Documentation

Review assistant changes

How a connected agent prepares a 30-minute proposal that only you can approve in SquadBear

Seven writes, and three people writes in some cases, never run from the assistant's token. The first call stores a proposal. You approve it in SquadBear. The assistant then repeats the same arguments to commit.

Which writes wait

These MCP tools prepare a proposal instead of executing:

  • erase_employee - GDPR erasure of an offboarded person. Irreversible.
  • update_workspace_settings - includes retention that can delete records, and the public calendar feed.
  • update_leave_type - a leave type's name, request rules and approval, or what it counts.
  • update_allowance - an allowance's amount, carry-over and deadline.
  • update_leave_policy - a policy's name, amount adjustments, new-hire setting or on/off state.
  • apply_leave_preset - adds a country preset's allowances and leave types, each with a Standard policy.
  • start_process - starts a process for one person or a team, which can notify people and call integrations.

These wait only for the calls named:

  • update_employee - a call that sets someone's role or status, or records a previous employer's certificate figures. Offboarding cancels their leave after the last day of employment and hands their pending approvals to someone else. No other employer, Leave seniority, contract type, First job, title, manager, date and location changes apply at once.
  • invite_employee and create_employee - an invitation or a new person with the admin role (or owner, for an invitation). Other roles apply at once.

Each leave change saves a new version: amounts apply from a leave year that starts on or after its date, request rules to requests made from its date.

Booking leave, clocking in, logging time and approving a request do not use this review. Those follow the assistant's own Ask setting and the same domain rules as the web app.

ChatGPT's curated catalog does not include the seven tools above. Use https://app.squadbear.com/mcp from Claude, Cursor, Codex or Gemini. It does include the three people tools, with the same review.

How

  1. Ask the assistant to make one of those changes. The tool returns approvalRequired, a reviewUrl, and an expiry 30 minutes out. Nothing has changed. A leave change that could only fail (an unknown workflow, a value the setting cannot take, switching off a policy that people are in) is refused at this step with the reason, and no proposal is made.
  2. Open the link while signed in as the same person who connected the agent (AI agents). The Review and approve dialog names the assistant asking and the day it was connected, and shows the target, a current-versus-proposed table when the change is a leave or workspace setting or a person's role or status (only the values that change are highlighted), when a leave change takes effect, and the exact arguments under Technical details. A previous employer's certificate lists the figures as the assistant entered them, to compare with the paper copy. An erasure lists what is removed and what is kept, and Approve proposal stays off until you type the person's name.
  3. Choose Approve proposal or Reject. Approve does not run the change. Reject leaves the workspace untouched. Another signed-in user cannot decide this proposal, and an MCP bearer token is refused even if a cookie is also present.
  4. Return to the assistant. It calls get_approval_status. Only approved allows a second call with identical arguments plus approvalId. Changed arguments, a changed target, an expired proposal, or an interrupted commit all refuse. Interrupted commits stay in needs_review and are not retried automatically.

The review cannot edit values. To change a field, ask the assistant for a new proposal.

Worked example

Marta asks Claude to require that carried Vacation days start by the end of September. Claude calls update_allowance on the Vacation allowance and sends her https://app.squadbear.com/agents?approval=…. The dialog shows the carry-over deadline before and after, with the notes "Carried days must start by the deadline. Nothing is removed after it." and when the new amounts apply. She clicks Approve proposal, goes back to Claude, and the second call saves the allowance's next version. Nothing changes until that second call.