Recent Transactions
Date
Merchant
Agent
Amount
Status
Cards
0 cards
Spending Policies
0 policies
Agents
0 agents
API Keys
0 keys
Name
Key
Type
Agent
Created
Account
Name
—
Email
—
Identity
pending
Cardholder
not created
Identity Verification
pendingComplete identity verification to enable card issuance.
Funding
Add funds to your account to enable card spending.
API Reference
Use your API key with Authorization: Bearer <key> on all requests. Create keys in the Agents tab.
Authentication
All API requests require a Bearer token. Create an API key from the Agents tab, then include it in every request.
Set your API key
$ export AGENTSPEND_KEY="your-api-key-here"
Agents
Create and list agents. Each agent can have its own API keys, cards, and spend attribution.
POST
/v1/agents
agents:write
Create an agent
$ curl -X POST https://your-host/v1/agents \ -H "Authorization: Bearer $AGENTSPEND_KEY" \ -H "Content-Type: application/json" \ -d '{"name": "Research Agent"}'
GET
/v1/agents
agents:read
List agents
$ curl https://your-host/v1/agents \ -H "Authorization: Bearer $AGENTSPEND_KEY"
DELETE
/v1/agents/{agent_id}
agents:write
Delete an agent
$ curl -X DELETE https://your-host/v1/agents/agent_abc123 \ -H "Authorization: Bearer $AGENTSPEND_KEY"
Cards
Issue virtual cards, set spending limits, and reveal card details for use.
POST
/v1/cards
cards:write
Issue a card
$ curl -X POST https://your-host/v1/cards \ -H "Authorization: Bearer $AGENTSPEND_KEY" \ -H "Content-Type: application/json" \ -d '{ "agent_id": "agent_abc123", "type": "single_use", "spending_limit_cents": 5000, "label": "SaaS subscription" }'
POST
/v1/cards/{card_id}/reveal
cards:reveal
Reveal card details (number, CVV, expiry)
$ curl -X POST https://your-host/v1/cards/card_xyz/reveal \ -H "Authorization: Bearer $AGENTSPEND_KEY"
GET
/v1/cards
cards:read
List cards (optionally filter by agent)
$ curl "https://your-host/v1/cards?agent_id=agent_abc123" \ -H "Authorization: Bearer $AGENTSPEND_KEY"
DELETE
/v1/cards/{card_id}
cards:write
Close a card
$ curl -X DELETE https://your-host/v1/cards/card_xyz \ -H "Authorization: Bearer $AGENTSPEND_KEY"
Transactions
Query transaction history with optional filters.
GET
/v1/transactions
transactions:read
List transactions
$ curl "https://your-host/v1/transactions?limit=20" \ -H "Authorization: Bearer $AGENTSPEND_KEY"
Policies
Create spending policies to control per-transaction limits, monthly budgets, and MCC restrictions.
POST
/v1/policies
policies:write
Create a spending policy
$ curl -X POST https://your-host/v1/policies \ -H "Authorization: Bearer $AGENTSPEND_KEY" \ -H "Content-Type: application/json" \ -d '{ "name": "SaaS Only", "per_transaction_limit_cents": 10000, "monthly_budget_cents": 50000, "allowed_mccs": ["5734", "5735"] }'
Balance
Check your account balance and available funds.
GET
/v1/balance
ledger:read
Get account balance
$ curl https://your-host/v1/balance \ -H "Authorization: Bearer $AGENTSPEND_KEY"
Webhooks
Subscribe to events like authorization requests and transaction settlements.
POST
/v1/webhooks
webhooks:write
Register a webhook
$ curl -X POST https://your-host/v1/webhooks \ -H "Authorization: Bearer $AGENTSPEND_KEY" \ -H "Content-Type: application/json" \ -d '{ "url": "https://your-app.com/webhooks", "event_types": ["transaction.authorized", "card.create"] }'
Quickstart: End-to-End
Create an agent, issue a card, and reveal the card details in three commands.
Full workflow
# 1. Create an agent $ curl -s -X POST https://your-host/v1/agents \ -H "Authorization: Bearer $AGENTSPEND_KEY" \ -H "Content-Type: application/json" \ -d '{"name": "Shopping Agent"}' | jq .id # → "agent_abc123" # 2. Issue a card for the agent $ curl -s -X POST https://your-host/v1/cards \ -H "Authorization: Bearer $AGENTSPEND_KEY" \ -H "Content-Type: application/json" \ -d '{ "agent_id": "agent_abc123", "type": "single_use", "spending_limit_cents": 2500 }' | jq .id # → "card_xyz789" # 3. Reveal card details $ curl -s -X POST https://your-host/v1/cards/card_xyz789/reveal \ -H "Authorization: Bearer $AGENTSPEND_KEY" | jq # → { "card_number": "4242...", "cvv": "123", ... }
Notes
Pagination
All list endpoints accept
limit and offset query params. Responses include next_offset (null when done).
Idempotency
Include an
Idempotency-Key header on POST/PATCH/DELETE requests for safe retries.
Scopes
API keys can be scoped. Use
* for full access or restrict to cards:read, cards:write, etc.
OpenAPI
Full interactive docs available at
/docs and schema at /openapi.json.