This is exactly the problem we built nornr.com to solve. Instead of giving the agent a card directly, the agent requests a mandate before each purchase. Your policy layer decides approved, queued, or blocked based on amount, vendor, frequency, whatever rules you set. Every decision gets a signed receipt for audit. Works with Stripe, virtual cards, PayPal. No blockchain. Free tier if you want to try it against your MCP server.