Guide
Agent spend limits — how AP2 mandates keep autonomous checkout safe
An agent purchase limit is a human-approved spend mandate: maximum per order, monthly cap, allowed categories, and an expiry. The agent may pay autonomously only inside that envelope. Outside it, checkout stops or falls back to a human handoff.
On Conduit, mandates follow the AP2 (Agent Payments Protocol) pattern. You approve once on a trusted surface; Conduit never holds the money — payment goes from your instrument to the merchant.
The direct answer
To let an AI agent purchase on your behalf without approving every cart: give it an identity, then a mandate with limits. The agent discovers supply and can complete checkout only when the offer fits the mandate and a rail it holds.
Typical scope fields: max per order, monthly cap, categories, and expires. Narrowing caps can apply immediately; widening usually requires human re-approval.
What a mandate covers — and what it doesn’t
A mandate authorizes spend policy, not custody. Conduit is not a marketplace, merchant of record, or money transmitter. Card numbers (PAN) stay off Conduit’s wire; you approve the policy, not a shared secret.
- Covers: whether autonomous checkout is allowed for this agent on in-scope offers.
- Does not cover: inventing funds, holding settlement, or bypassing merchant checkout rules.
- Still available without a mandate: discovery, comparison, and handoff (human finishes on the merchant
continue_url).
The Conduit flow
After your agent connects over MCP:
- Call
request_payment_mandatewith scope (limits, categories, expiry). - Status starts as
PENDING_HUMAN_APPROVAL— open the returnedapproval_urlon a trusted device (token included; do not invent approve APIs). - Re-run
search_supplywithagent_id. Offers you can pay now show badgepayable_nowand actionexecute_autonomous. - Use
manage_mandateto list, update, or revoke. Ownership is enforced (mandate_forbiddenif the wrong agent tries).
When you can skip mandates
Mandates unlock autonomous pay. They are optional for browsing and for handoff checkout. If you only need ranked offers and a ready cart link, connect the agent and search — then finish as a human when needed.
When you are ready for unattended restocks or scheduled buys, set the limits first. See how agentic checkout works for the full loop, or connect to try MCP v0 now.
Frequently asked questions
- How do I let an AI agent purchase on my behalf?
- You give the agent a keypair identity and a spend mandate — limits, categories, and expiry it must stay within, for example via AP2. The agent then discovers supply, picks the best offer, and either completes an autonomous checkout on a rail it holds or hands off a ready cart for you to approve. Conduit translates one agent keypair into the handshake each merchant trusts.
- Is autonomous agent checkout safe, and who holds the money?
- Conduit never holds or delays funds — it is not a marketplace, merchant of record, or money transmitter. Spend stays inside the mandates you set, payment goes directly from the buyer instrument to the merchant, and every order has paths to review, dispute, chargeback, or human takeover.
- Do agent purchases still need human approval?
- Only as much as you want. You set mandates once; within them the agent transacts autonomously. When a merchant requires a human step, or the agent lacks authority, Conduit hands off a ready checkout for a person to finish — and a human can step in at any time.
- What is AP2 and how do agent spend mandates work?
- AP2 (Agent Payments Protocol) lets a human approve a spend mandate once — limits, categories, and expiry — that an agent then transacts within. Conduit translates a single agent keypair into the mandate each merchant trusts, so autonomous payments stay inside boundaries you control and can revoke instantly.