Is Link agent wallet safe to connect to an AI agent?

What an AI agent can do

• Live vs paper: live; US Link accounts only (link-cli README); link-cli can issue test Shared Payment Tokens for a Stripe sandbox source
• Order approval: you approve the amount of every purchase in the Link app (requests expire after 10 minutes); each payment gets a new one-time-use card or single-use Shared Payment Token, valid for 12 hours, so your real card details aren't exposed; service limits of $5,000 per request, $5,000 a day and $20,000 per 30 days; controls for spending without approval are listed as coming soon; pays MPP merchants with link-cli mpp pay source
• Markets: one-time-use cards from your Link wallet, Shared Payment Tokens for Machine Payments Protocol (MPP) merchants
• Pricing: not stated

Safeguards that exist

• Paper, demo or testnet mode: Paper, demo or testnet mode available source
• Withdrawal permission needed or allowed: Agent creates a spend request; the customer approves it and gets a one-time-use payment credential, with no transfer ability (official docs) source
• Scoped keys, permission scopes or IP whitelisting: Per-customer OAuth tokens with scopes control whether the agent can spend, read financial data, or both (official docs) source
• Open source or audited: Open source source

Safeguards that are missing

• Can it place live orders unattended?: Can place live orders with no documented approval step source
• Order approval or confirmation options: No approval or limit option in our listing source

Sources

• https://link.com/agents
• https://docs.stripe.com/agentic-commerce/agents/link-agent-wallet

Full listing: Link agent wallet · How the score works: Safety score method