Give an agent a tool budget without handing over your account.

All Clear Digital isolates every agent task behind a scoped child API key with an explicit tool allowlist, a monthly credit ceiling, an expiration timestamp, and a human-only spend policy that no API key is allowed to modify.

Across {stats.totalTools} live tools: minimum {stats.minCredits} credits, median {stats.medianCredits} credits, maximum {stats.maxCredits.toLocaleString()} credits. {stats.primaryWorkflow ? ` Chained workflow (${stats.primaryWorkflow.id}): ${stats.primaryWorkflow.credits} credits charged once on full-chain completion.` : ''}

A parent key with the keys:create scope can mint delegated child keys for specific workers or client projects. Each child key can restrict scopes, lock tools to an explicit slug array, cap monthly spend with budgetCredits, and set an ISO-8601 expiresAt cutoff.

Anti-escalation enforcement: A child key cannot request a scope, tool, credit budget, or expiration date that exceeds its parent key. Attempts fail immediately with HTTP 403 (scope_escalation, budget_escalation, or expiry_escalation).

Both POST /wp-json/allclear/v1/tools/run and POST /wp-json/allclear/v1/mcp (tools/call) execute the same billing path. Before running a handler, the server reserves budget against the key's monthly cap. If input validation fails or the upstream provider returns an error, the reservation is refunded and your wallet balance remains unchanged.

Live verification record: Calling fibonacci-type-scale debit-tested a live wallet from 100 → 90 credits on success, and 90 → 90 credits (delta = 0) when schema-architect was called with an invalid schema type.

Auto top-up is disabled by default. A human signed into a browser session can optionally configure a credit threshold, a credit pack SKU, a saved WooCommerce payment token, and a hard monthly dollar ceiling (monthlyCapCents).

Hard API-key block: Any PUT /wp-json/allclear/v1/spend-policy request carrying an X-API-Key is rejected with human_approval_required. An agent with wallet:topup can only call POST /wp-json/allclear/v1/wallet/auto-topup within the human-approved monthly cap.

This request creates a child key limited to two tools (fibonacci-type-scale and schema-architect), a monthly ceiling of 150 credits, and a fixed expiration date. When used on POST /wp-json/allclear/v1/mcp, tools/list returns only those two member tools plus the free check_agent_readiness scanner.

Disclosure: I am Chris Slater, founder and owner of All Clear Digital LLC. When I recommend a plan, tool, or Operator Pack on this site, I have a direct financial ownership interest in All Clear Digital.

Autonomous agents fail in loops when a prompt drifts or an upstream page changes. All Clear Digital isolates every agent task behind a scoped child API key with an explicit tool allowlist, a monthly credit ceiling, an expiration timestamp, and a human-only spend policy that no API key is allowed to modify.

Charged once per successful run. Failed runs are never charged. Workflows charge one bundle price after the full chain succeeds. Across 162 live tools: minimum 0 credits, median 10 credits, maximum 1,200 credits.

Four hard boundaries between your wallet and a runaway loop.

1. Scoped Child Keys (POST /wp-json/allclear/v1/keys)

A parent key with the keys:create scope can mint delegated child keys for specific workers or client projects. Each child key can restrict scopes, lock tools to an explicit slug array, cap monthly spend with budgetCredits, and set an ISO-8601 expiresAt cutoff. A child key cannot request a scope, tool, credit budget, or expiration date that exceeds its parent key.

2. Pay-Only-On-Success Billing

Both POST /wp-json/allclear/v1/tools/run and POST /wp-json/allclear/v1/mcp (tools/call) execute the same billing path. If input validation fails or the upstream provider returns an error, the reservation is refunded and your wallet balance remains unchanged. Calling fibonacci-type-scale debit-tested a live wallet from 100 to 90 credits on success, and 90 to 90 credits (delta = 0) when schema-architect was called with an invalid schema type.

3. Human-Only Spend Policy (/wp-json/allclear/v1/spend-policy)

Auto top-up is disabled by default. Any PUT /wp-json/allclear/v1/spend-policy request carrying an X-API-Key is rejected with human_approval_required. An agent with wallet:topup can only call POST /wp-json/allclear/v1/wallet/auto-topup within the human-approved monthly cap.

4. UCP Checkout Escalation (/.well-known/ucp)

When an agent needs a new plan or credit pack and no saved payment mandate is active, it calls POST /wp-json/allclear/ucp/v1/checkout-sessions, returning a hosted continue_url so a human can review the line item and complete payment in the browser.

Next: Connect your key to Hosted MCP · Back to 31-day membership plans

Note from Chris Slater · Founder Disclosure

Every time I hand an API key to a background agent on my own servers, I want two guarantees: it can only see the tools I allowlisted, and it cannot spend a single credit past the cap I set. That is why child key budgets and human-only spend policies live directly in our WordPress REST and MCP layer.

Disclosure: I am Chris Slater, founder and owner of All Clear Digital LLC. When I recommend a plan, tool, or Operator Pack on this site, I have a direct financial ownership interest in All Clear Digital.

25% direct commission on settled, non-refunded paid orders.

Every paid All Clear Digital membership includes partner access. When someone arrives through a ?ref= link, the site records the affiliate_for_woocommerce and allclear_ref referral cookies for 30 days. The active storewide commission plan pays 25% on Tier 1 direct orders and 10% · 5% · 4% · 3% · 1% · 1% across Tiers 2–7 (up to 49% total across 7 tiers) on settled, non-refunded paid WooCommerce orders. There is zero compensation for recruitment alone.