# Approve every fax from Gemini CLI > By default Gemini CLI with the Fax for Agents extension sends inside your organization Page: https://faxforagents.com/docs/guides/gemini-cli-approval/ Last changed: 2026-11-07 Updated Nov 7, 2026 By default Gemini CLI with the Fax for Agents extension sends inside your organization's limits with no approval per fax. When you want a person to approve every fax, an owner turns off the Connected apps switch in Settings. This guide shows what Gemini does then. It quotes the fax and asks a person. The person approves, and only then does Gemini send. It was recorded in Sandbox mode with the switch turned off, so nothing reached a real fax line. Screenshots taken on Nov 7, 2026. ## Before you start - A Fax for Agents account and a connected app API key, as in [Send a fax from Gemini CLI](https://faxforagents.com/docs/guides/gemini-cli/). - Gemini CLI with the Fax for Agents extension installed, started with a current model, for example `gemini -m gemini-3.5-flash-lite`. - In Settings, Connected apps, an owner has turned off "Let connected apps send without asking" and chosen Save. The switch is on by default. - For the approver: the `ffa` command line with an API key of your organization that carries approval:decide. The dashboard Approvals page works too. ## 1.Open Gemini CLI Open Gemini CLI in the folder you work in. The extension is already installed, so the footer shows "1 MCP server". The owner has turned off the Connected apps switch in Settings, so every send waits for a person. ## 2.Allow the fax tools Type what the fax should say and where it goes, and ask for a quote. Gemini CLI asks once before it runs a tool from the extension. Choose "Allow all server tools for this session". Gemini CLI stops asking for the rest of the session. ## 3.Read the quote Gemini prepares the page and asks for a quote. Nothing is sent yet. Gemini reports "Fax prepared and quoted successfully" with the document id, the quote id, the destination and the price. Its last line reads "Approval required". The quote itself says a person must approve it before it is sent, because the Connected apps policy is disabled. ## 4.Ask a person Say "Ask a person to approve it." Gemini reports "Human review requested" with the approval request id, "Status: Pending", the quote id and the destination. The request is bound to this one quote and expires with it. ## 5.List pending requests A person on the team opens their own shell. Run ffa approvals list --status pending. The row shows the request id, the number, the pages, the amount and who asked. ## 6.Approve the request Run ffa approvals approve with the request id. The shell prints "send approved" with the number and the pages. The approval is used once. ## 7.Send with the approval Back in Gemini CLI, tell it the request is approved and ask for the delivery evidence. Gemini sends with the approval id and reports "The fax has been successfully sent and delivered". Under it come the fax id, "State: Delivered", the pages sent, the provider reference, the remote station SBX-OK and the time completed. ## 8.Read the inbox Received faxes work the same way. Ask for your inbox. Gemini answers "Here is the newest received fax from your inbox" and reads it as text, with the sender's number and the page count. ## What the limits mean Open Settings in the dashboard. The Connected apps card holds the switch "Let connected apps send without asking". Under it are two fields, "Amount per fax, at most" ($5.00) and "Faxes per day" (20). With the switch on, a connected app key, such as the one in Gemini CLI, sends inside these limits with no approval per fax. With the switch off, every send waits for a person, as in this guide. See [Your assistant sends within limits by default](https://faxforagents.com/docs/guides/auto-send-switch/). ## Send within limits instead 1. In Settings, turn on "Let connected apps send without asking" and choose Save. 2. Ask Gemini to send the fax. The quote says allow and the send goes through at once. 3. Check the delivery evidence the same way. The plain routine is in [Send a fax from Gemini CLI](https://faxforagents.com/docs/guides/gemini-cli/). ## Troubleshooting - The quote says allow although you expect approval. The Connected apps switch is on for this environment. Check Settings, Connected apps, and the environment chip in the top bar. - Gemini CLI asks "Allow execution of MCP tool" before the first tool. That is Gemini CLI's own permission prompt. Choose "Allow once", or "Allow all server tools for this session". - `ffa approvals approve` is refused with a scope error. The approver's API key is missing approval:decide. An owner creates one on the API keys page. - The approval request expired before the send. Approvals expire with their quote. Ask Gemini to quote again, then ask a person again. ## Next - [Quickstart](https://faxforagents.com/docs/quickstart/) - [Dashboard](https://app.faxforagents.com/) - [Pricing](https://faxforagents.com/pricing/)