AI SRE Agent Approval Workflow: Identity Forwarding to MCP Servers

Aug 28, 2026

Two engineers can hold the same approve button and still not be allowed to make the same change. The key riding with the approval settles it.

Learn more about AURA → https://www.mezmo.com/aura
Get started today → https://github.com/mezmo/aura
Get deployment help → https://www.mezmo.com/contact

AURA's human in the loop config gates the create_pipeline tool on the Mezmo MCP server and sends each request to a webhook for review. A mock UI stands in for the approval system here, and Mike walks through the payload schema so you can point it at your own.

The first run supplies a made-up key at the approval step. AURA records the approval, the call goes out with that key attached, and the Mezmo MCP server refuses it. The approval was real and the identity behind it was not accepted, which are two separate outcomes.

The second run uses a real key. The call goes through, and what reached the downstream service is Mike's own token rather than a shared agent credential, so the change is attributable to the person who released it.

This run uses one MCP server and one approver. Privileged-role setups, where different reviewers may approve different things, are described at 0:28 and 4:26 and are not demonstrated here.

AURA is built for SRE and platform teams who need agent actions tied to a named person without moving credentials into the agent's config.

For more detail, visit
https://www.mezmo.com/videos/aura-approval-workflow-identity-forwarding-to-mcp-servers

0:00 Why an approval should carry the approver's identity

0:36 The Mezmo MCP config and the human in the loop block

1:03 The mock webhook receiver and its schema

1:30 Connecting the CLI to the AURA server

1:49 Listing pipeline tools and finding create_pipeline

2:19 Creating a pipeline that requires approval

2:52 Approving with a made-up key

3:23 The downstream service denies the call

3:38 Approving again with a real key

4:26 Permissions options and where to get AURA

#AURA #HumanInTheLoop #AISRE