Testing Spending Policies

This guide walks through setting up an agent from scratch and testing that spending policies enforce correctly. By the end, you’ll have an agent with policies that approve, require approval, or deny payments based on amount thresholds.

Prerequisites

What You’ll Build

Amount Range	Expected Result	Policy
$0 -$ 10	Approved automatically	Under all thresholds
$10 -$ 15	Requires approval	Exceeds approval threshold
$15+	Denied	Exceeds max transaction amount

Step 1: Create a Wallet

Navigate to Wallets

Go to Wallets in the sidebar and click Create Wallet.

Configure the wallet

Name: e.g., “Test Operations Wallet”
Custody Type: PRIVY (recommended - enterprise-grade key management)
Chain Type: EVM

Provision the wallet

Click Provision to assign an onchain address. Your wallet is now ready to receive funds.

Fund the wallet

For testnet, request pathUSD tokens from the Conto team. For mainnet, send USDC to the wallet address shown on the detail page.

Step 2: Connect an Agent

Navigate to Agents

Go to Agents in the sidebar and click Connect Agent.

Set agent details

Name: e.g., “Policy Test Agent”
Agent Type: Choose your framework (select CUSTOM if unsure)

Link a funding wallet

In Step 2 of the wizard, select the wallet you created and configure spending limits:

Setting	Value
Delegation Type	Limited
Per Transaction	`200`
Daily Limit	`1000`
Weekly Limit	`5000`
Monthly Limit	`20000`

Do not set Per Transaction to 0. A zero value blocks all payments at the wallet level before policies are evaluated. This is the most common setup mistake.

Complete setup

Finish the wizard. Your agent is now active with a linked wallet.

Step 3: Generate an SDK Key

Open the agent detail page

Click on your agent to open its detail page.

Go to SDK Integration tab

Click the SDK Integration tab.

Generate a key

Click Generate SDK Key. Copy the key immediately - it is only shown once.The key looks like: conto_agent_72015200221e...Store it in an environment variable:

export CONTO_API_KEY="conto_agent_your_key_here"

Step 4: Create Policies

Create two policies to test different enforcement behaviors.

Policy A: Spend Limit

Create the policy

Go to Policies in the sidebar and click Create Policy.

Name: “Manual Spend Test”
Description: “Deny transactions over $15”
Policy Type: SPEND_LIMIT

Add a rule

Field	Value
Rule Type	`MAX_AMOUNT`
Operator	`LTE`
Value	`15`
Action	`ALLOW`

This allows transactions up to $15. Anything above is denied.

How rule actions work:

ALLOW + LTE $15 means: “Allow transactions where the amount is ≤ $15”
Transactions that do NOT match the ALLOW condition are implicitly denied
DENY + GT $15 achieves the same effect: “Deny transactions where amount > $15”
REQUIRE_APPROVAL + GT $10 means: “Require manual approval when amount > $10”

Think of it as: the action tells Conto what to do when the condition is true.

Policy B: Approval Threshold

Create the policy

Name: “Manual Approval Test”
Description: “Require approval for transactions over $10”
Policy Type: APPROVAL_THRESHOLD

Add a rule

Field	Value
Rule Type	`REQUIRE_APPROVAL_ABOVE`
Operator	`GREATER_THAN`
Value	`10`
Action	`REQUIRE_APPROVAL`

Transactions over $10 require manual approval in the dashboard before they can execute.

Step 5: Assign Policies to the Agent

Open agent detail page

Navigate to your agent’s detail page.

Go to the Permissions tab

Click the Permissions tab.

Assign both policies

Assign “Manual Spend Test” and “Manual Approval Test” to the agent. All assigned policies are evaluated with AND logic — the most restrictive rule wins.

Step 6: Run Test Transactions

Use curl or any HTTP client to test the three scenarios.

