# How to let an AI agent make purchases safely

Source: https://www.qatom.ai/learn/let-ai-agent-make-purchases
Updated: 2026-10-14

To let an AI agent make purchases safely, give it a separate wallet with a small budget, set an auto-approve limit for small buys, and approve anything larger yourself. Check the item, seller and price before you approve, keep every receipt, and treat each retry as a new charge. Qatom builds these controls in.

## Key takeaways

- Give the agent its own wallet so it can never reach your main funds or your card.
- Fund that wallet with a small amount: its balance is a hard ceiling on what the agent can spend.
- Purchases under your auto-approve limit go through on their own; larger ones wait for your approval.
- Before approving, check the item, the seller it pays and the price.
- Keep the transaction id and emailed receipt for every purchase, and check them before any retry, because a retry is a new charge.

## Step by step

1. **Connect your AI to the store** Add the Qatom master MCP (https://mcp.m.todaq.net/mcp) as a custom connector in Claude, Grok, Muse or any MCP client, then sign in with an email code or passkey.
2. **Find the separate agent wallet** Your first sign-in creates a primary wallet and an agent wallet. Ask your agent to check the agent wallet so you can see both balances.
3. **Fund the agent wallet with a small budget** Move a small amount from your primary wallet to the agent wallet and approve the transfer. The agent can never spend more than that wallet holds.
4. **Set an auto-approve limit** Choose the amount under which purchases go through without asking. Anything above it waits for your approval.
5. **Check and approve larger purchases** Open the approval link or the push in the TODAQ app, check the item, the seller it pays and the price, then approve or dismiss.
6. **Keep the receipt** Note the transaction id from the chat receipt and keep the emailed receipt with it.
7. **Check before any retry** If output is cut off, ask for the last receipt and check the wallet balance first. Retry only if there is no receipt and the balance has not dropped.

## How do you let an AI agent make purchases safely?

You let an AI agent make purchases safely the same way you would hand a teenager some cash for errands. Give it a small, separate budget, decide what it can buy without asking, and check the receipts afterwards.

The six controls below cover the main risks. Use the table as a checklist before you switch anything on.

| Control | What it protects against | How it works in Qatom |
|---|---|---|
| Separate agent wallet | The agent reaching your savings or card | The agent spends only from its agent twin, never your primary wallet or card ([A3](https://www.qatom.ai/capabilities#A3)) |
| Small budget | A runaway loop or a bad purchase | You move a small amount to the agent twin; its balance is a hard ceiling ([A8](https://www.qatom.ai/capabilities#A8)) |
| Auto-approve limit | Being asked about every tiny purchase | Purchases under your limit go through; larger ones wait for you |
| Approval for larger buys | Large charges you did not expect | Approve in chat or by passkey or phone app ([A14](https://www.qatom.ai/capabilities#A14)) |
| Check item, seller, price | Paying the wrong seller or a test listing | Read the approval before you tap Approve ([A31](https://www.qatom.ai/capabilities#A31)) |
| Receipts and retry checks | Lost records and silent double charges | Every purchase returns a transaction id and an emailed receipt ([A15](https://www.qatom.ai/capabilities#A15)) |

## Can an AI agent buy things?

Yes. An AI agent can buy things when it is connected to a store and has a way to pay. Many assistants connect to tools through the Model Context Protocol (MCP), but [MCP itself has no payment step](https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization), so the payment has to come from a layer on top.

With Qatom, you add one connector, the master MCP at `https://mcp.m.todaq.net/mcp`, to Claude, Grok, Muse or any other MCP client ([A1](https://www.qatom.ai/capabilities#A1)). Your agent can then search the catalog, read an item, and pay for it from its own wallet. The agent asks you before paying and gets the seller's answer back in the same step ([A13](https://www.qatom.ai/capabilities#A13)).

The question is less "can it?" and more "within what limits?" The rest of this guide sets those limits. For a wider view of how agents pay, read [what agentic payments are](https://www.qatom.ai/learn/what-are-agentic-payments).

