docs
fren get sandbox key

start

give your agents a bank

Nostro gives every AI agent its own EUR account access and virtual card, in your company's name, with a spending mandate you set. Agents drive it over MCP; humans stay in control.

Status: private preview, v0.1. Today you can use the public sandbox: fake money, a virtual ledger and simulated card payments, with the real API and MCP server. Live accounts and cards will be issued through a licensed EU partner institution later. Nostro is not a bank and does not hold customer funds.

what nostro is

Agents increasingly need to pay for things: an API plan, a dataset, a domain, a flight, a supplier invoice. Today that means pasting a human's corporate card into a prompt, with no limits, no separation between agents and no audit trail.

Nostro replaces that with four primitives:

  • One agent, one card, one key. Each agent gets its own virtual card in the company's name and its own API key. Nothing is shared.
  • A mandate checked before the money moves. Per-payment cap, daily and monthly limits, allowed merchant categories (MCC), blocked merchants.
  • Human approval above a threshold. Larger spends wait for a person in your company to approve or reject them.
  • A complete audit log. Every decision, allowed or not, is recorded with its reason.

how a payment flows

01 · agentCalls pay over MCP or REST with its nst_ key.
02 · mandateThe policy engine evaluates amount, merchant, MCC and spend so far.
03 · decisionallow review block
04 · ledgerCard is charged (or the request waits for a human), and the audit log records it.

The monthly budget is enforced twice: by the mandate engine, and as a spending limit set on the card itself. Even a bug on our side cannot let a card spend beyond its month.

two profiles, one endpoint

Everything goes through https://mcp.nostro.ag/mcp (MCP, Streamable HTTP) or the REST API on https://mcp.nostro.ag. The key you send decides what you can do:

keywho holds itwhat it can do
nst_…one agentRead its own wallet, pay, send transfers if allowed, read its own activity and requests. 5 tools.
nsa_…a human admin of the workspaceCreate agents, set mandates, freeze or revoke, approve requests, fund the sandbox, read the audit log. 12 tools.

what works today

capabilitysandbox (now)live (later)
EUR balance10 000 EUR of fake money per workspaceReal EUR account via a licensed EU partner
Virtual cardsSimulated, masked numbers, monthly limit enforcedReal cards in the company's name
Card paymentsSimulated authorization and debit on the virtual ledgerReal merchant payments
SEPA transfersSimulatedReal SEPA
Mandates, approvals, auditReal, same engine as liveSame
Company onboarding (KYB)None neededRequired

Next: get a sandbox key and make your first payment.