Skip to main content

What is a Policy?

Every agent has a spending policy that controls:
  • Maximum transaction amount
  • Daily and monthly spending limits
  • Auto-approve threshold
  • Merchant allowlists and blocklists
  • MCC category restrictions
  • Cooldown between transactions

Policy Fields

FieldTypeDescription
maxTransactionEurosnumberMax per-transaction amount
dailyLimitEurosnumberMax daily spend
monthlyLimitEurosnumberMax monthly spend
autoApproveLimitEurosnumberAuto-approve intents below this amount
merchantAllowliststring[]Only allow these merchants
merchantBlockliststring[]Block these merchants
allowedMccsstring[]Allow specific MCC codes
blockedMccsstring[]Block specific MCC codes
lockToFirstMerchantbooleanLock card to first merchant used
cooldownMinutesnumberMin minutes between transactions

Simulate

Test if a payment would pass before creating an intent:
curl -X POST https://api.getovra.com/policies/simulate \
  -H "Authorization: Bearer sk_test_..." \
  -H "Content-Type: application/json" \
  -d '{"agentId": "ag_xxx", "amount": 150, "merchant": "amazon.de"}'
{
  "allowed": true,
  "requiresApproval": true,
  "reason": "amount exceeds auto-approve limit (100€)",
  "advisories": []
}