Skip to main content
Find a short answer to the questions people ask before they let an agent pay. Each one links to the page with the full detail.

​
Safety

No. The agent holds a mock token such as av_card_1_number_u7x2k, and the proxy types the real number into the merchant’s page. After the first fill, the agent’s screenshots go black and page snapshots are refused. See What the agent can see.
No. Card industry rules (PCI DSS 3.3.1) forbid storing it. On a deployment with live security code entry, a checkout that needs the code asks you to type it in the dashboard, and it is used for that one fill. On a deployment without it, that checkout fails with cvv_entry_required, and nothing can supply the code. See CVV policy.
The attacker gets tokens, not credentials. If an agent card governs the card, each fill is held to its per-transaction cap, at a merchant it allows, and attempts show in your activity log (best effort). Repeated fills add up, so the total is bounded only by its daily, weekly or monthly caps and your plan’s payment quota: set a rolling cap for an overall limit. A card marked No limits on Cards has no agent card caps or merchant rules, so each fill can be for any amount on any authorized destination, even where the total cannot be read. Only your plan’s payment quota still stops it, after 5 or 100 payments in a rolling 30 days on Free or Plus. Enterprise has no payment quota. Every card you add after your first starts this way: click Add limits on every such card. Revoke the agent’s API key to cut it off. See If the agent is fully compromised.
Yes. On Overview, click Pause all agents in the Kill switch panel. Nothing resolves for any agent until you click Resume all agents. See Stop every agent at once.
Yes. Give each agent its own API key, and limit each key to specific cards and logins. See API keys.
No. Passwords are encrypted, and never shown to you or returned to an agent. To change one, change it on the site first, then edit the login. See Logins.

​
Money

The merchant charges your own card, as if you had typed it in. Agent Vault moves no money. Your plan, if you pay for one, is billed separately. See Cards.
Free is 0with1agentcardand5paymentsperrolling30days.Plusis0 with 1 agent card and 5 payments per rolling 30 days. Plus is 19 per month (list price $49) with 5 agent cards and 100 payments. Launch subscribers lock in lifetime pricing. Enterprise has unlimited agent cards and payments: contact team@self.xyz for pricing. Every plan has unlimited credentials. A payment counts only when your card is actually filled into a checkout. While launch trials last, an account on Free that has never subscribed can start Plus with 3 months free, card required. The 3 months count from one hour after you open the checkout. See Plus launch trial.
Spend counts card fills, not settled charges. A checkout abandoned after the card was filled still counts, and it is not reversed automatically. Reconcile against your card statement. See Spend is fill intent.

​
Sites and agents

On most card checkouts, including Shopify, WooCommerce and Stripe Checkout. It cannot pay where the store only takes PayPal, or on a plain http:// page (other than a localhost page used for a local demo).A CAPTCHA stops an unattended checkout, because the agent never solves one. It does not stop the purchase: the agent hands you the live page, you solve the CAPTCHA, and the agent carries on. See Handle challenges. Check a store in the recipe registry before your agent starts.
The agent hands you the live page, and you complete the step yourself. The agent cannot watch while you type, then carries on. Agents are told to take no screenshots afterwards, because a page can echo what you typed. Authenticator-app codes for a login with a stored secret are filled automatically. See Handle challenges.
Any MCP host, such as Claude Code, Claude Desktop, Codex or Cursor. The dashboard also generates setup for OpenClaw and Hermes, and you can write your own agent with the TypeScript SDK. See Choose an integration.
In Settings, under Your data, click Delete account and type your email to confirm. Deletion is permanent and cancels any subscription, so export a copy first if you want one. Access stops at once, your history is erased in the background, and one record of your sign-in identifier is kept. Checkout recipes you contributed that are already in the public registry stay, no longer linked to you; unpublished ones are deleted. See Delete your account.
Next: Quickstart to connect your first agent in about 15 minutes.