AI agents · Approval on the phone · Actions and signing requests
CodeB for Agents – your AI agent prepares, you approve every action on your phone, and only you sign
An AI agent can do the groundwork – prepare a payment, an order or a booking, or the paperwork around signatures. Whenever it needs your yes, CodeB Wallet shows you exactly what it wants: what, how much, to whom and with which reference. You compare a short code and confirm with your fingerprint, face or PIN – or deny with one tap. Every decision gets a receipt signed by the server. Signing documents always stays with a person: an agent can prepare signing requests but never sign.
- Approve any action by code + screen lock
- A hardware key signs exactly what you saw
- Agents can never sign
What an agent can do – and what it cannot
It can: prepare signing requests on your CodeB account – upload PDFs, place one signature box per signer, set the order, invite people, follow the status and fetch the signed PDF and its signature check.
It cannot: sign, see your signing keys, use your signature card or act after the hour you approved. Its access is limited to signing requests; every other part of your account stays closed to it. You can remove an agent at any time.
Easy to find for AI apps: CodeB signing is listed in the official MCP Registry – the public directory AI apps and agent tools use to find MCP servers – as io.codeb/signing. Setup for your AI app: AI agents on phone.codeb.io.
Approve any action of an AI agent
An agent connected to your CodeB account can ask you to approve a single action: a payment, an order, a contract, sharing data, a booking or another action it describes. The request appears in CodeB Wallet under Settings → CodeB account → Agent requests, and you also get an e-mail.
You see exactly what you approve: the title, the amount, the recipient with IBAN, the reference, a description and the agent’s link, plus the agent’s name and the person or company it acts for. Links are shown as text and never opened by themselves.
What you see is what you sign: on Android 11 and newer, CodeB Wallet keeps a separate approval key in the phone’s secure hardware. Right after your fingerprint, face or PIN it signs exactly the details you saw. If the request changes while you confirm, nothing is signed and the request can only be denied.
Proof for everyone: the agent gets your decision with a receipt signed by phone.codeb.io, which anyone can check with the server’s published keys. Every decision, and every approval key added or removed, is written to a tamper-evident, hash-chained log.
Open standards: OpenID CIBA for the request, OAuth 2.0 Rich Authorization Requests (RFC 9396) for the details and JSON Web Signatures for the confirmation and the receipt. The approval key is separate from your digital identity: it never touches your PID, your other credentials or the wallet’s own keys.
- Your agent sends its request to CodeB and shows you a 4-digit code.
- Open CodeB Wallet → Settings → CodeB account → Agent requests and check what the agent wants: the action, the amount, the recipient and the reference.
- Compare the code with the one your agent shows. Approve only if both match.
- Tap Approve and confirm with your fingerprint, face or PIN – or tap Deny. A request you do not answer expires after at most 15 minutes.
- The agent receives your decision with a signed receipt.
Connect your AI app with one address (MCP)
Besides agents that ask for your approval for one hour, AI apps that support the Model Context Protocol (MCP) can connect to your CodeB account permanently – with one address and no password or key: https://phone.codeb.io/mcp. You decide what the app may use when you allow it:
| Permission | What the AI app can do | What it cannot do |
|---|---|---|
| Signing requests | Check PDFs, create signing requests with ordered signers and signature boxes, invite and remind signers, follow the status, fetch the signed PDF and its signature report | Sign – every signature is made by a person in CodeB Wallet |
| Age checks | Create a link where a customer confirms “over 18” with an EU Digital Identity Wallet, and see the answer | See the customer’s name, birth date or document data – it gets only yes or no |
| Meetings | Create browser video meetings, invite people with a calendar file, list and cancel meetings | Change your settings |
| Cards (administrators) | Offer cards from your site’s templates to members or guests, see whether they were collected, revoke them | Issue cards without administrator rights or outside your templates |
- In your AI app, open the settings for connectors, integrations or MCP servers and add
https://phone.codeb.io/mcpas a remote server. - The app opens CodeB. Sign in if asked and check the app’s name.
- Tick the permissions you want to grant and choose Allow.
- The app appears in CodeB Wallet under Settings → CodeB account → Connected apps. Remove ends its access within a minute.
The app’s access is renewed automatically every hour while you use it; after 30 days without use you allow it again. CodeB signing is listed in the official MCP Registry as io.codeb/signing. Full list of tools: AI agents on phone.codeb.io.
