Inbox

Invite supervisors from Team in the Vatio console. They sign in with a code to their email and land on /workspaces/<id>/inbox — every conversation, replies, human takeover, ratings, and the agent's tool calls. They see that and nothing else: no deploy, no tools, no knowledge. Remove them from the same page and the next request they make is refused, including a socket they already had open.

There is nothing to embed and no token to mint. Being signed in to Vatio, as someone this workspace has invited, is the whole access model.

Replying starts human takeover, which pauses agent replies on that chat — from the inbox, or from the WhatsApp Business app on your own number, which reaches Vatio as an echo and counts the same. Hand it back from the inbox when you are finished, or leave it: a takeover expires 8 hours after the last thing the person said, and the agent picks the conversation up again the next time the visitor writes. The clock restarts on every human reply, so a conversation somebody is actively holding never expires underneath them.

To have the agent ask for a person itself, rather than waiting for one to notice, declare handoff and hours on it.