## Why use a separate AI agent wallet?

A separate AI agent wallet keeps the agent's money apart from yours. If the agent misreads a request or a tool misbehaves, the damage stops at what that wallet holds.

In Qatom, your first sign-in creates two wallets, called twins. Your primary wallet is yours and protected by sign-in. Your agent wallet is the one your AI spends from. Both hold USD-TDN, a US-dollar token where 1 USD-TDN equals 1 USD ([A3](https://www.qatom.ai/capabilities#A3)).

The agent can never spend more than its twin holds, and it never touches your primary wallet or your card.

## How do AI agent spending limits work?

Good AI agent spending limits come in two layers: a budget and an approval threshold.

**The budget** is the balance of the agent wallet. Move a small amount from your primary wallet to the agent wallet, and that amount becomes a hard limit on what the agent can buy ([A8](https://www.qatom.ai/capabilities#A8)). Think of it as handing over a little cash. Nothing moves until you approve the transfer.

**The auto-approve limit** decides which purchases need you. Purchases under the limit you set go through without asking. Larger ones need your approval. A low limit means more prompts and more control. A higher limit means fewer interruptions.

Small items suit this setup well. Guest card checkout has a minimum of about $0.50, while catalog prices can be as low as 0.001 USD-TDN per call, so an agent wallet is the practical way to pay for small, frequent calls. The [micropayments guide](https://www.qatom.ai/learn/micropayments-for-ai-and-apis) explains why.

## How do you approve AI agent purchases?

When a purchase is above your auto-approve limit, nothing is paid until you approve it ([A14](https://www.qatom.ai/capabilities#A14)).

1. Your agent tells you it needs approval and gives you an approval link. If you use the TODAQ app (Qatom Authenticator), it also shows a push.
2. Check that you are signed in to the account you mean to pay from.
3. Read the item, the seller it pays and the amount.
4. Tap Approve, or Dismiss to decline.
5. Tell the agent you approved. It calls again with the approval id, finishes the purchase and shows the receipt.

Approval links expire after about 15 minutes and belong to one account. If one expires, ask the agent to start the purchase again.

Set up a passkey on each device you approve from ([S11](https://www.qatom.ai/capabilities#S11)). Every sign-in and approval then takes one tap or a fingerprint instead of an emailed code. Only you create or use your passkey; an agent never does.

## What should you check before approving a purchase?

Check three things every time: the item, the seller and the price.

- **The item.** Before buying, ask the agent to show the listing. It shows the price in USD-TDN, the seller name, the inputs and what the item returns ([A11](https://www.qatom.ai/capabilities#A11)). The seller's llms.txt read-me often has examples.
- **The seller.** The catalog also holds test listings, so check the seller and description before paying. An item with no seller line comes from a seller who has not set a business name, so you cannot tell whose item it is ([A10](https://www.qatom.ai/capabilities#A10)).
- **The price.** On the Purchase Approval screen, read the item name, "Payment to" the seller, the quantity and the price ([A31](https://www.qatom.ai/capabilities#A31)). If anything is wrong, tap Dismiss.

The approval does not name the paying wallet, so make sure you are signed in to the right account. For a cart, one approval covers every item at the prices shown, so check the total and the item list ([A34](https://www.qatom.ai/capabilities#A34)).

## Why should you keep every receipt?

Every purchase returns a transaction id and an emailed receipt with proof of purchase ([A15](https://www.qatom.ai/capabilities#A15), [A17](https://www.qatom.ai/capabilities#A17)). The transaction id is what you quote in any refund request. The email gives you a record outside the chat for bookkeeping.

Ask the agent to show the full receipt, note the transaction id, item, amount and seller's answer, and keep it with the email. The receipt line comes from the seller's descriptor, which can differ from the item name.

For carts, each item's answer comes back once, in that reply. Ask the agent to pass on every link straight away, because asking again will not bring it back.

## Why is a retry a new charge?

If an agent's output is cut off, the purchase may still have gone through. A retry is a new charge, even under your auto-approve limit, and auto-approve lets the retry through without asking ([A28](https://www.qatom.ai/capabilities#A28)). That is how double charges happen silently.

