{"slug": "evervault-browser-tokens-agentic-payments-on-any-website", "title": "Evervault Browser Tokens: Agentic payments on any website", "summary": "Evervault launched Browser Tokens, a product that lets AI agents complete payment forms on any website without ever seeing real card numbers, CVVs or passwords. The agent receives tokens that pass form validation with the card's first six digits intact, routes browser traffic through an Evervault proxy via one proxy flag, and Evervault swaps in the real values only at hosts the user has allowed, keeping the agent, browser and logs out of PCI scope while Evervault handles real card data in its PCI Level 1 environment. Evervault positions Browser Tokens against Visa Intelligent Commerce and Mastercard Agent Pay, which it says work only where the user's bank and merchant both support them, and against virtual card issuance and browser secret vaults; the product works with any Chromium browser and requires adding Evervault's CA certificate to the browser's trust store.", "body_md": "# Let your AI agents pay anywhere,\n\n# without ever seeing card data.\n\nCard numbers, CVVs, passwords: your agent only ever uses tokens. We swap in the real values once the request leaves the browser.\n\noe44kqinic85uzpg00sbcd7vmzyy3tvpbgrr4lvyijndc9c38rfnoi4r169b5yy0cyhxqysg076aqqbjlm5ttmd2k5b9nufvhn2qrpz93d4yv2tjbaepa6visu1uanuxzfq4bw9dp07si4fybq9xzkb0izxpm90t2te3ro2oaogmu1vfkgu6z14kw3tz4egcnckd9s\n\n## Three steps,\n\nstart to finish. \n\n### Create a Browser Token\n\nOne call, and not just for cards. Card number, CVV, and password. All come back looking real enough to pass the form, with the card's first six digits intact.\n\n### Route your browser's traffic through us\n\nOne proxy flag. Your agent runs exactly as it does now, and only ever sees the tokens.\n\n### We swap in the real values\n\nAs the request leaves the browser, the real value goes in, at the host you allowed and nowhere else.\n\noe44kqinic85uzpg00sbcd7vmzyy3tvpbgrr4lvyijndc9c38rfnoi4r169b5yy0cyhxqysg076aqqbjlm5ttmd2k5b9nufvhn2qrpz93d4yv2tjbaepa6visu1uanuxzfq4bw9dp07si4fybq9xzkb0izxpm90t2te3ro2oaogmu1vfkgu6z14kw3tz4egcnckd9s\n\n## Pick a task, see it run.\n\noe44kqinic85uzpg00sbcd7vmzyy3tvpbgrr4lvyijndc9c38rfnoi4r169b5yy0cyhxqysg076aqqbjlm5ttmd2k5b9nufvhn2qrpz93d4yv2tjbaepa6visu1uanuxzfq4bw9dp07si4fybq9xzkb0izxpm90t2te3ro2oaogmu1vfkgu6z14kw3tz4egcnckd9s\n\n## If it's Chromium, it works.\n\nWe sit on the network, not in your browser. Nothing to fork, nothing to wrap.\n\noe44kqinic85uzpg00sbcd7vmzyy3tvpbgrr4lvyijndc9c38rfnoi4r169b5yy0cyhxqysg076aqqbjlm5ttmd2k5b9nufvhn2qrpz93d4yv2tjbaepa6visu1uanuxzfq4bw9dp07si4fybq9xzkb0izxpm90t2te3ro2oaogmu1vfkgu6z14kw3tz4egcnckd9s\n\n## One API call,\n\none proxy setting.\n\nNo SDK to adopt, no checkout to rebuild, nothing for the merchant to install. Your agent code stays as it is.\n\nAdd our CA certificate to the browser’s trust store, or intercepted requests will fail TLS. It’s one line in the quickstart.\n\n## Built for the web\n\nthat already exists.\n\nHow today's agentic payment options compare, and why we built Browser Tokens.\n\n##### Agentic tokens and protocols\n\nVisa Intelligent Commerce and Mastercard Agent Pay work only when the user’s bank and the merchant both support them, and most don’t today. Each card network is a separate integration.\n\n##### Browser Tokens\n\nOne integration, for any card that can already pay online. Merchants don’t have to adopt a protocol or rebuild their checkout.\n\n##### **Raw card data in the agent or browser**\n\nHand the agent the card, and it can end up in prompts, logs, or on a webpage built to trick the agent. It also puts your agent, your model, and your browser provider in PCI scope.\n\n##### Browser Tokens\n\nThe agent, the browser, and your logs only ever see tokens, so they stay out of PCI scope. Evervault handles the real card in its own PCI Level 1 environment.\n\n##### **Virtual card issuance**\n\nThe user loses the rewards on their own card, coverage stops at the regions the provider supports, and the extra steps slow down a flow the agent is meant to finish on its own.\n\n##### Browser Tokens\n\nThe agent pays with the user’s own card. Already issuing virtual cards? Tokenize those too, and the agent never sees the card number.