Agent Controls

Your agents shouldn't have your real card.

Give autonomous agents a programmable spending identity instead of a card — hard caps, pre-payment policy checks, and a durable audit trail. Every request is decided before the payment fires.

See how it works View pricing →

14-day free trial on Starter · No card required to try

The problem

Agents with cards are a liability.

Every agent you ship with access to a real card is an uncapped spend event waiting to happen — for you, your team, and your customers.

⚡

Solo developers

One runaway loop, one misread context, one API misconfiguration — your personal card takes the hit. Weekend tasks become Monday surprises.

🏢

Engineering teams

Shared agent credentials mean shared blast radius. Any agent that can reach the card can reach all of it. No per-task limits, no approval gates.

🔒

Enterprise shadow-IT

Finance can't audit what agents spent. Security can't trace which agent identity initiated a charge. Compliance is guesswork after the fact.

Real scenario

A research agent was given a corporate card to access data APIs during a vendor evaluation task. It hit a rate-limited endpoint, retried with exponential backoff — across 14 different API keys it found in the repo. $2,400 in weekend API charges. No pre-payment gate. No per-task cap. No audit trail that showed which agent identity initiated each call. Finance had a card statement. Security had nothing.

The difference

Card vs. Attestify

💳Agent with a card

Uncapped spend — the card limit is the blast radius
No per-task or per-agent isolation
Payment fires before any policy check
No agent identity in the audit trail
Finance gets a card statement; security gets nothing
Credential exposure = full account access

✦Agent with Attestify

Hard per-task and daily spend caps enforced before payment
Isolated wallet per agent or task scope
Every request evaluated by policy — payment only on pass
Agent identity, task ID, and policy rule in every audit record
Finance and security have exportable, structured receipts
Compromised credential = bounded blast radius

How it works

Pre-payment governance, not post-spend cleanup.

Agent requests payment

Your agent constructs a payment request with its task context — service class, amount, agent identity, and task scope.

Policy evaluation before spend

Attestify checks the request against your configured policy: per-task cap, daily cap, allowed service class. The payment does not fire during this check.

Approved or blocked — decision logged

If the request passes policy, the governed payment executes and a receipt is written. If it fails, the request is denied before spend and logged with the agent identity that initiated it.

Durable audit trail

Every decision — allowed or blocked — produces a structured audit record exportable to CSV or NDJSON. Finance and security have a trail, not a guess after the fact.

Live policy evaluation — example run

agent_idagent_procurement_04

requestmarket-data · $4.20

requestmarket-data · $3.10

requestanalytics-export · $18.00

policyper_task_cap: $12.00 — exceeded

receiptLogged

Implementation

Two config lines.

Replace a card credential with an Attestify key in your agent's environment config. Your agent code doesn't change — it's framework-agnostic, no SDK required — just the payment target and one header on every call.

agent-config.jsonBefore

{
  "payments": {
    "env": {
      "PAYMENT_METHOD": "card_4242_****",
      "SPEND_LIMIT": "none"
    }
  }
}

agent-config.jsonAfter

{
  "payments": {
    "base_url": "https://attestifyos.com/api",
    "env": {
      "ATTESTIFY_API_KEY": "your-tenant-key-here"
    }
  }
}

Send ATTESTIFY_API_KEY as the x-api-key header on any HTTPS request to POST /api/run — works from curl, fetch(), LangChain, CrewAI, AutoGen, LlamaIndex, or any HTTP client your agent already uses.

Start free. Scale as you grow.

14-day free trial on Starter. Your card is saved at signup but not charged until the trial ends. Cancel any time before day 14 and you will not be billed.

14-day free trial

Starter

Perfect for individuals and small teams getting started

$45/mo

✓Up to 2,500 governed agent runs / month
✓Full Router access
✓Signed receipts on every run
✓Verification & memory
✓Webhooks + dashboard
✓Email support
✓Quickstart onboarding guide

Frequently asked questions

Your agents are running. Are you governing them?

Switch from card to Attestify in two config lines. Hard spend caps and a cryptographic audit trail activate immediately.

Start free trial See Attestify Risk →