agentwallets.si
← Back to Blog

EDITORIAL ARTICLE

Airwallex AgentOS: Giving Enterprise Agents Controlled Access to Existing Accounts

Article concepts · illustration
01Business account02Agent actions03Approval and permissions

Product analysis · Sources reviewed October 28, 2026. Based on public information; no account was connected and no payment was made.

A cross-border e-commerce team needs to create a beneficiary for a new supplier, issue a limited card for procurement and produce a cash-flow report. Traditionally, staff switch between financial and internal systems. Airwallex AgentOS aims to let an agent operate an existing Airwallex business account within its authorized scope.

This differs from a separate on-chain wallet for each agent: AgentOS makes existing business accounts, cards and developer tools callable by agents. AgentOS documentation

Why is Airwallex positioned to build this?

Airwallex offers business collections, multi-currency accounts, cross-border transfers, FX and business cards. AgentOS adds connectors and workflows on top for existing or prospective Airwallex customers, rather than supplying a universal standalone payment network. Airwallex products

Its proximity to existing funds and business workflows is both an advantage and a constraint: available operations, countries and currencies depend on the account, permissions and local product support.

An illustrative workflow

A procurement team prepares an overseas supplier payment but wants finance to review before execution:

flowchart LR A[User requests supplier purchase] --> B[Agent reads contract and account information] B --> C[Prepare beneficiary details or proposed action] C --> D[Create or submit configuration under account permissions] D --> E[Finance checks and approves] E --> F[Authorized person arranges payment through product flow]

This is illustrative and was not tested by this site. Documentation divides AgentOS into a CLI, MCP connector, skills and plugins. The CLI supports sandbox and production; AgentOS MCP connects to a production account using OAuth. Other connectors are distinguished for development testing or documentation lookup. Documentation

Layer Capability What to verify
CLI / MCP Agent calls account resources Available read and write operations and environments
Skills Organize beneficiary, card and reporting tasks Version, status and limitations of each skill
Business account Actual funds, cards and business records Region, currency, permissions and account conditions
Human approval Review before important actions Approval point, evidence and effective time

What agent support does—and does not—establish

Described scenarios include balance queries, beneficiary creation, card issuance and cash-flow reporting. Creating a beneficiary or card writes to a real account; it is not merely a read. Calling one interface does not imply unlimited access to the account.

The AgentOS documentation explicitly says AgentOS does not initiate money-out operations on a user’s behalf by default. CLI writes generally require confirmation, although certain parameters may change confirmation behavior. Do not claim that AgentOS automatically executes transfers, FX or payments by default. Permissions also depend on account, connector, environment and configuration.

Put financial actions into existing governance

Question Potential value of AgentOS Still to verify
Where do funds come from? Existing business account Supported currencies, regions and actions
How does the user control actions? Account permissions and processes Whether the agent can create beneficiaries or change card limits, and who approves
How is activity audited? Actions connect to existing resources Links between task, approver, invoice and payment
How are exceptions handled? Finance review can remain in place Exception, revocation and duplicate-execution procedures

Enterprise procurement includes supplier authenticity, changed payment details, budgets, terms, FX, receipts and reconciliation across departments. Evaluate AgentOS in these workflows, not by the number of MCP calls.

Business model: accounts and tools

We did not find a confirmed standalone AgentOS package price. Existing account, payment, card and FX products have their own fees by product, region and contract; none can simply be presented as the AgentOS price. Pricing

Inference: Easier use of existing accounts and cards could help Airwallex retain businesses and increase related product usage; it is not disclosed AgentOS revenue. Customers should compare staff time saved with configuration, error-handling and audit costs.

How does it compare?

Approach Entry point Potential advantage Key boundary
Airwallex AgentOS Existing business account and tools Multi-currency business finance workflows No money-out by default; account and regional limits apply
Coinbase / Circle agent wallet On-chain wallet and stablecoin API payments and on-chain actions Does not automatically inherit all enterprise procurement and accounting processes
Visa/BILL/Billtrust pilot Approved invoices and card payments Payment across supplier portals A partner pilot, not a universally available wallet

These routes may complement one another, but interoperability must be verified for the actual products. Visa/BILL/Billtrust pilot

Five questions for Airwallex

  1. Which actions can production MCP and CLI call under this company’s account?
  2. Who approves beneficiary creation, card configuration and money-out?
  3. Can agent task, invoice, beneficiary and subsequent payment share a traceable identifier?
  4. Can the system connect to existing ERP, accounting and approvals?
  5. What are all applicable currencies, regions, limits and fees?

Separate read, write and payment permissions

For an overseas designer, reading a contract and past payments is information access; creating a beneficiary modifies a financial account; a transfer moves money. They carry different risks and should not share one undifferentiated permission.

Action Potential value Approval question
Read balance and prepare cash-flow report Less manual consolidation Which departments and sensitive data can be read?
Extract payment information from a contract Less repeated entry Has the bank account been independently verified?
Create beneficiary or configure card Prepare a resource for payment Who confirms beneficiary identity, card ownership and limit?
Pay, exchange or transfer Move funds AgentOS does not initiate money-out by default; who initiates and approves?

A substituted recipient account is a critical exception: accurate extraction of a new bank number from a contract does not prove it belongs to the real supplier. Use the enterprise’s supplier-verification process; extraction accuracy is not payment security.

How should buyers assess value?

A pilot could give an agent 20 previously processed supplier records to prepare beneficiary drafts for finance review. Measure average preparation time, errors and follow-up questions, proportion requiring confirmation, and total time from draft to payment. Compare against the existing workflow, not only generation speed.

Include integration and maintenance: account permissions, logs, exception handling, training, and actual card and FX charges. Low transaction volume may not justify setup; frequent cross-border activity may make integration with existing accounts more practical.

At the review date, the main documentation marked some skills beta. Verify production connectors, sandbox development tools and money-out separately.

Assessment: AgentOS is best evaluated as controlled agent access to enterprise finance workflows. The relevant outcome is completing those workflows while retaining accountability and auditability.