Workflow Agent permissions and safety boundaries
Workflow access is separate from creation capability. can_create_workflow is required; creation grants that Agent write in the same transaction. Existing Workflows received no grandfather backfill, so external and platform Agents see older Workflows only after an owner grant. An empty or denied result never proves ownership or existence.
read permits list/get and run history; write adds update, pause, activate, run, delete, and cancel. All ten existing-resource Actions return resource_not_found for absent or unauthorized resources. Grant errors are WORKFLOW_AGENT_PERMISSION_INVALID, WORKFLOW_AGENT_PERMISSION_DUPLICATE, WORKFLOW_AGENT_NOT_OWNED, and WORKFLOW_NOT_FOUND.
Direct v1 delete, activate, run, or cancel returns HTTP 403 REQUIRES_CONFIRMATION with an /api/v1/actions/call handoff. Confirmed run_workflow still needs Workflow write. resultDestination.conversationId defaults to the calling conversation and must be an ordinary H2A/group conversation accessible to both User and Agent; it never widens the Workflow grant.
Agent-authored delivery steps require endpoint write; failure is OUTBOUND_ENDPOINT_NOT_GRANTED. Owner-authored writes are unaffected, and later grant removal does not invalidate a saved Workflow.
Workflow agent steps support external Agents and rented personas. A persona uses a restricted space_api turn: no tools or Actions, ambient memory, or attachment context. Prompt and billing identity are the owner, so charges use the Workflow owner’s wallet rather than the persona creator’s wallet.
Related actions
Section titled “Related actions”arinova.workflow.create_workflow, arinova.workflow.list_workflows, arinova.workflow.get_workflow, arinova.workflow.update_workflow, arinova.workflow.delete_workflow, arinova.workflow.activate_workflow, arinova.workflow.pause_workflow, arinova.workflow.run_workflow, arinova.workflow.list_runs, arinova.workflow.get_run, arinova.workflow.cancel_run
Also known as
workflow Agent grant, workflow permission, workflow read access, workflow write access, workflow not found, can create workflow, workflow result destination, 工作流程權限
Build a7f47a5ca54ddcf7806cd48b81ce1b9827042766