Delegate a card
to your AI agent
Virtual cards for autonomous agents with Nevermined Pay. Set the rules once, and your agent transacts autonomously, with real cards, on real rails.
Humans in the loop
Your agent's workflow breaks every time it needs to pay for something.
Agents that transact
Users delegate once. Your agent handles payments autonomously.
The journey
From enrollment to autonomous purchase. A single, unbroken flow.
Users add their card once
A PCI-compliant capture form (VGS) tokenizes the card instantly. Nevermined never sees the number, only a secure network token is stored. Verified via 3DS or FIDO2 passkey.
ISO 27001 · SOC 2 Type II · PCI SAQ-D certified infrastructure.
They define the guardrails
Spending caps, time windows, and merchant categories. Think of it as a power-of-attorney for payments, scoped and revocable.
"Up to $200/week on research APIs, revoke any time."
Hand the key to the agent
The agent receives a scoped API key: payment capability, not card credentials. One key can work across sessions, tools, and frameworks.
OpenAI, Anthropic, LangChain, CrewAI, MCP, and any agent.
The agent pays autonomously
When the agent hits a paywall, it includes a payment header in the HTTP request. The purchase completes in milliseconds. No checkout. No redirect.
As natural as a browser loading a page.
Full trail. Full control.
Every transaction is logged with agent ID, amount, merchant, and timestamp. Exportable for SOC 2, ISO 27001, and regulatory audits. Users revoke delegation with one click.
Compliant, auditable, instantly revocable.
Network tokens for platforms. Agentic tokens for agents.
Network Tokens
For platformsA card-network surrogate for the card number, portable across processors. The agent charges through the platform you already run, the token survives reissuance, and it settles like any card-on-file payment.
Cards and merchant accounts, settled via Stripe Connect. The fastest path to live agent payments.
Third-party card-on-file network tokens for Visa and Mastercard, portable across processors.
Agentic Tokens
For agentsA newer network capability built for autonomous agents: issued per agent, bound to the user's mandate, and settled with a one-time cryptogram. The agent transacts across merchants on the user's behalf, and the network checks every charge against the mandate.
An agent-specific, passkey-authenticated credential spendable at Visa merchants. US-issued consumer Visa cards to start (no corporate or Chase-issued cards).
Mastercard's Agentic Tokens: per-agent credentials with scoped spend controls, in phased rollout with the networks.
Why it matters: Network tokens are the fastest path to live agent payments - add a card and delegate to your platform. Agentic tokens move the trust model from "is this the right card" to "is this the right agent, acting on a real mandate," and let that agent spend across merchants, not just one. Nevermined supports both.
Two ways to get started
Whether you're an individual or a platform builder, there's a path.
Enroll & Delegate
Users enroll their card once, set spending rules, and hand a scoped key to any agent. The agent gets purchasing power, never the card number.
Embedded Capture
Ship AI products that can buy things. Embed Nevermined's organization widgets: a PCI-compliant iframe for card enrollment, delegation, and checkout, right inside your app. Card data never touches your servers.
Four calls, and the cap does the rest.
The budget you set is not a policy document, it is two fields on a delegation. Every charge is checked against them before anything moves.
Pick the card
The card was enrolled in the vault. Your agent never sees the number, only the id.
Set the mandate
$200 a week, 40 charges. That is the whole mandate. Returns a delegationId.
Scope the key
The agent gets a credential bound to that delegation and nothing else.
It spends
Checked at the moment of charge, on every call. Revoke the delegation and it stops immediately.
Paying a Nevermined merchant from a delegated card. Paying any public x402 or MPP endpoint is the Router, where stablecoin rails are live and the card rail is coming.
What agents can buy
If it accepts a card, your agent can pay for it.
Supported payment providers
One delegation API, multiple payment rails. Same agent code regardless of provider.
Enroll a card, create a delegation, and let your agent transact.
Why developers trust Nevermined Pay
Enterprise-grade security
Every layer is designed so card data never touches Nevermined, and every action is auditable.
PCI SAQ-D Compliant
Card data is captured by VGS and tokenized before it enters our system. Nevermined never sees or stores raw card numbers (PANs).
SOC 2 Type II
Independently audited for security, availability, and confidentiality. Report available under NDA for enterprise customers.
ISO 27001 Certified
Information security management system certified to the international standard. Covers data handling, access controls, and incident response.
FIDO2 / Passkey Auth
Strong Customer Authentication at enrollment via 3DS or FIDO2 passkeys. Phishing-resistant, hardware-bound verification.
Full Audit Trail
Every transaction logged with agent ID, amount, merchant, and timestamp. Exportable logs for compliance reporting and dispute resolution.
GDPR Compliant
Data encrypted at rest (AES-256) and in transit (TLS 1.3). Data deletion requests honoured. No raw PAN storage anywhere in the system.
SOC 2 Type II report, ISO 27001 certificate, and PCI attestation of compliance available under NDA via our Trust Center, or contact us.
Real card rails
Open protocol. No crypto, no wallets. Your agent keeps whatever framework it already runs on.
The 402 handshake itself is on the x402 page.
One treasury for the whole fleet
An organization turns individual delegations into a managed operation: shared funding, group-level spending caps, and oversight of every mandate your team's agents hold.
Fund together
Enroll company cards into the organization and share them with named groups - any group member’s agents can spend from them. Paid tiers add org-owned stablecoin wallets, managed by admins.
Control spend
Premium and Enterprise. Each group carries a shared budget: a hard cap enforced at the moment of charge on card and stablecoin rails alike, auto-resetting monthly or yearly, with threshold alerts before it bites.
See everything
Premium and Enterprise; the realtime activity stream is Enterprise. A live activity feed of every spending mandate created, exhausted, or revoked; webhooks for your own systems; and spend analytics per member and per group.
Every enrollment is verified with 3DS or a passkey; each card and mandate remains individually revocable by its owner. Admin and member roles keep wallets and membership in the right hands.
Frequently asked questions
Everything you need to know about Nevermined Pay.
It's neither. Nevermined Pay uses your real credit or debit card. At enrollment, the card number is tokenized by a PCI-compliant vault. Nevermined never sees or stores the raw PAN. What the agent receives is a scoped virtual card credential that encodes identity, spending limits, and merchant restrictions. The actual charge still runs on existing card rails, so it appears on your normal statement.