How to approve an AI agent
- Connect your AI app or agent to CodeB: many AI apps find CodeB signing in the MCP Registry, or follow the setup on phone.codeb.io. When it wants to work for you, it shows you a short code.
- Open CodeB Wallet, signed in to your CodeB account, and go to Settings → CodeB account → Agent requests. You also get an e-mail with a link to the request.
- Check the agent’s name and compare the code in large type with the one your agent shows. Approve only if both match.
- Tap Approve and confirm with your fingerprint, face or PIN – or tap Deny. A request you do not answer simply expires.
- The agent prepares the signing requests. You and the other signers sign them in CodeB Wallet as usual – with a signature card over NFC or the CodeB signing service.
Built so that a person stays in control
Code comparison: the code on your phone must match the one your agent shows – a request someone else started cannot be confused with yours.
Screen lock for every approval: approving needs your fingerprint, face or phone PIN; denying does not.
Short-lived and narrow: one hour, signing requests only, no refresh. A new hour needs a new approval.
Signing stays human: the signature itself is always made in CodeB Wallet by the signer – PAdES with a trusted timestamp, with the signer’s own card or the CodeB signing service.
Your overview: Your agents lists every agent with access to your account; Remove ends it.
Connected apps. AI apps you connect with the CodeB sign-in (paste https://phone.codeb.io/mcp into the AI app, sign in and tap Allow) appear under Connected apps in the same screen. They may prepare signing requests until you remove them – Remove ends their access at once. They can never sign. Each connected app shows what it may use – for example signing requests, age checks or meetings.
One action, one approval: each payment, order or other action is approved on its own – an approval never covers more than the one request you saw.
Receipt and evidence: every decision comes with a receipt signed by phone.codeb.io and is kept in a hash-chained log, so it can be proven later.
Questions about AI agents and signing
How do I approve a payment or an order my AI agent prepared?
Open CodeB Wallet → Settings → CodeB account → Agent requests. Check the amount, the recipient and the reference, compare the 4-digit code with the one your agent shows, then tap Approve and confirm with your fingerprint, face or PIN – or tap Deny.
What is the approval key in CodeB Wallet?
A separate key that CodeB Wallet creates in your phone’s secure hardware (Android 11 and newer). It can only be used right after your fingerprint, face or PIN, and it signs exactly the action details you saw. It is not part of your digital identity and never touches your PID or other credentials.
What does the agent get after I decide?
Your decision – approved or denied – with a receipt signed by phone.codeb.io. The receipt names the agent, the person or company it acts for, the action details and how you decided, and anyone can check it with the server’s published keys.
What happens if the request changes while I confirm?
Nothing is signed. CodeB Wallet signs only the details it showed you when you tapped Approve; a request whose details changed can only be denied.
Can an AI agent sign a document for me?
No. An agent can only prepare signing requests – upload PDFs, place signature boxes, invite signers and follow the status. Every signature is made by a person in CodeB Wallet, with their own signature card or the CodeB signing service.
How do I approve an AI agent?
In CodeB Wallet open Settings → CodeB account → Agent requests, compare the code with the one your agent shows, tap Approve and confirm with your fingerprint, face or PIN.
How long can an approved agent work for me?
One hour, and only on signing requests. After that it needs a new approval; you can also remove it earlier under Your agents.
Which AI apps can connect?
Agents connect to CodeB on phone.codeb.io through standard interfaces (OpenID CIBA for the approval, the Model Context Protocol for the tools). Your AI app’s setup tells you whether it supports them.
What if I did not start the request?
Tap Deny – or do nothing; the request expires. Approve only when the code matches the one your own agent shows.
What can a connected AI app do besides signing requests?
With your permission it can also create age checks (the answer is only yes or no), video meetings and – for administrators – card offers from your site’s templates. You choose the permissions when you connect it and can remove the app at any time.
Does an AI app learn my customer’s data during an age check?
No. It only learns whether the customer confirmed “over 18” – not the name, the birth date or any document data.
Install the closed beta (Google Play) Closed beta: open only to invited testers signed in to Google Play with the e-mail address on our tester list. To join, request beta access.
No app? Use CodeB Wallet in your browser On an iPhone? Use the CodeB web wallet in Safari. It works today, until the CodeB Wallet app is available for iPhone. For keys kept in your phone’s secure hardware and for showing your ID in person, use the app. How the web wallet works