If an agent can buy things, it needs a controlled payment instrument. The safe pattern is never sharing your main card. Use isolated cards with fixed limits and evidence logs.
For personal agent workflows, use low caps, merchant lock where possible, and require approvals for anything above your comfort threshold.
For teams, map cards to workflows and owners, then enforce category/merchant controls and recurring windows tied to policy.
Delegating your primary card to autonomous software creates unclear liability and larger blast radius when behavior drifts.
Every charge should map to intentId, policy decision, cardId, and transaction outcome so finance and support teams can explain it fast.
Set a non-negotiable card limit before any autonomous checkout attempts.
Restrict where the card can be used to reduce drift and fraud surface area.
Auto-approve low risk spend and require human approval above threshold.
Store intent and transaction records for disputes, support, and compliance.
proxy.intents.create({
purpose: "Book flight under $400",
expectedAmount: 40000,
expectedMerchant: "Delta"
})