How can an AI agent pay an invoice?
An AI agent can pay an invoice by submitting it to a payments system that reads it, checks it, holds it when anything is new, and moves the money by ACH once the rules allow. The agent itself never holds payment authority.
Updated
What the agent does
The agent’s job is the submission. It sends the invoice as facts, as a PDF, or both: the vendor, the amount, the due date, the invoice number. It can choose a payout account the business has already verified, ask a new vendor for their own payout details through a secure link, and read the request back until it is paid or returned.
In OpenMerchant that is a handful of operations over REST, or the same operations as tools on an MCP server at https://api.openmerchant.dev/mcp/v1. There is no operation that approves, pays, cancels or retries a payment, so there is nothing for a compromised agent to misuse.
What decides whether it is paid
Not the agent. Three things do. The business’s policy: a per-payment limit, a daily limit, and when invoices are paid. Two independent checks: one proposes the payment, and a second, from a different AI provider, reviews the original invoice without seeing the first one’s reasoning. And the gates that always wait for a person: a new vendor, new or changed bank details, an amount over the limits or unusual against history, or anything a check flags.
The same policy runs whether an invoice came from an agent or from a connected inbox. An agent cannot find a softer path by choosing the API.
Why not give the agent a bank login
Because the common fraud is a real invoice with the wrong bank details. The FBI’s Internet Crime Complaint Center counted about three billion dollars in reported losses to business email compromise in 2025, and its classic form is a supplier’s invoice redirected to a fraudulent account. An agent with a bank login pays that invoice. An agent that can only submit cannot.
Where to start
The developer page shows a real request and what comes back, with the guardrail visible in the status, and the product page shows the same rules from the finance team’s side.
Sources
Eligible businesses can use a financial account provided through Stripe to fund supported vendor payments. Availability and account approval are subject to program requirements. Review applicable terms, fees and disclosures before use.