SpendGuard

One guard for money an AI agent moves in both directions — spend, and get paid. Approvals are single-use, 10-minute, and bound to the exact order.
The agent never holds PayPal credentials. Every PayPal write is checked against your policy and, when required, a single-use approval token bound to exactly what you saw.

One policy · both directions

Plain-English rules

The agent compiles this into structured checks on the server, before any PayPal order or invoice exists. A dry-run shows what the rule would decide without saving it.

Today

Budget meter

Loading the default policy…

Spend · money out

Ask the agent to buy

The agent plans the purchase. SpendGuard checks it against the policy. The agent never holds PayPal credentials.

Hold: $35 icon packUnder threshold: $20 LedgerlyBlocked: $200 gift cardAttack test: injected product page

Innovation · Invoice Intake

Receive a seller invoice

Closed-loop agent-to-agent commerce: a PayPal invoice is treated as untrusted data. Notes are scanned for invoice-borne prompt injection, then the same spend policy and exact-order-bound token decide whether it can be paid.

Clean invoicePoisoned notes

Purchases

Catalog buys and invoices taken in from a seller. Click one to inspect the decision.

No purchases yet
Propose a buy, or intake a seller invoice, on the left.

Innovation · tamper-evident log

Hash-chained audit

Every spend and bill decision is sealed to the previous event with SHA-256. Anyone can re-hash the log and see if a line was altered after the fact.

Nothing recorded yet. Compile a policy or propose a purchase to start the chain.