pending and shows the request with number, pages and amount.
Run ffa approvals list --status pending. The row shows the request id, the number, the pages, the amount and who asked.

6.Approve the request

The approver runs ffa approvals approve with the request id and the shell prints send approved.
Run ffa approvals approve with the request id. The shell prints "send approved" with the number and the pages. The approval is used once.

7.Send with the approval

Back in Gemini CLI, tell it the request is approved and ask for the delivery evidence.

Gemini sends with the approval id and reports delivered, with the delivery evidence under it.
Gemini sends with the approval id and reports "The fax has been successfully sent and delivered". Under it come the fax id, "State: Delivered", the pages sent, the provider reference, the remote station SBX-OK and the time completed.

8.Read the inbox

Received faxes work the same way. Ask for your inbox.

Gemini lists the inbox and prints the text of the newest received fax from +15550000042, two pages.
Gemini answers "Here is the newest received fax from your inbox" and reads it as text, with the sender's number and the page count.

What the limits mean

Open Settings in the dashboard. The Connected apps card holds the switch "Let connected apps send without asking". Under it are two fields, "Amount per fax, at most" ($5.00) and "Faxes per day" (20). With the switch on, a connected app key, such as the one in Gemini CLI, sends inside these limits with no approval per fax. With the switch off, every send waits for a person, as in this guide. See Your assistant sends within limits by default.

Send within limits instead

  1. In Settings, turn on "Let connected apps send without asking" and choose Save.
  2. Ask Gemini to send the fax. The quote says allow and the send goes through at once.
  3. Check the delivery evidence the same way.

The plain routine is in Send a fax from Gemini CLI.

Troubleshooting

  • The quote says allow although you expect approval. The Connected apps switch is on for this environment. Check Settings, Connected apps, and the environment chip in the top bar.
  • Gemini CLI asks "Allow execution of MCP tool" before the first tool. That is Gemini CLI's own permission prompt. Choose "Allow once", or "Allow all server tools for this session".
  • ffa approvals approve is refused with a scope error. The approver's API key is missing approval:decide. An owner creates one on the API keys page.
  • The approval request expired before the send. Approvals expire with their quote. Ask Gemini to quote again, then ask a person again.

Next