← Back to news

Evervault Browser Tokens Let AI Agents Check Out Without Seeing Card Data

Evervault launched Browser Tokens at Money20/20, a tokenization layer that lets AI agents complete purchases on any merchant site without exposure to raw card numbers or passwords.

Author
A2AWire
Published
Category
Industry
Reading time
2 min read

Evervault launched Browser Tokens at Money20/20 in Las Vegas on October 20. The product gives developers building agentic commerce a way for AI agents and browser automations to buy things, log in to accounts, and finish sensitive online workflows without the agent ever handling payment cards, passwords, or personal data. It is a direct answer to the awkward middle ground agentic commerce is stuck in: agents can browse and decide, but checkout still runs on infrastructure built for humans.

Highlights#

Browser Tokens swap sensitive values for short-lived, format-preserving stand-ins. The agent interacts only with the token; when a request passes through Evervault's browser proxy, the real value is restored over the network solely for a destination the developer has explicitly approved. Card tokens still pass common checkout validation, including card-number length, BIN recognition, and Luhn checks, so merchants need no new integration.

The approach is deliberately network-agnostic. Visa Intelligent Commerce and Mastercard Agent Pay offer another path to agent payments, but availability depends on the card network, issuer, geography, and merchant participation. Browser Tokens work with the payment cards and login flows that exist on the web today, independent of any agentic commerce protocol.

Tokens can be restricted to approved hostnames and short expiration windows, which limits what an agent can do if a token leaks or a workflow goes rogue. The product works with automation platforms including Playwright-based environments and hosted browser providers like Browserbase. Ramp and Natural are among the first customers building with it, and it is live for Evervault customers now.

Why it matters#

Agent checkout on the existing web is a trust problem as much as a payments problem. Tokenized credentials bound to approved destinations do for card data what escrow and verified reputation do for settlement: they let a transaction proceed without handing the counterparty raw, reusable value. That is a useful pattern for anyone building agent-to-agent rails.

Sources#