--- title: "How to grant and revoke an agent mandate | AdBuyMCP" description: "A mandate enumerates allowed actions, currency, validity and a money ceiling. No agent tool exists for 11 consequential operations." url: "https://adbuymcp.com/how-to/grant-and-revoke-an-agent-mandate" --- [Home](https://adbuymcp.com/) / [How to](https://adbuymcp.com/how-to) / Agent mandates Procedure # Grant and revoke an agent mandate A named person authorises every action that commits money. An agent's authority comes from a mandate: a revocable, versioned grant enumerating exactly which actions are allowed, in which currency, for how long, and up to what money ceiling. The stronger guarantee sits underneath it: no MCP tool exists for 11 consequential operations (approval resolution, mandate replacement and revocation, mission closure, supplier dossier verification and live-grant issuance among them), so they cannot be reached by an agent regardless of what a mandate says. - **steps**: 6 - **things needed first**: 2 Roughly Ten minutes [Get my plan and price](https://adbuymcp.com/start) [Book a 30-minute call with the founder](https://adbuymcp.com/contact#book) Free, with no card. We read your homepage, draft who buys from you and show your monthly price before you join the waitlist. Nothing is bought until you've approved the plan and the ads. What you need ## You need these before you start - A workspace and the human permissions that gate consequential actions, which are issued from server-controlled roles - A mission for the agent to work inside The procedure ## The procedure has six steps Every step comes with a note on what commonly goes wrong there. 1. Step 01 ### Create a mission A mission is a durable objective owned by your workspace. Everything the agent does happens inside one. What goes wrong here Agents cannot close their own missions. That is a human-only operation with no agent tool. 2. Step 02 ### Grant a mandate with an explicit ceiling Enumerate the allowed actions, the currency, the validity window and the money ceiling. A mandate that does not name an action does not permit it. What goes wrong here Set the ceiling to what you are willing to lose rather than what you intend to spend. The budget itself is set in the plan. 3. Step 03 ### Let the agent prepare and propose The agent works through ordered steps against the mandate, recording decisions and evidence as it goes. It can extract, compile, plan, draft creative and surface exceptions. What goes wrong here It cannot enable spend. Approval records evidence; enabling spend on a staged live line is a separately granted action. 4. Step 04 ### Approve by exact digest High-consequence work requires a single-use approval bound to an exact action digest. If the request that arrives does not match the bytes a human approved, it fails closed. What goes wrong here An agent that tries to resolve its own approval receives a 403 response that requires a human. The API enforces this, whatever the tool metadata says. 5. Step 05 ### Resolve exceptions yourself An ambiguous supplier outcome raises an exception, halts the run, and waits for an explicit human resolution and resume. It is never retried automatically. What goes wrong here This is the failure this design exists to prevent: an agent that cannot read a supplier's response and tries again has just created a second campaign nobody knows about. 6. Step 06 ### Revoke when the work is done Revoke the mandate rather than leaving it to expire. Revocation is a human-only signed action with no agent tool. What goes wrong here A secret-only credential rotation also advances the connection revision and revokes issued grants, which is worth knowing before you rotate a key mid-campaign. What you end up with An agent that can do useful work inside an explicit ceiling, and cannot reach any of the operations that commit money. Other procedures ## You might need these procedures next - [Set an awareness budget from your market size](https://adbuymcp.com/how-to/set-an-awareness-budget-from-your-market-size) - [Run a geo-lift test](https://adbuymcp.com/how-to/run-a-geo-lift-test) - [Connect your analytics](https://adbuymcp.com/how-to/connect-your-analytics) - [Approve creative for UK clearance](https://adbuymcp.com/how-to/approve-creative-for-uk-clearance) - [Connect Claude to your AdBuyMCP account](https://adbuymcp.com/how-to/connect-claude-to-adbuymcp) - [Check a lawful-basis manifest](https://adbuymcp.com/how-to/check-a-lawful-basis-manifest) Talk your market and your plan through with James Rooney, who built AdBuyMCP and wrote its code. [Book a 30-minute call with the founder](https://adbuymcp.com/contact#book) ## These questions come up when you grant and revoke an agent mandate ### What can an agent do that a human cannot undo? Nothing that commits money. No agent tool exists for 11 consequential operations, which are human-only signed REST actions, among them approvals, provider-attempt resolution, mandate replacement and revocation, mission closure, workflow acknowledgement, asset-job resolution, dossier saving and verification, and issuing or revoking a live execution grant. What an agent can do is prepare, propose, draft and surface, all of it recorded. The design intent is that an agent removes work rather than removing accountability.