> ## Documentation Index
> Fetch the complete documentation index at: https://docs.agentvault.io/llms.txt
> Use this file to discover all available pages before exploring further.

# FAQ

> Short answers to the questions new account holders and developers ask first.

Find a short answer to the questions people ask before they let an agent pay.
Each one links to the page with the full detail.

## Safety

<AccordionGroup>
  <Accordion title="Does the agent ever see my card number?">
    No. The agent holds a mock token such as `av_card_1_number_u7x2k`, and the proxy
    types the real number into the merchant's page. After the first fill, the
    agent's screenshots go black and page snapshots are refused. See
    [What the agent can see](/security/agent-context).
  </Accordion>

  <Accordion title="Does Agent Vault store my CVV?">
    No. Card industry rules (PCI DSS 3.3.1) forbid storing it. On a deployment with
    live security code entry, a checkout that needs the code asks you to type it in
    the dashboard, and it is used for that one fill. On a deployment without it, that
    checkout fails with `cvv_entry_required`, and nothing can supply the code. See
    [CVV policy](/security/cvv-policy).
  </Accordion>

  <Accordion title="What happens if my agent is hacked?">
    The attacker gets tokens, not credentials. If an agent card governs the card,
    each fill is held to its per-transaction cap, at a merchant it allows, and
    attempts show in your activity log (best effort). Repeated fills add up, so the
    total is bounded only by its daily, weekly or monthly caps and your plan's
    payment quota: set a rolling cap for an overall limit. A card marked **No limits** on
    **Cards** has no agent card caps or merchant rules, so each fill can be for any
    amount on any authorized destination, even where the total cannot be read. Only
    your plan's payment quota still stops it, after 5 or 100 payments in a
    rolling 30 days on Free or Plus. Enterprise has no payment quota. Every card you add after your
    first starts this way: click **Add limits** on every such card. Revoke the agent's API key to cut it off. See
    [If the agent is fully compromised](/security/model#if-the-agent-is-fully-compromised).
  </Accordion>

  <Accordion title="Can I stop all agents at once?">
    Yes. On **Overview**, click **Pause all agents** in the **Kill switch** panel.
    Nothing resolves for any agent until you click **Resume all agents**. See
    [Stop every agent at once](/dashboard/overview#stop-every-agent-at-once).
  </Accordion>

  <Accordion title="Can I give different agents different access?">
    Yes. Give each agent its own API key, and limit each key to specific cards and
    logins. See [API keys](/dashboard/api-keys).
  </Accordion>

  <Accordion title="Can I see my saved passwords?">
    No. Passwords are encrypted, and never shown to you or returned to an agent. To
    change one, change it on the site first, then edit the login. See
    [Logins](/dashboard/logins#edit-a-login).
  </Accordion>
</AccordionGroup>

## Money

<AccordionGroup>
  <Accordion title="Who is charged, and how?">
    The merchant charges your own card, as if you had typed it in. Agent Vault moves
    no money. Your plan, if you pay for one, is billed separately. See
    [Cards](/dashboard/cards).
  </Accordion>

  <Accordion title="What does it cost?">
    Free is $0 with 1 agent card and 5 payments per rolling 30 days. Plus is $19
    per month (list price \$49) with 5 agent cards and 100 payments. Launch
    subscribers lock in lifetime pricing. Enterprise has unlimited agent cards and
    payments: contact [team@self.xyz](mailto:team@self.xyz) for pricing.
    Every plan has unlimited credentials. A payment counts only when your card is
    actually filled into a checkout. While launch trials last, an account on Free
    that has never subscribed can start Plus with 3 months free, card required. The
    3 months count from one hour after you open the checkout. See
    [Plus launch trial](/dashboard/billing#plus-launch-trial).
  </Accordion>

  <Accordion title="Why does my dashboard spend not match my card statement?">
    Spend counts card fills, not settled charges. A checkout abandoned after the card
    was filled still counts, and it is not reversed automatically. Reconcile against
    your card statement. See [Spend is fill intent](/dashboard/activity#spend-is-fill-intent).
  </Accordion>
</AccordionGroup>

## Sites and agents

<AccordionGroup>
  <Accordion title="Does Agent Vault work on any website?">
    On most card checkouts, including Shopify, WooCommerce and Stripe Checkout. It
    cannot pay where the store only takes PayPal, or on a plain `http://` page
    (other than a `localhost` page used for a local demo).

    A CAPTCHA stops an unattended checkout, because the agent never solves one. It
    does not stop the purchase: the agent hands you the live page, you solve the
    CAPTCHA, and the agent carries on. See [Handle challenges](/guides/challenges).
    Check a store in the [recipe registry](/registry/lookup) before your agent
    starts.
  </Accordion>

  <Accordion title="What if a site asks for a 3-D Secure or SMS code?">
    The agent hands you the live page, and you complete the step yourself. The agent
    cannot watch while you type, then carries on. Agents are told to take no
    screenshots afterwards, because a page can echo what you typed. Authenticator-app codes for a
    login with a stored secret are filled automatically. See
    [Handle challenges](/guides/challenges).
  </Accordion>

  <Accordion title="Which AI agents does it work with?">
    Any MCP host, such as Claude Code, Claude Desktop, Codex or Cursor. The dashboard
    also generates setup for OpenClaw and Hermes, and you can write your own agent
    with the TypeScript SDK. See [Choose an integration](/get-started/choose-an-integration).
  </Accordion>

  <Accordion title="How do I delete my data?">
    In **Settings**, under **Your data**, click **Delete account** and type your email
    to confirm. Deletion is permanent and cancels any subscription, so export a copy
    first if you want one. Access stops at once, your history is erased in the
    background, and one record of your sign-in identifier is kept. Checkout recipes
    you contributed that are already in the public registry stay, no longer linked
    to you; unpublished ones are deleted. See [Delete your account](/dashboard/data-and-deletion#delete-your-account).
  </Accordion>
</AccordionGroup>

**Next:** [Quickstart](/get-started/quickstart) to connect your first agent in about 15 minutes.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.