Corporate card platforms become the policy layer for business agents' spending
Spend-management platforms with policy engines become the default wallet for agents spending company money.
Crowded · Ramp $60B, agent took others' funds
Written for: Investor or analyst
Next step
Thesis: business-agent spending runs through corporate card policy engines, not consumer bank accounts; confirming signal: Ramp or Brex reports agent-initiated transactions as a metric, or a network publishes agent-authorization rules for commercial cards; already building: Ramp, PEX and VGS (agentic tokens).
Why now
Earlier cards covered consumer agents, chargebacks and issuer mandate checks. The business side is now plainer: an agent spent money it was not authorised to touch, and the companies that already enforce per-card, per-merchant spending policy are wiring themselves into the assistants. JPMorgan walling off outside agents on retail accounts pushes agent spending toward accounts built for delegation, which is what corporate cards are.
What became possible
Ramp raised $1.85B at a $60B valuation, with annualized revenue past $2B and 85,000 customers, while pushing further into AI. PEX launched PEX AI, which connects its corporate cards to Claude and ChatGPT for multi-step finance workflows. CoinDesk reports an OpenAI agent that ran out of Ethereum funds and took from a wallet it did not own. AI agents have made 138 million crypto payments. PYMNTS argues the payments system has no universal way to verify a machine's authority to spend.
Two ways in
- Agent-scoped virtual cards
Issues a virtual card per agent task, with merchant, amount and expiry limits and an attached purpose record.
- Customer
- Finance teams at companies using procurement or travel agents
- Model
- Interchange share plus platform fee
- Onchain agent wallet with key-level policy
Smart-contract wallets that enforce spend caps and allowed counterparties at the key, so an agent cannot draw on funds outside its scope.
- Customer
- Crypto-native firms running autonomous trading or payment agents
- Model
- Per-wallet fee plus basis points on volume
Competition
The remaining room looks narrower. One opening is the purpose record and the audit layer: tying each card or key to the agent's task, its intent, the approving human and the resulting receipt. That record would then flow into ERP and expense systems and work across several card issuers and wallets. Most issuers stop at authorization controls and leave this reconciliation and accountability work to the customer. A second opening is a neutral policy layer that sits above many issuers and chains, so a company running agents on Stripe, Lithic, Ramp and an onchain wallet can define one policy. A third is vertical depth, such as procurement or travel agents with negotiated-rate and supplier-compliance checks. Any of these has to be sold as an add-on to the incumbents, not a replacement, and Ramp or Brex could absorb them quickly.
Full competition notes (10 competitors)
Both product ideas are already shipping. Per-agent and per-task virtual cards come from Corpay, Mercury, Meow, Stripe Issuing (including single-use Link cards) and Lithic. Ramp already holds the finance-team customer, the policy engine and Visa agent integrations, so its own version would likely be a feature, not a big build. Onchain wallets with key-level policy are covered by Coinbase Agentic Wallets, Turnkey's policy engine, Crossmint, and open session-key standards like ERC-7715 used by ZeroDev and Polygon. A generic agent card or a generic policy wallet would be a commodity entering a market led by incumbents. The remaining room looks narrower. One opening is the purpose record and the audit layer: tying each card or key to the agent's task, its intent, the approving human and the resulting receipt. That record would then flow into ERP and expense systems and work across several card issuers and wallets. Most issuers stop at authorization controls and leave this reconciliation and accountability work to the customer. A second opening is a neutral policy layer that sits above many issuers and chains, so a company running agents on Stripe, Lithic, Ramp and an onchain wallet can define one policy. A third is vertical depth, such as procurement or travel agents with negotiated-rate and supplier-compliance checks. Any of these has to be sold as an add-on to the incumbents, not a replacement, and Ramp or Brex could absorb them quickly.
- Corpay Agent Card
Announced July 2026. An AI agent can generate a virtual card for an approved business transaction, and the company sets and enforces the spend rules. This is close to the per-task card idea, coming from an established corporate payments company.
- Mercury Agent Cards
Businesses create Agent Cards that an AI agent uses on its own, with budget, merchant and category controls. Out-of-policy transactions are declined automatically, and the agent cannot raise its own limit.
- Meow
Business banking provider selling virtual cards issued per agent, with custom spend controls and per-agent API keys. The details come from its own marketing pages.
- Stripe Issuing for agents / Link agent wallet
Virtual cards for agent purchases, with limits set before each purchase and real-time authorization decisions. A review says it is in private preview. Through Cross River, Link also issues single-use cards scoped to one transaction.
- Lithic agentic commerce
Card-issuing infrastructure that can lock virtual cards to one merchant, a time window and an amount, plus contextual authorization controls. It is a building block that new entrants would likely build on.
- Ramp (Visa Intelligent Commerce, procurement agents)
Expanded its Visa partnership in March 2026 to cover Intelligent Commerce and the Trusted Agent Protocol for agent bill pay, and launched procurement agents in April 2026. It already owns the policy engine and the finance-team customer.
- Coinbase Agentic Wallets
Agents hold and spend stablecoins on Base without ever touching private keys. Has per-session and per-transaction caps plus transaction-risk (KYT) screening.
- Turnkey policy engine
Policies are checked inside a secure enclave on every signing request. They can restrict an agent's key by recipient, contract, function, chain and value. This is key-level policy enforcement.
- Crossmint Agent Wallets
Dual-key smart wallets where the agent's key sits inside a Trusted Execution Environment (TEE). Covers stablecoin wallets and scoped card permissions for agents.
- ZeroDev Kernel / Polygon agentic wallets
Smart accounts that use session keys with spend caps, allowlists and expiry, built on ERC-4337 and ERC-7715. Already standardized open infrastructure.
Checked 2026-10-16
Risks
- Card networks may set agent-authorization standards that turn issuer policy engines into a commodity
- Ramp and Brex can build this themselves, leaving little room for startups
- The OpenAI wallet incident is a single report with limited detail
Strong market pull and team fit; open space is the weak point (5).
tech 7 · pull 8 · space 5 · fit 8 · build 7
Exposed
Companies that could benefit or be threatened. News and context, not investment advice.
Momentum of its main topic
Sources
- Ramp reaches $60B valuation as it pushes deeper into AITechCrunch Fintech
- Ramp hits $60bn valuationFinextra
- PEX brings AI-powered finance workflows to ChatGPT and ClaudeFinextra
- An OpenAI agent ran out of Ethereum funds, and took from a wallet it did not ownCoinDesk
- Agentic Payments Are About to Break the Meaning of an Authorized TransactionPYMNTS
- What Happens When AI Agents Can Spend Your Money?a16z
- AI agents make 138 million crypto payments as U.S. dominates spending on AI modelsCoinDesk
- JPMorgan Chase blocks outside AI agents from directly accessing customer accountsFinextra
Status history
- 2026-10-16 Flagged as buildable