Skip to main content
On the Cards page you add the payment cards your agents pay with. Adding a card takes about 2 minutes, and your agents never see its number.
The Cards page listing two cards with brand, masked number, cardholder, expiry, and a Governed status in the Limits column.The Cards page listing two cards with brand, masked number, cardholder, expiry, and a Governed status in the Limits column.

The Cards page with two cards in the vault.

​
Add a card

1

Click Add card

It is at the top of the Cards page.
2

Enter the cardholder name

Type the name as it appears on the card in Cardholder name.
3

Name the card (optional)

Give the card a name you would use yourself, such as Revolut gray, in Card name. Your agent sees it, so when you say “use my Revolut card” it knows which one you mean, and when it can’t tell, it asks.
4

Enter the card number and expiry

Fill in Card number and Expiry (MM/YY). The number goes straight to our card vault provider.
5

Choose the brand

Pick one under Brand. The vault corrects it if it recognizes the number.
6

Choose the billing address

Under Billing address, pick Saved to choose one of your addresses, or New to type one.
7

Click Add card

The card appears in the list with the message Card added.
Your agents can now pay with this card. If it is your first card, its Default agent card already limits it. Any card you add after that starts with No limits: click Add limits on it before an agent uses it.
The New card dialog with Cardholder name, Card number, Expiry, Brand and Billing address fields, and Cancel and Add card buttons.The New card dialog with Cardholder name, Card number, Expiry, Brand and Billing address fields, and Cancel and Add card buttons.

The New card form. The card number and expiry are secure vault fields.

The billing address must match the card. The card network compares it with the address your bank holds, and a mismatch can decline the payment.
A New billing address is also saved to Addresses. On a test deployment, enter test cards only. Agent Vault creates a Default agent card with starter limits only when the card you add is the only card in your vault, which is usually your first one. A second or later card gets no agent card of its own.

​
The cards list

Each row shows the Card with its name, Cardholder and Expires date. Click Rename (or Add name) under the card to change its name; save it blank to remove it. Limits reads Governed when an agent card controls the card, and No limits when none does.
A row in the Cards list with a yellow No limits chip and an Add limits button in the Limits column.A row in the Cards list with a yellow No limits chip and an Add limits button in the Limits column.

A card that no agent card controls.

A No limits card has no agent card spending caps or merchant rules, so each fill can be for any amount on any destination. On any other site, the fill still stops and asks you first. Your plan’s payment quota still applies: once the account has made 5 payments in a rolling 30 days on Free or 100 on Plus, the next fill is refused with plan_quota_reached. Enterprise has no payment quota. Preview, development, test and staging deployments are not metered. See Limits and timeouts. Click Add limits to fix it.

​
What Agent Vault keeps

Agent Vault keeps the last four digits, brand, expiry, cardholder name, the card’s name if you gave it one, and a link to the billing address. Your agent fills the expiry from this saved copy, and you cannot edit it here. If your bank sends a card with a new expiry, delete the card and add it again, then pick it as the Underlying card of any agent card that used the old one. The card number is held by our card vault provider. The security code (CVV) is never stored, as card industry rules (PCI DSS 3.3.1) require. On a deployment with live security code entry, which the hosted Agent Vault service has, a checkout that needs it asks you to type it at that moment. On a deployment without it, that checkout fails with cvv_entry_required. See Security code requests and Card storage.

​
Delete a card

1

Click the trash icon on the card's row

A confirm button appears in its place.
2

Click Delete card

The card is removed with the message Card removed.
From that moment no agent can fill it, because Agent Vault can no longer resolve its token. Revoking the token in the vault follows shortly after, unless another of your saved cards still uses the same token. If you add the same card later, it is a new card: add it to any limited API key’s access again.

​
What happens when…

​
For developers

Full lists: Token catalog and Error codes.
Network tokens: status not available. No card carries one today. The field stays empty until network onboarding with Visa or Mastercard is in place.
Next: Agent cards to set how much an agent can spend with this card.