Embed card capture in your app
Drop-in, PCI-compliant widgets let your users enroll a card, set spending mandates, and fund agents inline. The card number never touches your servers.
One snippet. A full card-capture flow on your domain.
Mount the widget and your users enroll a card inline. The fields live inside a Nevermined-served iframe, so the raw card number is tokenized before it ever reaches your page.
- Renders right inside your own product
- Zero PCI scope: card data never touches your servers
- Tokenized by VGS, verified with 3DS or a passkey
From card to autonomous spend
Three widgets that take a user from card on file to an agent transacting in the open market.
Card enrollment
Users add a real credit or debit card inline. Tokenized by VGS, verified with 3DS or a FIDO2 passkey.
Spending mandate
Users delegate scoped spend power: amount cap, currency, expiry, transaction count, merchant categories. Revocable any time.
Agent spend in the wild
Hand the scoped credential to the agent. It transacts autonomously at any merchant within the policy, on real card rails.
How it works
Three steps from dashboard to a live widget.
Generate a widget key
Create an organization widget key in the dashboard and set the origin allowlist for domains allowed to load it.
Mint a session
Your backend exchanges the key secret for a short-lived session, server to server. The secret never reaches the browser.
Mount the widget
Initialize the browser SDK with the session and mount enrollment, delegation, or checkout into any container.
Three lines to embed
Initialize, mount, observe. The widget handles the rest.
// 1. initialize with your short-lived session
const nvm = await NeverminedWidgets.initialize({ session })
// 2. mount the delegation widget
nvm.delegations.createDelegation({
container: el,
onSuccess: ({ result }) => agent.grantSpend(result.delegationId),
})
// 3. the agent now has a scoped, revocable spend powerWhat spend powers actually look like
Once delegated, the agent transacts across the open market within the rules you set. Every charge runs on real card rails, every transaction is observable, and the mandate can be revoked at any time.
Where it fits
Wherever your users meet your agents.
API spend →
Let buyers fund agents that pay per call across your API surface.
Browser agents
Give browser-based agents a scoped card to spend at every site they visit.
Agent fleets
Issue mandates to a fleet of agents, each with its own caps and audit trail.
Consumer agents
Give your end-user's agent funds within the product they already use.
Frequently asked questions
Everything you need to know about Nevermined Pay widgets.
No. The widget renders as an iframe served by Nevermined. Card details are captured inside that iframe by a PCI-compliant vault (VGS) and tokenized before they reach any system. Your page never sees the card number, so embedding the widget keeps you at zero PCI scope.
Put funding inside your product
Generate a widget key, mint a session, and ship card capture without taking on card data.