Departments, org policy, an audit trail of every decision, a compliance stack that gates money movement in real time, and a per-merchant API for the systems you already run.
Every card is scoped: total limit, per-transaction ceiling, velocity window, merchant category allow-list, approval threshold, expiry. Above the card sit the controls no card can override.
A real double-entry ledger. Every movement is balanced: debits equal credits, in the same currency. Spend is two-phase, an authorization places a hold, later captured or released.
Dashboard, API or agent, there is no privileged caller. The path is synchronous and allocation-light, with no network calls, so it answers inside the issuer's real-time window.
Offers return as fresh, aging or stale. Merchants see their own catalogue health, item count, how many are fresh, and the median age of their inventory data, so keeping it current is a visible, competitive act rather than an invisible chore.
Discovery isn't the deliverable. A-MERCHANT carries the full commercial loop, with a typed state machine that permits only legal transitions.
Alongside orders, every card purchase at a listed merchant raises a purchase notice the merchant can acknowledge or dispute, so a sale at the till and a sale through an agent land in the same inbox.
Merchants aren't expected to live in a dashboard. Each one mints machine credentials for its own POS, ERP or stock system and runs A-MERCHANT as a back-office integration.
AFP scores every eligible rail on cost, speed and finality, then routes down the one that fits, and returns the reasoning.
Money movement is gated on a check computed at the moment of the request, never cached. A sanctions hit blocks money even on an otherwise-approved identity, unless a named human has attributed an override.
The provider's decision and a human override are stored as separate fields. An override never overwrites the original. You can always tell an automated approval from a human one, and who made it.
Architected to SOC 2 and PCI DSS principles: least-privilege access, full audit logging, encryption in transit and at rest, change control, card data held outside our environment. Report a vulnerability to hello@a-card.cc, acknowledged within one business day. We do not pursue good-faith researchers.
No per-user or per-card fees. Are you a startup? Talk to us.
Issue new Agentcards or connect the cards your users already have.
DoorDash, Good Eggs, Uber Eats, Ticketmaster, and 100+ more.
The regulated surface is ours, not yours.
Self-serve plans run $0, $8 and $28 a month with per-card caps of $50, $500 and $1,000. The per-card cap is a hard platform ceiling above, and independent of, the limits you set yourself. Enterprise is uncapped. Interchange and rail fees are passed through at cost and disclosed before a payment executes. Merchants list and sell at no subscription cost.
We onboard enterprise teams personally. Scoped pilot in a week.