Verify Your Setup

Before running test transactions, verify your agent is correctly configured:

curl https://conto.finance/api/sdk/setup \
  -H "Authorization: Bearer $CONTO_SDK_KEY"

This returns your agent’s profile, linked wallets, active policies, and current spend tracking. Check that:

agent.status is "ACTIVE"
wallets array is not empty
policies shows your assigned policies

Test 1: $5 Payment (Expect: APPROVED)

curl -X POST https://conto.finance/api/sdk/payments/request \
  -H "Authorization: Bearer $CONTO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "amount": 5,
    "recipientAddress": "0x1234567890abcdef1234567890abcdef12345678",
    "purpose": "Test - under all limits",
    "category": "software"
  }'

Expected response:

{
  "requestId": "cmm...",
  "status": "APPROVED",
  "currency": "pathUSD",
  "wallet": {
    "address": "0x788dD0...",
    "availableBalance": 999822
  }
}

Test 2: $12 Payment (Expect: REQUIRES_APPROVAL)

curl -X POST https://conto.finance/api/sdk/payments/request \
  -H "Authorization: Bearer $CONTO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "amount": 12,
    "recipientAddress": "0x1234567890abcdef1234567890abcdef12345678",
    "purpose": "Test - over approval threshold"
  }'

Expected response:

{
  "requestId": "cmm...",
  "status": "REQUIRES_APPROVAL",
  "violations": [
    {
      "type": "PER_TX_LIMIT",
      "message": "[Policy: Manual Approval Test] Amount $12 exceeds approval threshold $10",
      "source": "policy_rule",
      "policyName": "Manual Approval Test"
    }
  ]
}

Test 3: $20 Payment (Expect: DENIED)

curl -X POST https://conto.finance/api/sdk/payments/request \
  -H "Authorization: Bearer $CONTO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "amount": 20,
    "recipientAddress": "0x1234567890abcdef1234567890abcdef12345678",
    "purpose": "Test - over max amount"
  }'

Expected response:

{
  "requestId": "cmm...",
  "status": "DENIED",
  "violations": [
    {
      "type": "PER_TX_LIMIT",
      "message": "[Policy: Manual Approval Test] Amount $20 exceeds approval threshold $10",
      "source": "policy_rule"
    }
  ]
}

Step 7: Execute an Approved Payment

If Test 1 returned APPROVED, you can execute it onchain:

curl -X POST https://conto.finance/api/sdk/payments/REQUEST_ID/execute \
  -H "Authorization: Bearer $CONTO_API_KEY"

Response includes the txHash and an explorer URL to verify onchain.

Using the SDK Instead of curl

The same tests using the TypeScript SDK:

import { Conto } from '@conto/sdk';

const conto = new Conto({ apiKey: process.env.CONTO_API_KEY });

// Test 1: Should approve
const test1 = await conto.payments.request({
  amount: 5,
  recipientAddress: '0x1234567890abcdef1234567890abcdef12345678',
  purpose: 'Test - under all limits',
});
console.log('Test 1:', test1.status); // APPROVED

// Test 2: Should require approval
const test2 = await conto.payments.request({
  amount: 12,
  recipientAddress: '0x1234567890abcdef1234567890abcdef12345678',
  purpose: 'Test - over approval threshold',
});
console.log('Test 2:', test2.status); // REQUIRES_APPROVAL

// Test 3: Should deny
const test3 = await conto.payments.request({
  amount: 20,
  recipientAddress: '0x1234567890abcdef1234567890abcdef12345678',
  purpose: 'Test - over max amount',
});
console.log('Test 3:', test3.status); // DENIED

Editing Wallet Limits After Setup

If you need to change wallet spending limits after the initial setup:

Go to the agent detail page
Open the Overview or Wallets tab
Click the pencil icon next to the wallet
Update per-transaction, daily, weekly, or monthly limits
Click Save Changes

If the per-transaction limit is set to $0, all payments will be denied at the wallet level with the message “Amount exceeds per-transaction limit of $0”. Update it to a value that makes sense for your use case.

