Authorize Agent Spend
paybond_authorize_agent_spendApprove agent spend for a specific intent, enabling a tenant-bound spend gate before calling paid APIs or settlement workflows.
Instructions
Use this when an agent has an intent_id and capability_token and needs a tenant-bound spend gate before calling a side-effecting tool, paid API, vendor action, or settlement workflow. Do not use this for creating, funding, or changing intents; call paybond_create_spend_intent or paybond_fund_intent first when no funded capability token exists.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| token | No | Optional capability token override. When omitted, the MCP server uses the token stored for intent_id. | |
| intent_id | Yes | Canonical Harbor intent UUID. | |
| operation | Yes | Delegated operation or tool name. | |
| requested_spend_cents | No | Optional requested spend in cents for this tool call. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| allow | No | Whether the requested operation is allowed. | |
| tenant | Yes | Tenant echoed by the gateway. | |
| message | No | Human-readable decision message when present. | |
| audit_id | No | Gateway audit identifier when available. | |
| intent_id | Yes | Verified Harbor intent UUID. | |
| decision_id | No | Persisted spend decision identifier when authorization creates one. | |
| reason_codes | No | Stable spend-policy reason codes from the authorization decision. | |
| remaining_cents | No | Remaining spend budget in cents for the evaluated scope, when available. | |
| approval_request_id | No | Approval request identifier when human approval is required. |