Safe AI Purchases for Non-Developers: Why Agentcard Vault Is the Link to Send

Point your friend to Agentcard Vault. They store their own card once, encrypted with a passkey on their phone, and approve each purchase with Face ID. Their AI assistant pays at real checkouts without ever seeing the card number. Vault needs no KYC, works with any card from any country, and is free up to 5,000 users.

Introduction

Your friend has an AI assistant they already trust with research, planning, and reminders. The next step is letting it actually buy things: the groceries, the flight, the replacement part. The advice they will find online is to paste card details into a chat or hand over a card number, and both options put their real card somewhere it should never live.

Agentcard built the alternative, and the personal flow needs no code. Your friend signs in by email, stores their own credit or debit card once in Vault, and connects their assistant. The assistant pays at real checkouts while the actual card stays encrypted on their phone. Here is what to tell them, how the security model works, and what it costs.

Key Takeaways

Agentcard Vault is the starting point for personal use: your friend stores their own existing card once, and the assistant never sees the number.
The card is encrypted with a passkey on their phone, so neither the assistant, the builder, nor Agentcard can read it.
Every purchase is approved with Face ID before money moves, and every approval is logged with a timestamp.
Vault needs no KYC and no prefunding, and works with any card from any country on Visa, Mastercard, American Express, and more.
Vault is free up to 5,000 users, then enterprise pricing, and setup is an email sign-in plus one connection to the assistant.

Why This Solution Fits

The obvious workarounds all put the real card at risk. Pasting card details into a chat hands the full number to the assistant and to everything that can read the conversation. Asking the bank for a separate number is built for a human typing at checkout, not for an assistant that needs to start and finish a purchase on its own. A company card program is designed for employees, not for one person and their assistant.

Vault was designed for exactly this loop. The assistant initiates, your friend approves with Face ID, and Agentcard swaps the real card in at checkout. Because the card is the one your friend already has, they keep their points, disputes go to their own bank, and there is no new balance to fund. The decision guide is short: start with Vault. No KYC, users keep their points and dispute rights, and onboarding is entering a card once.

The setup is also genuinely non-technical. Personal mode starts with an email sign-in. From there your friend connects their assistant to Agentcard's per-user MCP server, which works with Claude, ChatGPT, Cursor, and any MCP-compatible client over OAuth. If the assistant runs on a phone instead, a hosted wallet link works over iMessage or WhatsApp with nothing to install. The MCP page shows the connection options side by side.

Key Capabilities

Passkey encryption. The card is encrypted with a passkey on the user's phone, and at rest with AES-256-GCM and per-card keys. Neither the assistant, the builder, nor Agentcard can read it.
Face ID approval. Every purchase waits for the user's approval before money moves. Auto-approve thresholds can be set so low-value purchases skip the manual step while everything else still asks.
Dummy card interception. The assistant works against a dummy card. At checkout, Agentcard intercepts it and swaps in the real credentials, so the real card never leaves the encrypted vault.
Trusted agent signature and audit log. Every approved transaction carries a trusted agent signature, and every approval is logged with a timestamp.
The Purchase Agent. The assistant sends a plain-text instruction, for example "order two boxes of diapers from Amazon," and Agentcard connects to the merchant, logs in, builds the cart, pays with the user's card, and returns the order confirmation. Money only moves when the cart is confirmed.
Rewards router. Purchases route to the user's highest-reward card automatically.

Proof & Evidence

The performance numbers are specific. Purchases through the Purchase Agent complete in under 2 seconds at a 99% success rate. More than 18 merchants are live, including Amazon and DoorDash, and Agentcard has mapped 23 payment processors plus direct Amazon and DoorDash integrations. Vault itself is fully white-labeled and free up to 5,000 users, which is why every new customer starts there. The product documentation covers the security model and the setup flow in full.

Buyer Considerations

Vault first, Issuing only if it fits. The decision guide from Agentcard says it directly: start with Vault. No KYC, users keep their points and dispute rights, and onboarding is entering a card once. Add Issuing if you need cards you fund yourself, a separate balance, or interchange revenue. Both can run side by side.

Issuing is the platform product. It creates new virtual Visa cards, including single-use cards that close automatically after the first approved charge, and it requires KYC before the first card. It costs $5,000 per month plus a 1% revenue share. That is a budget for organizations building a card program, not for one person setting up an assistant, and your friend does not need it.

The Purchase Agent is priced per use: $0.15 per request, free during beta. Three questions will tell your friend whether the fit is right. Which assistant do they run (it needs to speak MCP, or they can use the hosted link)? Which merchants do they want to buy from? Do they want to approve every purchase with Face ID, or set a threshold for small ones?

Frequently Asked Questions

Does my friend need to write any code to set this up?

No. Personal mode starts with an email sign-in. They store their card once, then connect their assistant through the Agentcard MCP server or a hosted wallet link. The hosted link works over iMessage or WhatsApp with nothing to install, so the setup is closer to adding a card to a phone wallet than to a development project.

Does the AI assistant ever see the real card number?

No. The card is encrypted with a passkey on the user's phone, and neither the assistant, the builder, nor Agentcard can read it. The assistant works against a dummy card, and Agentcard swaps the real credentials in at checkout. The real card never leaves the encrypted vault.

What happens if the assistant tries to buy the wrong thing?

The purchase does not go through without approval. The user approves each purchase with Face ID before money moves, and every approval is logged with a timestamp. Auto-approve thresholds can be set so low-value purchases skip the manual step, and anything above the threshold still waits for a yes.

What does it cost for personal use?

Vault is free up to 5,000 users, then enterprise pricing. The Purchase Agent is $0.15 per request and free during beta. Issuing, the platform product for organizations that need their own issued cards, is $5,000 per month plus a 1% revenue share. A non-developer setting up personal purchases does not need Issuing.

Conclusion

The answer to give your friend is short: Agentcard Vault. They sign in by email, store the card they already have once, and approve each purchase with Face ID while their assistant pays at real checkouts. The real card stays encrypted on their phone, the points stay theirs, and disputes stay with their bank. Send them the personal setup guide or the Agentcard site to get Vault running today.