A real Visa or Mastercard,
issued per agent.
The corporate card was built for humans. The agent card is built for software: per-call caps, MCC allowlists, single-use tokens, geofencing, anomaly auto-freeze. PCI-vaulted, never in the model context.
Six controls that travel with the agent.
Caps
Per-call, per-day, per-week, per-month, per-counterparty. Composable, not hierarchical — the strictest one wins.
MCC allowlist
5734 (computer software), 7372 (data processing), 4816 (digital goods). Block 7995 (gambling), 6051 (crypto OTC) by default.
Geofence
Allow only specific countries or merchant regions. Travel concierge agents get a per-trip itinerary geofence.
Single-use tokens
Generate a unique PAN per transaction for sensitive vendors. The token expires after one charge.
Anomaly freeze
10x baseline burn rate auto-freezes the card and pages on-call. Replay history surfaces in your incident channel.
PCI vault
PAN/CVV never reach the model context. The agent gets a tokenized handle and an MCP `card.charge` tool.
Built for software. Audited like infra.
| Concern | Corporate card | AgentWallet |
|---|---|---|
| Identity | Shared across humans + agents | One card per agent, per principal |
| Caps | One global limit | Per-call · per-day · per-counterparty |
| Audit | PDF statement at month-end | Real-time trace, signed mandate per charge |
| Compromise | Reissue card, change everywhere | Freeze the agent — no other card affected |
| MCC restriction | Coarse blocklist | Allowlist + per-MCC cap |
| Anomaly | Detected after settlement | Detected mid-authorization |
Mastercard. Visa. Both networks.
We issue on Mastercard World by default and Visa Commercial on request. Cards are fungible — same caps, same MCP tools — pick the network your top vendors prefer.
Issue your first agent card.
Free in sandbox. $0 issuance fee, $0 monthly. Pay only on processed volume.