Confirm a Destructive Tool in Slack

Look up a subscription, then pause the persisted run with Approve and Deny actions before an irreversible cancellation tool executes.

hitl_confirmation.py
"""
Confirm a Destructive Tool in Slack
===================================

Look up a subscription, then pause the persisted run with Approve and Deny
actions before an irreversible cancellation tool executes.

Prerequisites: SLACK_TOKEN, SLACK_SIGNING_SECRET, OPENAI_API_KEY
Run: .venvs/demo/bin/python cookbook/05_agent_os/17_slack/hitl_confirmation.py
Try in Slack: Ask "Cancel C-42 because pricing no longer fits."
Slack scopes: app_mentions:read, assistant:write, chat:write, im:history
"""

from dataclasses import dataclass

from agno.agent import Agent
from agno.db.sqlite import SqliteDb
from agno.models.openai import OpenAIResponses
from agno.os import AgentOS
from agno.os.interfaces.slack import Slack
from agno.tools import tool

@dataclass
class Subscription:
    customer_id: str
    plan: str
    monthly_rate: float
    status: str

subscriptions = {
    "C-42": Subscription("C-42", "Team", 399.0, "active"),
    "C-77": Subscription("C-77", "Enterprise", 2499.0, "active"),
}

@tool
def lookup_subscription(customer_id: str) -> str:
    """Return a customer's current subscription."""
    subscription = subscriptions.get(customer_id)
    if subscription is None:
        return f"No subscription found for {customer_id}."
    return (
        f"{subscription.customer_id}: plan={subscription.plan}, "
        f"rate=${subscription.monthly_rate}/month, status={subscription.status}"
    )

@tool(requires_confirmation=True)
def cancel_subscription(customer_id: str, reason: str) -> str:
    """Cancel a subscription after the operator approves the tool call."""
    subscription = subscriptions.get(customer_id)
    if subscription is None:
        return f"No subscription found for {customer_id}."
    subscription.status = "cancelled"
    return f"Cancelled {customer_id}. Reason: {reason}"

# ---------------------------------------------------------------------------
# Create Confirmation Slack AgentOS
# ---------------------------------------------------------------------------

db = SqliteDb(
    id="slack-hitl-confirmation-db",
    db_file="tmp/slack_hitl_confirmation.db",
)

billing_agent = Agent(
    id="slack-billing-ops-agent",
    name="Slack Billing Operations",
    model=OpenAIResponses(id="gpt-5.5"),
    db=db,
    tools=[lookup_subscription, cancel_subscription],
    instructions=[
        "Look up the subscription before trying to cancel it.",
        "Summarize the plan and price, then call cancel_subscription.",
        "Do not ask for confirmation in chat; the tool requirement creates the Slack card.",
    ],
    markdown=True,
)

agent_os = AgentOS(
    id="slack-hitl-confirmation-os",
    description="AgentOS rendering a confirmation pause in Slack.",
    db=db,
    agents=[billing_agent],
    interfaces=[Slack(agent=billing_agent)],
)
app = agent_os.get_app()

# ---------------------------------------------------------------------------
# Run Confirmation Slack AgentOS
# ---------------------------------------------------------------------------

if __name__ == "__main__":
    agent_os.serve(app=app)

cancel_subscription changes the in-memory demonstration subscriptions. It does not call a billing service. SQLite persists the AgentOS pause and resolution; the subscription dictionary resets when this process restarts.

Run the Example

Set up your virtual environment

uv venv --python 3.12
source .venv/bin/activate

Prepare the Slack app

Follow Slack setup to create and install the app, obtain its bot token and signing secret, and configure its current agent experience. Add the bot scopes listed in this example's source docstring and reinstall after changing scopes. Subscribe to app_mention and message.im; configure interactivity for buttons and forms.

Install ngrok and run ngrok http 7777 in another terminal. Keep the tunnel running. After starting this example's server, use the callback paths listed on this page under your public HTTPS URL and complete Slack's verification challenge. Configure each app separately for a multi-app example.

Streaming requires the corresponding Slack app capability. The current Agno adapter initializes suggested prompts on the legacy assistant_thread_started event; the setup guide explains the new-app limitation. Keep only one standalone example on port 7777 at a time.

Install dependencies

uv pip install -U "agno[os,slack]" openai

Export environment variables

export OPENAI_API_KEY="your_openai_api_key_here"
export SLACK_SIGNING_SECRET="your_slack_signing_secret_here"
export SLACK_TOKEN="your_slack_token_here"

Run the example

Save the code above as hitl_confirmation.py, then run:

python hitl_confirmation.py

Connect Slack to the running server

Keep Python and ngrok running. In each app's Slack settings, prepend your public HTTPS origin to these paths:

AppEvent subscriptionsInteractivity
Slack app/slack/events/slack/interactions

Complete URL verification, then send a DM or invite the app to a channel and @mention it. Ordinary channel replies require an @mention with the default configuration.

Full source: cookbook/05_agent_os/17_slack/hitl_confirmation.py