Every budget change your agent makes, checked before it goes out.
When an agent burns a client's budget, someone pays for it, and the agency usually finds out from the client. MolTrust checks each Amazon Ads tool call against the mandate your agency set for that ad account, before the call runs, and stops the agent within seconds when you change the mandate.
Amazon's Ads MCP Server lets an agent create campaigns, change daily budgets and move bids through tool calls. Today the limits for that agent usually sit in its system prompt: "never go above 500 a day", "only touch Acme campaigns". A prompt is a request to the model. A typo in a budget field, a campaign ID from another client or a confused tool choice goes straight to Amazon, and the spend is real by the time anyone looks at a report.
Agencies carry that risk toward their clients. Most contracts do not say who pays for an agent's mistake, and most setups have no way to stop all agents at once other than revoking credentials.
Your agency writes a mandate for each ad account: which tools the agent may use, which brands, the daily cap, the account-wide cap, the largest bid change, when a person has to approve, and until when the mandate holds. Your code wraps the agent's Amazon calls with the MolTrust guard. Before each call, the guard sends the tool name and the few numbers the mandate limits to MolTrust and gets one of three answers:
MolTrust never holds Amazon credentials, never sees Amazon data and never calls Amazon. Your Amazon login stays in your process. Every verdict comes with a record that anyone can recompute later without MolTrust: the audit trail for a client dispute.
Test data: ad account ENTITYDEMO123, brand Acme Outdoor, daily cap USD 500, approval above USD 200, bid changes limited to ±25 %. The check runs on api.moltrust.ch; nothing is sent to Amazon.
Limited to 10 checks per minute per visitor. The demo answers with the verdict and the record's digest; the full record and its offline check are in the quickstart.
One wrapper around your existing MCP client, ten minutes to the first verdict, no Amazon data leaves your process.
Caps per account, a signature above a threshold, a stop that takes effect on the next call, and a record for every change.
Ask your agency for the mandate its agents run under, and check any change yourself.
Free covers one ad account and 1,000 checks a month. Pro is USD 49 per ad account per month, cancel any month from the customer portal.
Running agents across dozens of client accounts, or need the mandate tied into your own approval tool? Write to hello@moltrust.ch.
EU AI Act: a recomputable record per agent decision supports the logging duties for high-risk systems; it does not make a system compliant on its own.
