# Sunrate Gives AI Agents a Company Card That Expires When the Job Is Done

> A business can let an agent pay a supplier, cap how much it spends and send exceptions to a human. The virtual card has completed Mastercard Agent Pay certification.

By Lidia Yadlos · November 3, 2026

Canonical: https://blockster.com/sunrate-ai-agents-company-card-spending-limits

Imagine giving an AI agent a company card to pay one hotel bill. The finance team sets the currency, caps the charge and decides when the card expires. If the bill comes in over budget, the agent can flag it for a person to review. If the bill meets the rules, the agent can pay it and record the result.

That is the kind of transaction [Sunrate](https://www.sunrate.com/) is targeting with its **Agentic Card**, a multi-currency virtual card it [announced on November 2](https://www.sunrate.com/newsroom/sunrate-launches-agentic-card-ai-driven-business-payments/) at Hong Kong FinTech Week. Sunrate says the card has completed **Mastercard Agent Pay certification**, which supports checking an agent’s identity and its authority to initiate a payment.

Mastercard showed how that authority can work in a separate October demonstration. An agent bought digital services on behalf of a business while following the budget and rules the business had set.

[Post from @Mastercard on X](https://twitter.com/Mastercard/status/2112590919509663796)

## Who decides what the agent can buy?

An online travel agency is one of Sunrate’s early examples. It might have hundreds of supplier bills across different markets, each with an approved budget. With the new card, the agency can give an agent permission for a particular payment and limit where, when and in what currency the card will work.

The agent can create the virtual card within that approved workflow, initiate the payment and check whether it went through. The business sets the merchant category, amount, currency, geography and validity period. Sunrate says each action is logged, so the finance team can trace how a payment was authorized and executed. The card can expire automatically when the task is complete.

A hotel charge can come in under budget and still be for the wrong booking. That is where [t54 Labs’ Trustline](https://www.t54.ai/trustline) comes in. It checks which agent is paying, who authorized it and whether the proposed charge matches the instructions. Mastercard named t54 among the initial participants and supporters of its [Agent Pay for Machines program](https://www.mastercard.com/us/en/news-and-trends/press/2026/june/mastercard-launches-agent-pay-for-machines.html).

t54 says Trustline has screened more than 20 million agent transactions and verified over 41,000 agents. As [Blockster reported in October](https://blockster.com/t54-hecto-financial-ai-agent-payments), t54 and South Korea’s Hecto Financial agreed to explore how these identity checks could work on Hecto’s planned payments platform.

> “It is about giving agents the ability to execute financial tasks within clear boundaries, with the right controls, identity and accountability in place.”
>
> — Li Yilong, Head of AI, Sunrate

## A company card for software

The question of who authorized a purchase is already familiar on the consumer side. As Blockster reported in October, [MoonPay and Whop opened a network of 300,000 businesses to AI shoppers](https://blockster.com/moonpay-and-whop-open-300000-businesses-to-ai-shoppers). MoonPay had previously demonstrated buying a physical copy of Madden NFL 27 through Claude using its PayBox wallet. The buyer could see what the agent had ordered and how it was paid for.

[Post from @moonpay on X](https://twitter.com/moonpay/status/2091902242433503270)

Sunrate is tackling the finance department’s version of that problem. The same team that approves a supplier budget needs to be able to explain a charge afterward. A card limited to one task gives the team a record tying the instruction, the spending limit and the payment together.

Hong Kong’s regulator is asking a related question. On the day of Sunrate’s announcement, the Hong Kong Monetary Authority [launched Project SAGE](https://www.hkma.gov.hk/eng/news-and-media/press-releases/2026/11/20261102-4/) to explore, among other things, how financial institutions can verify an agent’s identity and the authority a customer has delegated to it. For the finance manager looking at that hotel bill, those checks answer something practical: who gave the agent permission to spend the company’s money on this particular charge?
