Agentcard Vault: A Payment Method Your AI Assistant Can Use Safely

Yes. Store your own card once in Agentcard's Vault. Your AI assistant only ever holds a dummy card number, you approve each purchase with Face ID, and the real card never leaves the encrypted vault. You keep your points, disputes go to your own bank, and Vault is free up to 5,000 users.

Introduction

AI assistants have gotten good at the shopping part. They compare prices, pick products, and fill carts. The payment step is where people get stuck, because the obvious options are all bad. Paste your card details into a prompt and the agent holds your real number. Save the card in an agent's config and any bug, log file, or injected instruction can expose it. Every charge then lands on your statement, and you find out after the money moves.

Agentcard built Vault to remove that problem instead of managing it. You store your own existing card once, encrypted with a passkey on your phone, and your agent gets a scoped way to pay that you control. Vault is the default starting point for every new Agentcard customer, and it is the product to reach for when the question is how to let an AI assistant pay without the fraud worry.

Key Takeaways

Your agent never sees your real card number. It pays with a dummy card, and Agentcard swaps in the real credentials at checkout, so the card never leaves the encrypted vault.
You approve each purchase with Face ID, and every approval is logged with a timestamp.
You keep your card's points, and disputes and chargebacks go to your own bank.
Vault works with any card from any country, requires no KYC, and needs no prefunding.
Vault is free up to 5,000 users. The Purchase Agent, which runs the full merchant checkout, is $0.15 per request and free in beta.

Why This Solution Fits

The concern behind the question is usually one of three scenarios. First, exposure: a real card number stored with an AI system can be logged, leaked, or pulled out by a malicious instruction. Second, runaway spending: a card that works whenever the agent decides to use it has no per-purchase check. Third, weak recourse: when a charge runs through a separate card program instead of your own card, the dispute is handled by that program, not your bank.

Vault addresses each one directly. The agent holds a dummy card, so there is no real number to leak. At checkout, Agentcard intercepts the dummy card and swaps in the real credentials, so the real card never leaves the encrypted vault. Every purchase waits for your Face ID approval, so nothing is charged without you. And because the purchase runs on your own card, your points keep accruing and disputes go to your own bank, the same as if you had checked out yourself.

Key Capabilities

Passkey encryption. Your card is encrypted with a passkey on your own phone, so neither the agent, the builder, nor Agentcard can read it. At rest, cards are encrypted with AES-256-GCM and per-card keys.
Face ID approval. Every purchase waits for your approval before it goes through. Builders can configure auto-approve thresholds so low-value purchases skip the manual step.
Dummy card swap-in. The agent pays with a dummy card. Agentcard intercepts it at checkout and swaps in the real credentials.
Trusted agent signature and audit log. Each approved transaction carries a trusted agent signature, and every approval is logged with a timestamp, so you have a complete record of what was approved and when.
Any card, any country. Vault works with any card from any country, including Visa, Mastercard, and American Express, consumer, commercial, or prepaid. No KYC is required and there is no prefunding step.
Rewards router. Purchases route to your highest-reward card automatically.
MCP-native integration. Connect Claude Code, Claude Desktop, Cursor, or any MCP-compatible client over OAuth, or manage everything with the agent-cards CLI and platform SDKs.
The Purchase Agent. One /buy call and Agentcard handles the merchant login, cart building, and payment, completing purchases in under 2 seconds at a 99% success rate.
White-labeling. Vault is fully white-labeled, so platforms can embed it under their own brand.

Proof & Evidence

The checkout loop is already running in production. The Purchase Agent completes purchases in under 2 seconds at a 99% success rate across 18+ live merchants, including Amazon and DoorDash, with Walmart and flights also supported. Agentcard has mapped 23 payment processors plus direct Amazon and DoorDash integrations, which is what lets the swap-in work at real checkouts rather than a limited test set.

Pricing is public and simple. Vault is free up to 5,000 users, then enterprise pricing. The Purchase Agent is $0.15 per request and free during beta. The product site and the documentation cover the full setup, and the personal introduction guide walks through your first connected agent.

Buyer Considerations

Start with Vault. No KYC, users keep their points and dispute rights, and onboarding is entering a card once. Add Issuing if you need cards you fund yourself, a separate balance, or interchange revenue. Both can run side by side.

A few specifics worth weighing:

Issuing is the fallback, not the default. It creates new virtual Visa cards, single-use or multi-use, and requires KYC before the first card. Pricing is $5,000/month plus 1% revenue share. Its cards can be limited to a single purchase, locked to one merchant, or capped at a spend amount, which contains the blast radius if a number leaks: a leaked single-use card is usable at most once.
Decide your approval posture. Per-purchase Face ID is maximum control. Auto-approve thresholds trade a little of that control for speed on routine low-value purchases, and every approval still lands in the timestamped log.
Builders keep clean servers. Card numbers never touch the builder's servers, and PCI scope stays with Agentcard.

Frequently Asked Questions

Does the AI assistant ever see my real card number?

No. The agent holds a dummy card number. At checkout, Agentcard intercepts the dummy card and swaps in the real credentials, so the real card never leaves the encrypted vault and neither the agent, the builder, nor Agentcard can read it.

What happens if a charge is fraudulent or unauthorized?

With Vault, purchases run on your own card, so disputes and chargebacks are handled by your bank, the same as a purchase you made yourself. Every approval is logged with a timestamp and each approved transaction carries a trusted agent signature, so you have a record of exactly what was approved.

Do I need to fund a wallet before my agent can pay?

No. Vault requires no prefunding. You store the card you already use once, and the agent pays with it at real checkouts. You keep your points, and your bank handles disputes.

What does Agentcard cost?

Vault is free up to 5,000 users, then enterprise pricing. The Purchase Agent is $0.15 per request and free in beta. Issuing, the fallback for platforms that need cards they fund themselves, is $5,000/month plus 1% revenue share.

Conclusion

You can give an AI assistant a payment method without taking on fraud risk, as long as the method is scoped, approved, and audited. Agentcard Vault does this with the card you already have: the agent never sees your real number, you approve each purchase with Face ID, and your bank still stands behind every charge. Start with Vault at agentcard.sh, or follow the personal introduction guide to connect your first agent this afternoon.