Programmatic escrow for agentic purchases

Let AI Agents Spend
Money Safely

Your agent can book a flight, buy a subscription, or reserve a hotel — without access to your real credit card. AnuraGate detects purchase intent, optionally asks you for approval, and issues a single-use virtual card locked to that exact merchant and amount.

Enable Financial GatewayRead the Docs

How it works — end to end

1

Proxy request

Your agent sends requests through AnuraGate as normal. No code changes.

2

Intent detected

AnuraGate scans the response async. Detects merchant, amount, and category.

3

Policy evaluated

Your transaction policies decide: auto-approve, require human sign-off, or decline.

4

Card issued

A single-use Lithic card is created, locked to the merchant, amount, and MCC.

5

Agent checks out

Card details are injected into the agent's next request. Card closes after use.

Human-in-the-loop approval is optional and configurable per policy. If a policy requires approval, a WhatsApp or Slack message is sent between steps 3 and 4.

Four pillars of safe agentic spending

Each layer ensures your agent can only spend exactly what you've authorised.

Pillar 1

Automatic Intent Detection

Zero added latency

After every proxy response, AnuraGate asynchronously scans the conversation for purchase intent. A fast regex filter triggers a lightweight LLM extraction pass — only when there's a real purchase signal. Your agent never waits.

  • Two-tier detection: regex pre-filter + LLM extraction
  • Detects amounts, merchant names, action words, and card signals
  • Minimum 70% confidence threshold before creating an intent
  • Runs fully async — zero milliseconds added to proxy latency
  • Visible in the Intent History tab of the Finance dashboard
Pillar 2

Just-in-Time Virtual Cards

Locked to the exact merchant and amount

Once an intent is approved, AnuraGate issues a Lithic single-use virtual card on the fly. The card is locked to the merchant category, capped at the approved amount (plus 5% for taxes), and automatically closes after one transaction or 30 minutes.

  • Single-use Lithic virtual card — one charge, then closed
  • Spend limit = approved amount + 5% buffer for taxes/rounding
  • MCC-locked: a flight card cannot be used at a restaurant
  • Auto-expires after 30 minutes if the agent never uses it
  • Card details injected into agent context via system message
Pillar 3

Human-in-the-Loop Approvals

WhatsApp or Slack — just reply YES or NO

When a policy requires human sign-off, AnuraGate sends an approval message to your configured Watcher (WhatsApp or Slack). The approver sees the merchant, amount, agent session, and context — and simply replies YES or NO.

  • Configurable per transaction policy (auto-approve or require approval)
  • Works with any connected Watcher integration
  • Configurable timeout (1–30 min) with optional auto-decline
  • Full context shown: merchant, amount, category, confidence, agent quote
  • NO reply or timeout = card never issued, intent declined
Pillar 4

PCI-Compliant by Design

Raw card data never stored

AnuraGate uses a Lithic-only PCI strategy. Raw PANs and CVVs are fetched from Lithic on-demand, injected into the agent context, and immediately discarded — never written to AnuraGate's database or logs. Lithic handles all PCI-DSS requirements.

  • PAN and CVV fetched on-demand from Lithic, never persisted
  • Lithic handles PCI-DSS compliance on their end
  • AnuraGate operates with zero PCI scope
  • Secondary defence: card number scanner redacts any PAN that leaks into logs
  • Luhn-validated detection catches card numbers in any format

Financial Gateway by plan

Available on Pro and above. Fund your wallets via Lithic.

PlanGatewayWalletsDaily Spend CapHITL Approvals
Free$0——
Pro$29/mo2$1,000 / day
Max$79/mo10$10,000 / day
EnterpriseCustomUnlimitedUnlimited
Start Free Trial