Before your agent retries a paid call:

1. Ask the agent for the last receipt and its transaction id.
2. Read the agent wallet's balance, allowing a few minutes for it to update.
3. Retry only if there is no receipt and the balance has not dropped.

A call the seller rejects can still be charged. Keep retries in mind when you pick your auto-approve limit, and tell your agent to check before trying again.

## How do you set this up step by step?

Here is the full setup to let an AI agent make purchases within limits you control:

1. **Connect.** Add the master MCP as a custom connector in your AI client ([A1](https://www.qatom.ai/capabilities#A1)).
2. **Sign in.** Use an email code or passkey, and use the same email every time so you see the same wallets.
3. **Check both wallets.** Ask your agent: "Check my Qatom agent wallet."
4. **Fund a small budget.** Top up your primary wallet, then move a small amount to the agent wallet and approve it.
5. **Set your auto-approve limit.** Pick a level you are comfortable seeing charged without a prompt.
6. **Make one test purchase.** Search the catalog, read the item, buy it and check the receipt.
7. **Write down your rules.** Tell the agent to confirm prices, show receipts, and check before any retry.

Buying never needs a plan; plans are for sellers only. If you want to compare how other systems handle agent consent, see [agent payment protocols compared](https://www.qatom.ai/learn/agent-payment-protocols-compared).

## Next steps

- Connect your AI client and sign in: [Capabilities Index, step A1](https://www.qatom.ai/capabilities#A1).
- Read the developer docs for embeds and the Payment API at [docs.qatom.ai](https://docs.qatom.ai/).
- Questions about a purchase or your setup? [Contact the team](https://www.qatom.ai/contact).

## Frequently asked questions

### Can an AI agent buy things on its own?

Yes, if you connect it to a store and give it a wallet to spend from. With Qatom, the agent pays from its own agent wallet and gets the seller's answer back in the same step. Purchases under your auto-approve limit go through on their own, and larger ones wait for your approval.

### How do I set a spending limit for an AI agent?

Use two limits. First, put only a small amount in the agent's own wallet, because the agent can never spend more than that wallet holds. Second, set an auto-approve limit so that anything above it needs your approval before it is paid.

### What is an AI agent wallet?

An AI agent wallet is a separate wallet that your AI spends from, kept apart from your own money. In Qatom it is called the agent twin and holds USD-TDN, a US-dollar token where 1 USD-TDN equals 1 USD. The agent never touches your primary wallet or your card.

### Is it safe to give an AI agent my credit card?

It is safer to give the agent a separate, prepaid budget than your card. In Qatom, the agent never touches your card or your primary wallet: you fund your own primary wallet, then move a small amount to the agent wallet. If something goes wrong, the most the agent can spend is what that wallet holds.

### How do I approve an AI agent purchase?

When a purchase is above your auto-approve limit, the agent gives you an approval link, and the TODAQ app (Qatom Authenticator) can show the request as a push. Check the item, the seller it pays and the price, then tap Approve or Dismiss. Tell the agent you approved, and it finishes the purchase.

### Why did my AI agent charge me twice?

A likely cause is a retry. If a reply is cut off, the first purchase may still have gone through, and a retry is a new charge, even under an auto-approve limit. Check the last receipt and the wallet balance before letting the agent try again.

### Do I need a paid plan to let my agent buy things?

No. On Qatom, plans are for sellers only, and buying never needs a plan. You sign in, fund your wallet and let the agent spend from its own agent wallet.

### What happens if my agent buys the wrong thing?

Find the transaction id on the receipt, because it is what you quote in any refund request. Then contact the seller of the item. To lower the risk next time, keep your auto-approve limit small and check every approval before you tap Approve.

## Sources

- [Qatom Capabilities Index](https://www.qatom.ai/capabilities)
- [Qatom developer docs](https://docs.qatom.ai/)
- [Model Context Protocol: Authorization specification](https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization)