ai-agent-card-payments

What This Skill Does

The AI Agent Card Payments skill integrates the ProxyHQ platform with OpenClaw, empowering autonomous agents to manage financial transactions through secure, policy-compliant virtual cards. It provides a robust framework for agents to create specific purchasing intents, simulate policy adherence before execution, and manage transaction lifecycles. By leveraging per-intent card issuance, the skill ensures that spending is tightly scoped to authorized amounts and specific merchants, reducing financial risk. The integration includes comprehensive audit capabilities, allowing for receipt attachment, transaction monitoring, and evidence management to maintain strict compliance and visibility for human overseers.

Installation

To install this skill, run the following command in your terminal: clawhub install openclaw/skills/skills/proxyhq/ai-agent-card-payments

Ensure your agent is configured with the necessary environment variable PROXY_AGENT_TOKEN and that the MCP server configuration is updated in your mcpServers settings with the provided ProxyHQ endpoint URL.

Use Cases

• Autonomous SaaS Procurement: Agents can automatically sign up for and pay for subscription services or API credits when existing balances are low or new tasks demand specific tools.
• Dynamic Vendor Management: Agents can interact with merchants that require ephemeral payment methods, ensuring each purchase is isolated to a specific intent.
• Compliance-First Spending: Enterprises can deploy agents that must verify spending against pre-defined organizational policies, with automatic triggers for human approval when high-value thresholds are crossed.
• Audit-Ready Financial Ops: Every purchase made by the agent is linked to an intent and supports the attachment of digital receipts, simplifying the reconciliation process for accounting teams.

Example Prompts

1. "Check if we have enough balance to pay the AWS bill, then create an intent for $200 and issue a virtual card."
2. "Review the pending intent for the OpenAI subscription; the merchant is valid, so please request approval from the administrator."
3. "List all recent transactions associated with our marketing card and attach the receipt found in the downloads folder to the corresponding intent."

Tips & Limitations

• Safety First: Never log or store raw PAN/CVV information derived from proxy.cards.get_sensitive. Handle these credentials only in memory during the checkout process.
• Simulation: Always utilize proxy.policies.simulate before creating intents to ensure the transaction will not violate existing business logic.
• Token Management: Use unique per-agent tokens for all autonomous operations. If an agent's security is compromised, rotate tokens immediately through the Proxy dashboard.
• Human-in-the-loop: Reserve sensitive actions like freezing, closing cards, or approving high-value intents for human-accessible tools, ensuring ultimate control over the organization's treasury.