AgentRefills ships a native MCP server, so Claude can search brands, buy a gift card, and release the code as first-class tools, all under your spend caps and approval rules.
# Register the AgentRefills MCP server with your client
claude mcp add agentrefills \
--env AGENTREFILLS_KEY=sk_live_... \
-- npx -y @agentrefills/mcp
# Claude can now call these tools in a conversation:
list_brands({ "query": "amazon", "country": "US" })
buy_giftcard({ "brand_id": "amazon", "amount_minor": 2500,
"currency": "USD", "client_ref": "reward-9f3a" })
get_code({ "task_id": "tsk_9F2A" }) # released once, from the vault
Daily and monthly limits plus a brand allowlist, enforced on every purchase.
Purchases above your threshold are approved by a human in Slack before money moves.
If the policy engine is unreachable or undecided, the purchase is denied, never allowed.
Codes are encrypted at rest, released once, access-logged, and never written to logs or traces.
An idempotency key plus a unique payment-per-task constraint make a double charge structurally impossible.
Every order is reconstructable from an OpenTelemetry trace plus a double-entry ledger, with webhooks on completion.
Send a gift card for a survey, referral or milestone.
Resolve a ticket with a gift card instead of a slow reversal.
Send a scheduled thank-you or birthday gift, within a budget.
Buy stored-value for a team, capped and reconciled.
Register the AgentRefills MCP server with your MCP client (for example `claude mcp add agentrefills -- npx -y @agentrefills/mcp`), set your API key, and Claude gains the list_brands, buy_giftcard and get_code tools. Every call still passes the fail-closed policy check and your spend caps.
Every agent gets its own API key scoped to per-agent daily and monthly spend caps and a brand allowlist. The policy engine enforces the caps on every purchase and fails closed, so the agent can never exceed its budget even if the policy service is unreachable.
Set an approval threshold. Any purchase above it is parked as APPROVAL_REQUIRED and a human is pinged in Slack to approve or reject before money moves. The task resumes automatically once approved.
Start in the sandbox with zero real spend, then flip to production.
Get API keys