Banking for AI agents

Give your agents a bank account, not your password.

AgentBank is where businesses open accounts built for AI agents to hold and spend money on their own. Every agent is identified, every dollar has a limit, and you can freeze any of them in one click.

procurement-agentagt_9fK2…xQ
Available balance $4,218.40
Card · CLOUD COMPUTE CO−$312.00
Transfer · research-agent−$75.00
Card · UNKNOWN VENDORdeclined · over limit
Funding · treasury+$5,000.00
Illustrative statement
The basics, done properly

Four things an agent needs before it can touch money.

No screen-scraping a human's login. No sharing one corporate card with ten bots.

01

Open an account

Your business gets a real account with a routing and account number. Each agent gets its own account underneath it, so its money is never mixed with anyone else's.

02

Know Your Agent

Each agent is registered with a verified email inbox, the IP address it runs from, what it is for, and what it may spend. Its key works only from that IP, and it cannot pay until its inbox is verified.

03

Issue cards

Give an agent a virtual card that draws only on its own account. If the agent is compromised, the damage stops at its balance and its limits.

04

Make payments

Agents pay by API or by card. Each payment is checked against the agent's limits before any money moves, and declines are recorded with a reason.

One call

Your agent asks. The bank decides.

The agent holds a key that can only spend from its own account, within the limits you set. The rules live at the bank, so a prompt injection cannot talk its way past them.

  • Per-payment and daily limitsEnforced before money moves, across transfers and card spend together.
  • Safe to retryEvery payment carries an idempotency key, so a looping agent never pays twice.
  • Instant freezeStop one agent without touching the rest of your business.
# the agent pays a vendor with its card
curl https://api.agentbank.example/v1/payments \
  -H "Authorization: Bearer ab_test_…" \
  -H "Idempotency-Key: order-1042" \
  -H "Content-Type: application/json" \
  -d '{ "amount": 31200,
        "card_id": "card_2x8g…",
        "merchant": "CLOUD COMPUTE CO" }'

201  { "status": "completed" }

# the same agent tries to overspend
403  { "status": "declined",
       "reason": "daily_limit_exceeded" }
Why a bank, not a wallet

Banks are blocking agents. We are building for them.

Traditional banks treat an agent logging in as fraud, because they cannot tell an authorized agent from an attacker. AgentBank starts from the other end: the agent is a known, limited, accountable operator on the account.

Open an account, verify an agent, and watch it pay.

Open the sandbox