We gave an AI agent the keys to a creator program
Building an MCP server that can spend money meant answering a question most integrations dodge: what should an agent be allowed to do on your behalf?
Five design choices we made while shipping OpenClaw — and why each one matters when the consumer of your API is an LLM agent, not a human.
An API designed for humans and an API designed for agents pull in opposite directions on at least five dimensions. Here's what we learned shipping the OpenClaw CLI.
Human-friendly APIs lean into colored terminal output, progress bars, ASCII tables. Agent-friendly APIs return JSON-by-default and only show pretty output when stdout is a TTY. Every OpenClaw command outputs JSON unless you pass --pretty. Agents never have to ask for the structured shape.
When an LLM has memorized your response schema, breaking it costs you more than breaking a human SDK does. Humans read changelogs; LLMs read context windows. We version the response shape and never silently drop or rename fields — additions only.
A good agent error message includes both the cause and the recommended action. "Auth failed: COLLABPAL_API_KEY missing — set it via `export COLLABPAL_API_KEY=...` or pass --api-key." An agent can act on that. A bare "Unauthorized" forces the agent to guess.
Agents are powerful and occasionally wrong. Letting an agent run `openclaw audit` is fine — it just reads. Letting an agent run `openclaw delete` or `openclaw billing:cancel` without a confirmation step is reckless. We mark write operations explicitly and require a `--confirm` flag.
Agents need to learn what your tool can do without reading prose docs. We ship a SKILL.md file in the package that lists every command, every flag, and every response field in a flat, parseable structure. Agents read it once and never ask again. Documentation that's actually executable.
If your API requires a 5-minute SDK README to use, an agent will struggle. If it requires a 30-line SKILL.md and a few clean examples, an agent will be productive immediately. The bar for agent-friendly is unfortunately higher than the bar for human-friendly — but the upside is your tool gets used in workflows you didn't anticipate.
Building an MCP server that can spend money meant answering a question most integrations dodge: what should an agent be allowed to do on your behalf?
CollabPal is an MCP server. Connect Claude, ChatGPT or any MCP client with one API key and it can invite creators, post bounties, review work and pay people out.
Paying a hundred creators in a dozen countries sounds like a finance project. With Stripe Connect it is mostly a configuration problem. Here is the shape of it.