\n\n##### **Browser secret vault**\n\nA browser vault keeps the card out of the agent’s prompt, but it puts the browser provider in the sensitive data path, and the agent can still leak values through the Chrome DevTools Protocol.\n\n##### Browser Tokens\n\nThe browser only ever holds tokens. The real value appears in our proxy, and only for hosts you’ve allowed.\n\noe44kqinic85uzpg00sbcd7vmzyy3tvpbgrr4lvyijndc9c38rfnoi4r169b5yy0cyhxqysg076aqqbjlm5ttmd2k5b9nufvhn2qrpz93d4yv2tjbaepa6visu1uanuxzfq4bw9dp07si4fybq9xzkb0izxpm90t2te3ro2oaogmu1vfkgu6z14kw3tz4egcnckd9s\n\n## Your agent submits forms \n\nas normal.\n\n###### Residential IPs\n\nTraffic comes from ordinary home connections, not obvious data center addresses.\n\n###### Browser spoofing\n\nThe browser looks like a regular visitor's, not an automated one.\n\n###### Anti-bot prevention\n\nBuilt to avoid the usual bot checks, so your agent isn't turned away.\n\noe44kqinic85uzpg00sbcd7vmzyy3tvpbgrr4lvyijndc9c38rfnoi4r169b5yy0cyhxqysg076aqqbjlm5ttmd2k5b9nufvhn2qrpz93d4yv2tjbaepa6visu1uanuxzfq4bw9dp07si4fybq9xzkb0izxpm90t2te3ro2oaogmu1vfkgu6z14kw3tz4egcnckd9s\n\n## We can't leak\n\nwhat we don't keep.\n\nNothing is stored. No mapping from the token back to the real value exists on our side, so there is no vault to breach.\n\n###### What you set\n\nhostname allowlist\n\nLIVE\n\nTTL\n\nLIVE\n\ndata categories\n\nLIVE\n\negress type and region\n\nLIVE\n\nhuman approval thresholds\n\nNEXT\n\nkill switch\n\nNEXT\n\nmerchant category blocks\n\nNEXT\n\nspend caps\n\nNEXT\n\noe44kqinic85uzpg00sbcd7vmzyy3tvpbgrr4lvyijndc9c38rfnoi4r169b5yy0cyhxqysg076aqqbjlm5ttmd2k5b9nufvhn2qrpz93d4yv2tjbaepa6visu1uanuxzfq4bw9dp07si4fybq9xzkb0izxpm90t2te3ro2oaogmu1vfkgu6z14kw3tz4egcnckd9s\n\n## Live today. More on the way.\n\n### Live\n\nPCI DSS Level 1 service provider\n\nSOC 2 Type II. Your agent never touches card data, so scope is reduced\n\nTokens for card number, CVV, email, phone and password\n\nBIN and Luhn preserved, so merchant forms validate\n\nPermissions fixed when the token is created\n\nThey can't be widened later, not by your code and not by the agent\n\noe44kqinic85uzpg00sbcd7vmzyy3tvpbgrr4lvyijndc9c38rfnoi4r169b5yy0cyhxqysg076aqqbjlm5ttmd2k5b9nufvhn2qrpz93d4yv2tjbaepa6visu1uanuxzfq4bw9dp07si4fybq9xzkb0izxpm90t2te3ro2oaogmu1vfkgu6z14kw3tz4egcnckd9s\n\n###### Trusted by\n\n## Agentic commerce builders\n\noe44kqinic85uzpg00sbcd7vmzyy3tvpbgrr4lvyijndc9c38rfnoi4r169b5yy0cyhxqysg076aqqbjlm5ttmd2k5b9nufvhn2qrpz93d4yv2tjbaepa6visu1uanuxzfq4bw9dp07si4fybq9xzkb0izxpm90t2te3ro2oaogmu1vfkgu6z14kw3tz4egcnckd9s\n\n## Agents complete checkout with tokenized data, and the real card is only swapped in when it reaches the merchant. That’s what lets agentic commerce scale on today’s web, without waiting for every merchant to adopt new protocols.\n\n###### Walt Leung, Co-founder and CPO at natural\n\n## Plans & Pricing\n\n### Browser Tokens\n\nSandbox apps are free subject to fair use. On the Pro plan, production apps pay $0.25 per card session and $0.05 per credential session. Requires an Evervault account.\n\n## $0.25/card\n\n#### $0.05/credential session\n\n#### Each session includes 25MB free\n\n#### Bring your own proxy\n\n#### Residential proxies extra\n\n# Your agent gets a token. \n\nThe destination gets the real value.\n\n## Frequently Asked Questions\n\n© 2026 Evervault Inc. All rights reserved.", "url": "https://wpnews.pro/news/evervault-browser-tokens-agentic-payments-on-any-website", "canonical_source": "https://evervault.com/products/browser-tokens", "published_at": "2026-10-23 17:17:49+00:00", "updated_at": "2026-10-23 17:43:12.522374+00:00", "lang": "en", "topics": ["ai-agents", "ai-products", "ai-tools", "ai-safety"], "entities": ["Evervault", "Browser Tokens", "Visa Intelligent Commerce", "Mastercard Agent Pay", "Chromium"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/evervault-browser-tokens-agentic-payments-on-any-website", "markdown": "https://wpnews.pro/news/evervault-browser-tokens-agentic-payments-on-any-website.md", "text": "https://wpnews.pro/news/evervault-browser-tokens-agentic-payments-on-any-website.txt", "jsonld": "https://wpnews.pro/news/evervault-browser-tokens-agentic-payments-on-any-website.jsonld"}}