Confirm a Destructive Tool in Slack
Look up a subscription, then pause the persisted run with Approve and Deny actions before an irreversible cancellation tool executes.
"""
Confirm a Destructive Tool in Slack
===================================
Look up a subscription, then pause the persisted run with Approve and Deny
actions before an irreversible cancellation tool executes.
Prerequisites: SLACK_TOKEN, SLACK_SIGNING_SECRET, OPENAI_API_KEY
Run: .venvs/demo/bin/python cookbook/05_agent_os/17_slack/hitl_confirmation.py
Try in Slack: Ask "Cancel C-42 because pricing no longer fits."
Slack scopes: app_mentions:read, assistant:write, chat:write, im:history
"""
from dataclasses import dataclass
from agno.agent import Agent
from agno.db.sqlite import SqliteDb
from agno.models.openai import OpenAIResponses
from agno.os import AgentOS
from agno.os.interfaces.slack import Slack
from agno.tools import tool
@dataclass
class Subscription:
customer_id: str
plan: str
monthly_rate: float
status: str
subscriptions = {
"C-42": Subscription("C-42", "Team", 399.0, "active"),
"C-77": Subscription("C-77", "Enterprise", 2499.0, "active"),
}
@tool
def lookup_subscription(customer_id: str) -> str:
"""Return a customer's current subscription."""
subscription = subscriptions.get(customer_id)
if subscription is None:
return f"No subscription found for {customer_id}."
return (
f"{subscription.customer_id}: plan={subscription.plan}, "
f"rate=${subscription.monthly_rate}/month, status={subscription.status}"
)
@tool(requires_confirmation=True)
def cancel_subscription(customer_id: str, reason: str) -> str:
"""Cancel a subscription after the operator approves the tool call."""
subscription = subscriptions.get(customer_id)
if subscription is None:
return f"No subscription found for {customer_id}."
subscription.status = "cancelled"
return f"Cancelled {customer_id}. Reason: {reason}"
# ---------------------------------------------------------------------------
# Create Confirmation Slack AgentOS
# ---------------------------------------------------------------------------
db = SqliteDb(
id="slack-hitl-confirmation-db",
db_file="tmp/slack_hitl_confirmation.db",
)
billing_agent = Agent(
id="slack-billing-ops-agent",
name="Slack Billing Operations",
model=OpenAIResponses(id="gpt-5.5"),
db=db,
tools=[lookup_subscription, cancel_subscription],
instructions=[
"Look up the subscription before trying to cancel it.",
"Summarize the plan and price, then call cancel_subscription.",
"Do not ask for confirmation in chat; the tool requirement creates the Slack card.",
],
markdown=True,
)
agent_os = AgentOS(
id="slack-hitl-confirmation-os",
description="AgentOS rendering a confirmation pause in Slack.",
db=db,
agents=[billing_agent],
interfaces=[Slack(agent=billing_agent)],
)
app = agent_os.get_app()
# ---------------------------------------------------------------------------
# Run Confirmation Slack AgentOS
# ---------------------------------------------------------------------------
if __name__ == "__main__":
agent_os.serve(app=app)cancel_subscription changes the in-memory demonstration subscriptions. It does not call a billing service. SQLite persists the AgentOS pause and resolution; the subscription dictionary resets when this process restarts.
Run the Example
Set up your virtual environment
uv venv --python 3.12
source .venv/bin/activatePrepare the Slack app
Follow Slack setup to create and install the app, obtain its bot token and signing secret, and configure its current agent experience. Add the bot scopes listed in this example's source docstring and reinstall after changing scopes. Subscribe to app_mention and message.im; configure interactivity for buttons and forms.
Install ngrok and run ngrok http 7777 in another terminal. Keep the tunnel running. After starting this example's server, use the callback paths listed on this page under your public HTTPS URL and complete Slack's verification challenge. Configure each app separately for a multi-app example.
Streaming requires the corresponding Slack app capability. The current Agno adapter initializes suggested prompts on the legacy assistant_thread_started event; the setup guide explains the new-app limitation. Keep only one standalone example on port 7777 at a time.
Install dependencies
uv pip install -U "agno[os,slack]" openaiExport environment variables
export OPENAI_API_KEY="your_openai_api_key_here"
export SLACK_SIGNING_SECRET="your_slack_signing_secret_here"
export SLACK_TOKEN="your_slack_token_here"Run the example
Save the code above as hitl_confirmation.py, then run:
python hitl_confirmation.pyConnect Slack to the running server
Keep Python and ngrok running. In each app's Slack settings, prepend your public HTTPS origin to these paths:
| App | Event subscriptions | Interactivity |
|---|---|---|
| Slack app | /slack/events | /slack/interactions |
Complete URL verification, then send a DM or invite the app to a channel and @mention it. Ordinary channel replies require an @mention with the default configuration.
Full source: cookbook/05_agent_os/17_slack/hitl_confirmation.py