consent-app
Consent App
Decision heuristic: If the operation has real-world side effects on behalf of the user — sends, pays, books, posts, deletes, shares, signs up, or otherwise commits the user to something a third party will see or charge — call this skill before the side effect, never after.
Request user consent/approval through the Consent App before proceeding with critical or destructive operations. The user receives a consent request in their mobile app and can approve or reject it.
The skill talks to the Consent App backend using a user-managed API key: the Consent App user creates a key in the mobile app and gives the plaintext (cak_...) to the skill. The skill never signs the user in, never persists the key, and never performs any user-account action — it only creates consent requests and reads back the user's decision. The key can be revoked from the mobile app at any time.