Spend Management

Turn spending decisions
into spending actions.

Your product can recommend a spending change, but with Deck it can execute it. HSA contributions, subscription updates, or payment method changes. They’re done, confirmed, and returned to your system.

Action Queue 3 queued
Fidelity
Contribute $500 to HSA Fidelity · Checking ****6210
Queued
Hulu
Cancel subscription Hulu · $17.99/mo
Queued
Spotify
Switch to Duo plan Spotify · $16.99 → $14.99
Queued
Agent Log

Run in place, perform in parallel.

Allow your customers to connect to external sources from your product and perform actions on their behalf to adjust contributions, perform plan changes, and make payment updates.

Fidelity
Optum Bank
Netflix
Spotify
Adobe
Hulu
Amazon
T-Mobile
Verizon
Any platform with a login.

Every platform your users pay on

HSA portals, streaming services, telecom providers. Most don’t have APIs. Deck operates through the browser, the same way a user would. Your coverage is limited only by what has a login page.

User links account Via your app · Auth Component or API
Credentials stored Encrypted in Deck Vault · AES-256
MFA handled automatically OTP · SMS · Passkey · CAPTCHA
Session established Authenticated, ready to execute

Authentication built in

Your user links their platform account through your app once. Deck stores the credentials, handles MFA, and establishes an authenticated session ready for any spending operation.

POST /tasks/v1/spend-action/run
200 OK
{
  "action": "contribute",
  "platform": "Fidelity HSA",
  "amount": 500.00,
  "confirmation_id": "FID-38291",
  "status": "completed"
}

Confirmed results, every time

Every operation returns a structured confirmation response. Action type, platform, amount, confirmation ID. Validated and delivered. No guessing whether it worked.

Store. Execute. Confirm.

Store your user’s platform credentials, trigger a spending operation, and get a confirmed result back.

POST /v2/credentials
{
  "source_id": "src_fidelity_hsa",
  "credentials": {
    "username": "...",
    "password": "..."
  }
}

Store platform credentials

Connect an HSA portal, streaming service, or payment account once. Deck encrypts the credentials in Vault and reuses them on every operation. Delete anytime.

POST /tasks/v1/spend-action/run
{
  "credential_id": "cred_hsa",
  "action": "contribute",
  "params": {
    "amount": 500.00,
    "source_account": "checking"
  }
}

Execute the operation

Trigger a spend action via API whenever you need it. Deck logs in, navigates to the right page, and completes the operation you defined.

task_run.completed
{
  "platform": "Fidelity HSA",
  "action": "contribute",
  "amount": 500.00,
  "confirmation_id": "FID-38291",
  "status": "completed",
  "runtime_ms": 8420
}

Get the confirmed result

Deck completes the action and returns a structured confirmation. Platform, action, amount, confirmation ID. Same schema, every platform, every time.

Who’s this for?

HSA & benefits platforms

Users set a contribution. Deck completes it. Higher contribution rates, fewer abandoned workflows, and benefits that actually get used.

Personal finance apps

Stop showing users what they could save. Actually cancel the subscription, update the payment method, or switch the plan. Your app becomes where things get done.

Card issuers & neobanks

New card issued? Update it everywhere the old one was on file. Fewer failed payments, less friction, and users who stay because switching is effortless.

Employee benefits platforms

Open enrollment shouldn’t mean weeks of manual portal work. Automate enrollment, contribution changes, and account setup across every provider.

FAQ

Deck handles standard confirmation flows automatically. When a platform asks “Are you sure?” or shows a review screen, the agent confirms and proceeds. For actions that require out-of-band confirmation (like email verification), Deck pauses and resumes when the user completes it via the interaction flow.

HSA and FSA contributions and withdrawals, subscription plan changes, payment method updates, service cancellations, plan tier upgrades and downgrades, recurring payment adjustments, and account enrollment. If a human can do it through a browser, Deck can automate it.

Failures are returned with a structured reason code and description. If an HSA contribution is rejected because of an annual limit, or a payment update fails due to card validation, you get the exact error the platform returned. Not a generic timeout.

Yes. That’s the point. Deck agents navigate platforms through the browser, the same way a human would. If a user can log in and perform the action, so can Deck.

Schedule operations via the API on any cadence. Monthly HSA contributions, quarterly payment method refreshes, or one-off subscription changes. Trigger on-demand, set up recurring tasks, or both. You control the schedule through the Deck API and event system.

Credentials are encrypted in Deck Vault using AES-256. Sessions run in isolated environments and are destroyed after each operation. Deck never stores financial account numbers or payment details beyond what’s needed for the active session. SOC 2 Type II compliant.