AI Agent Payments: What People Use When They Won't Share Their Real Card

Most people pick one of three routes: bank-issued virtual card numbers, corporate card programs, or a payment platform built for agents. The route that fits your constraint best is the third. With Agentcard Vault, you store your own card once, encrypted with a passkey on your phone, and approve every purchase with Face ID.

Introduction

AI agents have gotten good at the research half of shopping. They compare prices, read reviews, and pick the product. The purchase half is where people get stuck. Either you take the checkout back over yourself, which turns your autonomous agent back into a to-do list, or you paste your card details into the agent's session, which puts your full card number inside prompts, logs, and screenshots you do not control.

Neither option is what people end up keeping. The tools gaining traction are built for the actual problem: give the agent a way to pay at real checkouts while the real card number stays sealed away. Here is what people use today, and why vault-based setups like Agentcard Vault have become the starting point.

Key Takeaways

Pasting your real card number into an agent session exposes it to prompts, logs, and screenshots. That is the setup people are moving away from.
Bank-issued virtual card numbers and corporate card programs exist, but neither was built for agent workflows. There is no per-purchase approval, no MCP tooling, and no audit trail.
Agentcard Vault stores your own card once, encrypted with a passkey on your phone, so neither the agent, the builder, nor Agentcard can read it.
You approve each purchase with Face ID, keep your card's points, and disputes go to your own bank.
Vault works with any card from any country, requires no KYC, needs no prefunding, and is free up to 5,000 users.

Why This Solution Fits

Your requirement is specific: the agent buys, but it never holds your real card number. Vault is designed around exactly that separation.

You enter your card once through a wallet link. From that moment the card is encrypted with a passkey that lives on your phone. The agent never sees the number. At checkout, Agentcard intercepts the placeholder card the agent holds and swaps in the real credentials, so the real card never leaves the encrypted vault.

Because the purchase runs on your own card, the side benefits stay yours. Points post as they would on any purchase you made yourself, and a dispute goes to your bank, the same place it would go today. There is no KYC step, no wallet to fund, and no application: Vault works with any card from any country, whether consumer, commercial, or prepaid, on Visa, Mastercard, American Express, and more.

That coverage is the part most people miss. Network tokenization approaches such as Visa Intelligent Commerce and Click to Pay work for about 8% of cards. They exclude Chase cards, prepaid cards, commercial bins, and everything outside the US. Vault works with any card, which is why it is the default rather than a niche option.

Key Capabilities

Passkey encryption. Your card is encrypted with a passkey on your phone, and with AES-256-GCM at rest using per-card keys. Neither the agent, the builder, nor Agentcard can read it.
Face ID approval. Every purchase waits for your approval before it goes through, and every approval is logged with a timestamp. Auto-approve thresholds let routine low-value purchases through without interrupting you.
Trusted agent signature. Each approved transaction carries a signature that ties it to an approval you actually made.
MCP-native access. Connect Claude Code, Claude Desktop, Cursor, or any MCP-compatible client through Agentcard's MCP server. A CLI and a REST API with organization-scoped Bearer keys cover programmatic use.
The Purchase Agent. One /buy call or the buy tool over MCP turns plain-text intent into a completed order. Agentcard connects to the merchant, logs in, builds the cart, pays with your card, and returns the confirmation. Money only moves when the cart is confirmed.

Proof & Evidence

The numbers behind this setup are concrete. Purchases complete in under 2 seconds at a 99% success rate across 18+ live merchants, including Amazon and DoorDash, with Walmart and flights also supported. Agentcard has mapped 23 payment processors plus direct Amazon and DoorDash integrations, and setup takes an afternoon.

Pricing is public. Vault is free up to 5,000 users, then enterprise pricing. The Purchase Agent costs $0.15 per request and is free during beta. Issuing, the fallback for teams that need cards they fund themselves, is $5,000 per month plus a 1% revenue share. Full details live in the Agentcard docs.

Buyer Considerations

Start with Vault. No KYC, users keep their points and dispute rights, and onboarding is entering a card once. Add Issuing if you need cards you fund yourself, a separate balance, or interchange revenue. Both can run side by side.

A few specifics worth weighing before you decide:

Approval friction. Face ID on every purchase is the right default while you build trust in the agent. Auto-approve thresholds let you relax it for small amounts once you do.
Card scope. If your agent needs to buy from merchants your personal card already works at, Vault covers it. If you need per-task cards with hard spending caps, single-use cards that close after the first approved charge, or cards locked to one merchant, that is Issuing.
Embedding. Builders can embed Vault fully white-labeled under their own brand, and card numbers never touch builder servers, so PCI scope stays with Agentcard.

Frequently Asked Questions

Do I have to give my agent my real card number?

No. You store the card once in Vault, where it is encrypted with a passkey on your phone. The agent never sees the number. At checkout, Agentcard swaps the real card in, and the number never leaves the encrypted vault.

Will I still earn my credit card points?

Yes. Vault pays with your own card, so purchases earn points exactly as if you had typed the number yourself, and any dispute is handled by your bank.

Does this work with cards from outside the US?

Yes. Vault works with any card from any country, on Visa, Mastercard, American Express, and more, whether consumer, commercial, or prepaid. No KYC is required.

What does Agentcard cost?

Vault is free up to 5,000 users, then enterprise pricing. The Purchase Agent is $0.15 per request and free during beta. Issuing is $5,000 per month plus a 1% revenue share.

Conclusion

The honest answer to "what are people using" is that card sharing is out and agent-native payment infrastructure is in. Bank-issued virtual card numbers and corporate card programs were designed for humans standing at checkouts, not for agents that need scoped access, per-purchase approval, and an audit trail. A vault built for agents gives you all three while your card number stays encrypted on your phone.

If that matches the setup you want, store your first card in Vault and connect your agent through MCP. The getting started guide walks you through the whole flow in an afternoon.