Agent spend controls

What a bound is

A bound on this page is a control a public document states for agent spending. The comparison records six of them, plus the rails that document says the product can pay. Per payment cap is a limit on one charge. Period budget is a limit over a stated day, week, session, or other window. Payee or protocol allowlist is a list of who, or which call, may be paid. Human approval above a threshold is a person signing off once an amount is crossed. Revoke is a stated way to take the spending authority back. Custody is where the document says the key, card, or token sits.

Delegated tokens and mandates are how some of those bounds travel with the payment. Skyfire states a pay token whose tokenAmount is the maximum that seller may charge. The Agentic Commerce Protocol states a one time card allowance with max_amount, one merchant_id, and an expiry. AP2 states a payment mandate whose amount range, budget, and allowed payee are constraints on that mandate. Nevermined states a delegation that can be deleted. Tempo and the Machine Payments Protocol spend guide state a Tempo access key with a limit, a period, recipients, and a revocation path. Agent Vault states a different token: a placeholder the agent holds while the card number stays in a vault.

Merchant category allowlists are not a column. None of the documents checked on 2026-10-20 for AP2, Agent Vault, the Agentic Commerce Protocol, Ledger Agent Intent, the Machine Payments Protocol, or Visa Trusted Agent Protocol states one. A site list, a merchant id, or a recipient list is recorded in the allowlist column instead.

Products whose documents state a per payment cap: Agent Vault, Agentic Commerce Protocol, AP2, Coinbase Agentic Wallet, Hedera Agent Accounts, Polygon Agent CLI, Skyfire, Stripe link-cli, Sui Agentic Payments, Tempo Wallet. Products whose documents state a revoke: Agent Vault, Hedera Agent Accounts, Ledger Agent Intent, Machine Payments Protocol, MetaMask Agent Wallet, Nevermined, Polygon Agent CLI, Sui Agentic Payments, Tempo Wallet. Visa Trusted Agent Protocol is UNKNOWN on every cell. Its getting started page describes signature checks a merchant uses to recognize an agent. It does not state a per payment cap, a period budget, a payee allowlist, human approval above a threshold, a revoke, or a rail the protocol itself pays.