An AI that buys for your team, inside rules it can’t break.

How an order travels

Six steps from a volunteer’s request to a filed receipt. The AI does the first two; code and people do the rest.

1. 1

   Ask

   A volunteer says what the event needs, in plain words.

   “6 folding tables for Saturday’s beach cleanup.”

2. 2

   Dry run

   The agent compares retailers on price per unit and dry-runs the order against the mandate before proposing anything.

   dry run · 6 × $44.97 = $269.82 · walmart.com

3. 3

   Engine decides

   Eleven fixed rules, M0 to M10, run in code on whole cents. The AI can’t change the answer.

   M9 · $269.82 is over the $250.00 auto-approve limit → needs the treasurer

4. 4

   Treasurer signs

   Inside the limits it’s pre-approved. Above them, only the mandate’s approver can sign, and the rules run again first.

   approved by the treasurer · rules re-checked

5. 5

   PayPal pays

   The order is captured in the PayPal sandbox with an idempotency key, and a verified webhook confirms it.

   PayPal-Request-Id set · webhook signature verified

6. 6

   Receipt filed

   A trust receipt records who asked, what was compared, which rules passed and the PayPal IDs.

   budget updated · receipt on file

Pick an item and drag the quantity. This is the real mandate engine, running in your browser on a copy of the demo mandate.

The eleven rules

Every order runs through all of them in code, on whole cents, and again right before PayPal is called. Pick a rule to see what it checks.

Live on this server right now. Every tool has a fallback, so one being off never breaks the demo.

• PayPal sandboxlive
• PayPal webhookslive
• PayPal Payoutslive
• Gemini (Google AI Studio)live
• Policy and history search (pgvector)live
• Elastic hybrid searchfallback
• KERNEL cloud browserfallback
• Approval notices (Zapier MCP → Slack → Resend)off
• AG Studio dashboardlive
• Channel3live

For developers

Other agents can search, dry-run and request purchases, but never pay. The same mandates apply to every caller.

{
  "mcpServers": {
    "quartermaster": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote@0.14.3",
        "https://quartermaster-bg3a.onrender.com/api/mcp",
        "--header",
        "Authorization: Bearer qm_live_..."
      ]
    }
  }
}

import { QuartermasterClient } from "./sdk/src/index";
const qm = new QuartermasterClient({ baseUrl: "http://localhost:3000" });
await qm.signIn("treasurer"); // demo sign-in, no password
const { key } = await qm.createApiKey("my agent"); // shown once
const { result } = await qm.mcp<{ tools: { name: string }[] }>(key, "tools/list");