# Step-up Approval


With step-up, an integration serves a VM only once you approve that VM.
Until then, the VM's requests fail with a link to approve it on exe.dev for
a duration you choose.

```
exe.dev ▶ integrations add http-proxy --name myapi --target https://api.example.com --bearer sk-... --step-up
exe.dev ▶ integrations edit myapi --step-up-require-passkey
exe.dev ▶ integrations edit myapi --step-up=false
```

`--step-up` accepts approval from your exe.dev session;
`--step-up-require-passkey` requires your passkey. Changing either revokes
existing approvals. Ending an approval does not close connections already
open or recall credentials already handed to the VM.