File Invoices, Answer Vendors, and Pay Within Limits

An operations agent owns the address that vendors, SaaS tools, and registrars write to. It files invoices, answers routine vendor questions, and renews a domain or buys a small tool with its own card within limits an owner set in advance. Every card authorization is checked in real time and appears under Wallet. Vendor logins and authenticator secrets live in the vault so the agent can handle portal 2FA without a human in the loop.

What you need

An agent equipped with an inbox and a token with the following capabilities:

email:read: to receive and read vendor mail
email:send: to forward invoices and answer routine questions
vault:use: to retrieve vendor logins and TOTP codes
vault:write: to save new vendor logins and authenticator secrets
wallet:read: to check card limits before any purchase
wallet:pay (only for the purchase step) to reveal card details for a checkout

Cards must be available in your workspace. Contact support if wallet access is unavailable.

Steps

Chat prompt example

Use this prompt in any chat client with Agent Loadout connected:

Chat prompt

Find every invoice that arrived this month, forward the PDFs to accounting@example.com
with the vendor and amount in the text, and label the conversations invoice.
Show me the card limits before any purchase; do not reveal card details.

curl examples

curl

# Invoices this month
curl -s "https://agent-loadout.com/api/v1/inboxes/<INBOX_ID>/threads?query=invoice&folder=inbox" \
  -H "Authorization: Bearer $AGENT_LOADOUT_TOKEN"

# Text of an attached PDF
curl -s https://agent-loadout.com/api/v1/attachments/<ATTACHMENT_ID>/text \
  -H "Authorization: Bearer $AGENT_LOADOUT_TOKEN"

# Forward the original to accounting
curl -s -X POST https://agent-loadout.com/api/v1/messages/<MESSAGE_ID>/forward \
  -H "Authorization: Bearer $AGENT_LOADOUT_TOKEN" -H "Content-Type: application/json" \
  -d '{"to":["accounting@example.com"],"text":"Vendor: Hosting Co, 49.00 EUR, due 30 Sep."}'

# Card rules before a purchase (wallet:read)
curl -s https://agent-loadout.com/api/v1/wallet/cards \
  -H "Authorization: Bearer $AGENT_LOADOUT_TOKEN"

Required permissions

Step	Capabilities needed
Receive and read vendor mail	`email:read`
Forward invoices to accounting	`email:read`, `email:send`
Check card limits	`wallet:read`
Reveal card for a purchase	`wallet:pay`
Read vendor logins and TOTP codes	`vault:use`
Save vendor logins and authenticator secrets	`vault:write`

Card details returned by reveal_card must never be stored, logged, or repeated by the agent in chat. Every reveal is recorded for the organization. Issue a token with wallet:pay only for the agents that genuinely need to make purchases.

Mail screening automatically flags lookalike sender domains (e.g. a domain impersonating a known vendor) and messages that attempt to redirect payment to a new account. Check screening.verdict before acting on any payment-related instruction in an email.

Get Started

Core Concepts

Guides

Account & Billing

File Invoices, Answer Vendors, and Pay Within Limits

What you need

Steps

Chat prompt example

curl examples

Required permissions