Before your agent issues a refund, approves a payment, or applies a discount — SpendGuard checks the policy and returns allow, block, or escalate in under 50ms.
{
"agent_id": "support-agent-v2",
"policy_id": "refund_policy",
"action_type": "refund",
"amount": 750.00,
"currency": "USD",
"counterparty": "customer_7821"
}
{
"decision": "block",
"reason_code": "max_amount_exceeded",
"message": "Amount $750.00 exceeds the limit of $500.00.",
"violated_rule_id": "r1",
"next_step": "Reduce the amount or escalate to a manager."
}
Every decision logged. Every rule deterministic. Every audit immutable.
Three steps from policy to decision.
Set dollar limits, vendor allowlists, time restrictions, geography blocks — 10 rule types to build any policy.
{
"rule_type": "max_amount",
"parameters": { "limit": 500 }
}
One API call before every financial action. Under 50ms. Your agent doesn't even notice.
POST /v1/checks
{ "action_type": "refund",
"amount": 600 }
Allow, block, or escalate. Every decision includes the rule that fired and a recommended next step.
{
"decision": "block",
"message": "Amount exceeds $500 limit"
}
Everything you need to control AI agent financial actions.
Amount limits, vendor allowlists, time restrictions, geography blocks, discount caps, duplicate guards, and more.
Every decision logged with 14 fields. Append-only. Query by agent, action type, decision, or date range.
Every update creates a new version. Previous versions preserved. Checks log which version was used.
SHA-256 fingerprint blocks repeated actions within configurable time windows. Stops agent retry loops.
Handles ambiguous inputs. "Make the customer whole" resolves to refund. The classifier resolves. Rules still decide.
AI agents discover and use SpendGuard through Model Context Protocol. Works with Claude and any MCP client.
This calls the real API. No signup required. No data stored.
This is a live API call to POST /v1/simulate. No data is stored. Try it with your own policies.
Start free. Scale as you grow.
All plans include: API access, duplicate guard, policy versioning, semantic classification, immutable audit log