MCP

Authorizations

Create, review, approve, and track an agent authorization.

An authorization is the permission you give an agent for a limited request. It is not a payment, card credential, or blank cheque.

Create a request

The agent calls create_authorization with a policy and an idempotency key. Wallet stores a draft and returns an authorization ID, a unique approval URL, and the next step.

{
  "policy": {
    "currency": "USD",
    "per_purchase_max_minor": 5000,
    "budget_minor": 5000,
    "budget_period": "total",
    "timezone": "America/Sao_Paulo",
    "valid_from": null,
    "valid_until": "2030-10-01T00:00:00Z",
    "merchants_allow": ["example.test"],
    "categories_allow": [],
    "requires_confirmation_above_minor": 0,
    "refund_credits_budget": false
  },
  "natural_language_description": "Temporary mock card for Example",
  "idempotency_key": "request-123"
}

Approve with your Wallet account

Open the approval URL and sign in if necessary. Wallet verifies that the request belongs to your account before it shows the approval action. Review the displayed scope carefully before approving; only you can activate the authorization.

Status and purchase checks

`Draft`	Waiting for your approval. The agent should keep the same approval URL and check status again.
`Active`	Available for an in-scope temporary mock-card issuance until its stated limits or expiry are reached.
`Declined or revoked`	The agent must stop using it.
`Expired`	The authorization can no longer be used.