Ai Agent Card Payments

Core tools (agent token)

Intents + cards

• proxy.intents.create (agent token required)
• proxy.intents.list
• proxy.intents.get
• proxy.cards.get_sensitive

Policy + status

• proxy.policies.get
• proxy.policies.simulate
• proxy.kyc.status
• proxy.balance.get
• proxy.tools.list

Transactions + evidence

• proxy.transactions.list_for_card
• proxy.transactions.get
• proxy.receipts.attach
• proxy.evidence.list_for_intent

Merchant intelligence (advisory)

• proxy.merchants.resolve
• proxy.mcc.explain
• proxy.merchants.allowlist_suggest

Human-only tools

These are blocked for agent tokens and live in the dashboard or via OAuth:

• proxy.funding.get
• proxy.cards.list / get / freeze / unfreeze / rotate / close
• proxy.intents.approve / reject
• proxy.webhooks.list / test_event

Example: complete purchase

proxy.intents.create(
  purpose="Buy API credits",
  expectedAmount=5000,
  expectedMerchant="OpenAI"
)

proxy.cards.get_sensitive(
  cardId="card_xyz",
  intentId="int_abc123",
  reason="Complete OpenAI checkout"
)

If the intent is pending approval, call:

proxy.intents.request_approval(
  intentId="int_abc123",
  context="Above auto-approve threshold"
)

Best practices

• Use per-agent tokens for autonomous runs; rotate on compromise.
• Simulate before creating intents to reduce failed attempts.
• Constrain intents with expectedAmount and expectedMerchant.
• Treat MCC/merchant allowlists as advisory unless issuer enforcement is enabled.
• Never log PAN/CVV from proxy.cards.get_sensitive.

Converted and distributed by TomeVault | Claim this content