Agent mandates

Definition

A delegated payment mandate for an AI agent is a Prokura Credential: a signed document that names the principal, the agent, the payees, the currency caps, the purposes, the rails and the time window.

What the human grants

The principal is the human or organisation that accepts the spend. In the public demo the principal is an anonymous session, not an account and not a name. The agent does not grant this to itself.

prokura_request_mandate returns a grant URL on https://approve.prokura.network and a QR code for that URL. It does not return a credential. Opening the URL is the human's act. Until that act finishes, the session has no mandate and the gate is not called.

Demo limits

A demo credential, once a human grants it, allows 100.00 EUR per payment, asks for approval above 50.00 EUR, and allows 150.00 EUR per day. It expires ten minutes after it is issued and pays only the fake store: Demo Store, Demo SaaS and Demo Travel. The rail is Mollie in test mode. Five mandates are accepted per client address per hour, and one mandate is active per session.

Those payees are domains on the credential (demo-store.prokura.network, demo-saas.prokura.network, demo-travel.prokura.network) with those display names. Purposes are software and travel. The core rail id is mollie, which this deployment runs in test mode.

A live credential

This file does not embed a sample Prokura Credential. A credential carries a signature, and a made-up signature would be a false document. The core's public mandate read returns a redacted summary unless the caller is the owning tenant. There is no public example-credential URL. The HTML page at this path will insert a credential the site has itself had issued, fetched from the core by id.