Your agent can pay now. Here is the layer that decides whether it should.

2 500 MCP servers surveyed: 72 move money, none mentions a kill switch. A look at the missing task-bound spend envelope.