Payment to Unknown or Previously Failed Vendor

An agent attempting payment to a vendor it has never used before, or to one where prior attempts failed, warrants scrutiny. Could indicate a hallucinated API endpoint or compromised routing.

Sipi Bot blocks payments to unknown vendors by default. Admins must explicitly approve new vendor relationships. This prevents both accidental spending and malicious exploitation.

Can agents discover new vendors dynamically?

Not by default. New vendors must be pre-approved by an admin. For approved discovery scenarios, agents can request vendor approval through the policy API.

Start monitoring agent spend