Control for agent spend

Your agents can spend. You can see why.

Let agents pay for the data, tools, APIs, and compute they need, inside boundaries you set. See each Run from request to result: what it did, what it spent, and what you got.

Start in sandbox

Start read-only. Add spending authority when you're ready. Revoke it when you need to.

Sample Run · lead researchPlaying sample

11:43Read spend context

11:44DataCo selected$3.80

Total economic cost — AI + services + fees$0.04

Research AgentSandbox

$50 total · $10 automatic · new services need Maya

$31.38remaining authority

Sample data shown as it appears after ledger verification.

AUTOSupport Agent · $0.42 · ticket enrichment · TrustLayerAUTOResearch Agent · $0.08 · verify employer · example-data.comASKContent Agent · $12.00 · stock license · new serviceAUTODev Agent · $1.90 · CI compute burst · CloudRelayBLOCKResearch Agent · $140.00 · subscription · outside authorityAUTOSupport Agent · $0.05 · x402 trial purchase · BazaarASKFinance Agent · $28.40 · above single-purchase capAUTOResearch Agent · $2.00 · 1,200 records · ScrapeGridAUTODev Agent · $0.65 · sandbox API calls · VectorHubASKContent Agent · $19.00 · first purchase from this service

01 · The problem

A wallet shows where the money went. A Run shows why.

Agents can buy data, call paid APIs, and use compute in seconds. A transaction shows the amount and destination. It does not show what the agent was trying to do, whether the purchase was allowed, or whether the result was worth the money. Lootrunners keeps the payment connected to the work.

Without Lootrunners

19 USDC → 0x8f…

With Lootrunners

Research Agent spent $19 on 2,000 records for Midwest Expansion.
Maya approved the new vendor once. 1,842 records were accepted. Payment reconciled.

See the wallet side for yourself: analyze a public wallet → Read-only, no account.

02 · How it works

Observe. Bound. Run. Learn.

Connect an agent without giving it spending authority. Watch what it asks for, set the boundary, test it with fake money, then move to real spending when you're ready.

01 · OBSERVE

See what it asks for.

Connect an agent in read-only mode. Every request is recorded; nothing is paid.

02 · BOUND

Set the boundary.

Choose what it may buy, how much it may spend, and when a person must approve.

03 · RUN

Watch the work.

Decisions, tool calls, approvals, payments, and outputs arrive in one timeline.

04 · LEARN

Know what it was worth.

See total economic cost and the outcome it produced.

03 · The Run

The whole job, not just the transaction.

What did it do?

A timeline of the decisions, tools, purchases, and outputs in the Run.

Was it allowed?

Every spend request shows the rule and decision: AUTO, ASK, or BLOCK.

What did it cost?

AI compute, paid services, and fees in one economic total.

What did we get?

The outcome attached to the Run, with cost per useful result when possible.

One Run answers the questions that matter — without opening a block explorer.

Lead research · Run #1832Completed

43  Read spend context
44  DataCo selected · $3.80
44  Policy decision · AUTO
44  Paid · $3.80 USDC · verified
45  Attached output · 247 rows
45  Outcome accepted ✓

What the run cost

AI compute$0.08
Paid services$3.80
Network / fees$0.00
Total economic cost$3.88
247 accepted records$0.0157 / record

04 · Control

A boundary you can actually verify.

Lootrunners shows the rule you set, the independent control enforcing it when the payment rail supports one, and what actually happened.

Control alignment

Declared$25 / requestMandate

Enforced$25 / requestProvider/on-chain control

Observed$12.40Largest payment

✓ Aligned

Shown only after enforcement is verified.

Blocked means the boundary held

20 blocked safely

$332.32 not paid

A policy block is not a loss or an error. Red is reserved for control failures, unexplained movement, failed revocation, or reconciliation problems.

Freeze autonomous spending.

Stop new autonomous payments and revoke supported external permissions. The agent does not get a vote.

05 · Scout

Ask why. Get the evidence.

Scout explains spend, Runs, controls, and outcomes using the records behind them. It can draft a change. It cannot activate one.

Scout · Lootrunners AIevidence-linked

Why did Research Agent spend $38 yesterday?

12 purchases totaled $38.12.

9 were automatic under Data Research

3 were approved once by you

PeopleData was the largest vendor at $12.40

No purchase exceeded $5

Evidence: 12 spend intents · Mandate v4 · Policy v7

View 12 purchasesDraft: lower limit to $5

Evidence-linked.

Answers link back to the purchases, Runs, mandates, and outcomes behind them.

Drafts only.

Scout can propose a lower limit or new rule. A person activates the change.

Capability-limited.

Authority-changing tools are not part of Scout's tool surface.

06 · Developers

One URL. Minutes to first Run.

Point your agent at Lootrunners and discover its API, MCP endpoint, environment, and capabilities. Use MCP, REST, or the SDK path that fits your runtime.

GET edge.lootrunners.com/.well-known/lootrunners

{
  "api":  { "baseUrl": "…/api/agent/v1" },
  "mcp":  { "url": "…/mcp" },
  "environment": "sandbox",
  "capabilities": { "spend": true, "runs": true }
}

A deliberately small spend surface.

Current surface: 8 tools.
get_spend_context · search_paid_services · request_spend · execute_paid_request · get_spend_status · submit_outcome · request_exception · list_recent_spend

No increase_limit. No approve_exception. No reveal_wallet. Authority-changing capabilities are not exposed to the agent.

Generated agent instructions

- Read spend context before planning a paid request.
- Create a spend intent before executing a purchase.
- Respect AUTO / ASK / BLOCK.
- While ASK is pending, poll — do not create duplicates.
- Submit the outcome after a paid service returns.

These instructions guide the client. Authority is enforced by the server.

A spend request, in code

POST /api/agent/v1/spend/intents
{ "mandate_id": "data-research",
  "purpose": "Verify employer and title",
  "amount_usd": "0.08",
  "vendor_domain": "example-data.com" }

// decision.result is AUTO, ASK, or BLOCK

07 · Security

Non-custodial. Non-negotiable.

Your keys stay yours.

Production signing stays with your payment rail or managed signer. Lootrunners requests authorized execution. Treasury signing credentials are not exposed to the model.

One financial source of truth.

Budgets, approvals, payments, and settlement state are reconciled against canonical Lootrunners records.

People change authority.

Activation, wider limits, live promotion, revocation, and unfreeze remain human actions with step-up authentication. One-time approvals never change future authority.

Put one agent behind a boundary.

Start with fake money and no treasury setup. Watch a Run, learn how the agent behaves, then grant authority when you're ready.

Start in sandbox Watch the sample Run

Read-only first · non-custodial · freeze anytime