Approve every fax from Gemini CLI
Updated
By default Gemini CLI with the Fax for Agents extension sends inside your organization's limits with no approval per fax. When you want a person to approve every fax, an owner turns off the Connected apps switch in Settings. This guide shows what Gemini does then. It quotes the fax and asks a person. The person approves, and only then does Gemini send. It was recorded in Sandbox mode with the switch turned off, so nothing reached a real fax line.
Before you start
- A Fax for Agents account and a connected app API key, as in Send a fax from Gemini CLI.
- Gemini CLI with the Fax for Agents extension installed, started with a current model, for example
gemini -m gemini-3.5-flash-lite. - In Settings, Connected apps, an owner has turned off "Let connected apps send without asking" and chosen Save. The switch is on by default.
- For the approver: the
ffacommand line with an API key of your organization that carries approval:decide. The dashboard Approvals page works too.
1.Open Gemini CLI
Open Gemini CLI in the folder you work in. The extension is already installed, so the footer shows "1 MCP server".
2.Allow the fax tools
Type what the fax should say and where it goes, and ask for a quote. Gemini CLI asks once before it runs a tool from the extension.
3.Read the quote
Gemini prepares the page and asks for a quote. Nothing is sent yet.
4.Ask a person
Say "Ask a person to approve it."
5.List pending requests
A person on the team opens their own shell.
6.Approve the request
7.Send with the approval
Back in Gemini CLI, tell it the request is approved and ask for the delivery evidence.
8.Read the inbox
Received faxes work the same way. Ask for your inbox.
What the limits mean
Open Settings in the dashboard. The Connected apps card holds the switch "Let connected apps send without asking". Under it are two fields, "Amount per fax, at most" ($5.00) and "Faxes per day" (20). With the switch on, a connected app key, such as the one in Gemini CLI, sends inside these limits with no approval per fax. With the switch off, every send waits for a person, as in this guide. See Your assistant sends within limits by default.
Send within limits instead
- In Settings, turn on "Let connected apps send without asking" and choose Save.
- Ask Gemini to send the fax. The quote says allow and the send goes through at once.
- Check the delivery evidence the same way.
The plain routine is in Send a fax from Gemini CLI.
Troubleshooting
- The quote says allow although you expect approval. The Connected apps switch is on for this environment. Check Settings, Connected apps, and the environment chip in the top bar.
- Gemini CLI asks "Allow execution of MCP tool" before the first tool. That is Gemini CLI's own permission prompt. Choose "Allow once", or "Allow all server tools for this session".
ffa approvals approveis refused with a scope error. The approver's API key is missing approval:decide. An owner creates one on the API keys page.- The approval request expired before the send. Approvals expire with their quote. Ask Gemini to quote again, then ask a person again.