Give your agents authority, not blank cheques.

import { Ostrel } from "@ostrel/sdk";

const ostrel = new Ostrel({ apiKey: process.env.OSTREL_API_KEY });

const mandate = await ostrel.mandates.issue({
  agent: "procurement-agent-01",
  limit: { amount: "5000.00", currency: "USD", period: "day" },
  perTransaction: "1500.00",
  counterparties: ["northfield-supply", "alder-compute"],
  expiresAt: "2026-12-31T23:59:59Z",
});

// The agent presents mandate.id with each transaction.
// When you want it to stop:
await ostrel.mandates.revoke(mandate.id);

curl "$OSTREL_API/v1/mandates" \
  -H "Authorization: Bearer $OSTREL_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "agent": "procurement-agent-01",
    "limit": { "amount": "5000.00", "currency": "USD", "period": "day" },
    "per_transaction": "1500.00",
    "counterparties": ["northfield-supply", "alder-compute"],
    "expires_at": "2026-12-31T23:59:59Z"
  }'

# Revoke
curl -X POST "$OSTREL_API/v1/mandates/M-0142/revoke" \
  -H "Authorization: Bearer $OSTREL_API_KEY"

template Mandate
  with
    principal      : Party
    agent          : Party
    perTransaction : Decimal
    counterparties : [Party]
    expiresAt      : Time
  where
    signatory principal
    observer agent

    nonconsuming choice Authorise : ()
      with payee : Party; amount : Decimal
      controller agent
      do
        now <- getTime
        assertMsg "Mandate expired" (now < expiresAt)
        assertMsg "Over per-transaction cap" (amount <= perTransaction)
        assertMsg "Counterparty not on mandate" (payee `elem` counterparties)

    choice Revoke : ()
      controller principal
      do pure ()