How Policy Evaluation Works

Conto evaluates wallet-level limits first, then policy rules with AND logic. The first DENY stops evaluation. Org-level policies stack with agent-level policies. See Policy Overview for the full reference.

Troubleshooting

All payments denied with 'per-transaction limit of $0'

The wallet-level per-transaction limit is set to 0. Edit the wallet limits on the agent detail page (pencil icon) and set it to a non-zero value.

Payment denied but I expected REQUIRES_APPROVAL

Multiple policies are evaluated with AND logic. If one policy denies while another would require approval, the denial takes priority. Check which policies are assigned in the Permissions tab.

Wrong policy is triggering

Policies at the same priority level are all evaluated. If your approval threshold (>$10) fires before your spend limit (>$15), it’s because the approval threshold is checked first. Both are still enforced — the most restrictive outcome wins.

SDK key returns AUTH_FAILED

SDK keys are only shown once when generated. If you’ve lost it, generate a new one from the agent detail page under SDK Integration.

Organization policies are overriding my agent policies

Org-level policies apply to all agents. If a Starter policy caps transactions at

25 and your agent policy allows up to

100, the $25 cap wins. Check with your org admin.

Next Steps

Policy Types

Explore all available policy rule types

SDK Reference

Full SDK payment methods and options

Time Windows

Restrict payments to specific hours and days

Counterparties

Allowlist and blocklist recipient addresses

Get Started

API

Quick Start

CLI

SDK

AI Assistant

MCP Server

Policies

Integrations

Guides

Testing Spending Policies

Testing Spending Policies

Prerequisites

What You’ll Build

Step 1: Create a Wallet

Step 2: Connect an Agent

Step 3: Generate an SDK Key

Step 4: Create Policies

Policy A: Spend Limit

Policy B: Approval Threshold

Step 5: Assign Policies to the Agent

Step 6: Run Test Transactions

Verify Your Setup

Test 1: $5 Payment (Expect: APPROVED)

Test 2: $12 Payment (Expect: REQUIRES_APPROVAL)

Test 3: $20 Payment (Expect: DENIED)

Step 7: Execute an Approved Payment

Using the SDK Instead of curl

Editing Wallet Limits After Setup

How Policy Evaluation Works

Troubleshooting

Next Steps

Policy Types

SDK Reference

Time Windows

Counterparties

Get Started

API

Quick Start

CLI

SDK

AI Assistant

MCP Server

Policies

Integrations

Guides

​Testing Spending Policies

​Prerequisites

​What You’ll Build

​Step 1: Create a Wallet

​Step 2: Connect an Agent

​Step 3: Generate an SDK Key

​Step 4: Create Policies

​Policy A: Spend Limit

​Policy B: Approval Threshold

​Step 5: Assign Policies to the Agent

​Step 6: Run Test Transactions

​Verify Your Setup

​Test 1: $5 Payment (Expect: APPROVED)

​Test 2: $12 Payment (Expect: REQUIRES_APPROVAL)

​Test 3: $20 Payment (Expect: DENIED)

​Step 7: Execute an Approved Payment

​Using the SDK Instead of curl

​Editing Wallet Limits After Setup

​How Policy Evaluation Works

​Troubleshooting

​Next Steps

Policy Types

SDK Reference

Time Windows

Counterparties

Testing Spending Policies

Prerequisites

What You’ll Build

Step 1: Create a Wallet

Step 2: Connect an Agent

Step 3: Generate an SDK Key

Step 4: Create Policies

Policy A: Spend Limit

Policy B: Approval Threshold

Step 5: Assign Policies to the Agent

Step 6: Run Test Transactions

Verify Your Setup

Test 1: $5 Payment (Expect: APPROVED)

Test 2: $12 Payment (Expect: REQUIRES_APPROVAL)

Test 3: $20 Payment (Expect: DENIED)

Step 7: Execute an Approved Payment

Using the SDK Instead of curl

Editing Wallet Limits After Setup

How Policy Evaluation Works

Troubleshooting

Next Steps