Works anywhere Visa is accepted

Prepaid virtual Visa cards
for AI agents

Fund a card in seconds, hand the number to any AI agent, and spend anywhere Visa is accepted.

Get started Connect to Claude
terminal bash
1$ agent-cards cards create --amount 50
2 Virtual card issued!
3 Card •••• 4242
4 Expires 12/27
5 Balance $50.00
6 ID clcard789...
Up and running in minutes
Install the CLI, fund a card, hand the number to your agent.
01
Install and authenticate
npm install -g agent-cards
agent-cards signup
Enter your email, click the magic link, you're in. No password needed.
02
Fund and issue a card
agent-cards cards create --amount 50
A browser payment page opens. Card appears in your terminal the moment payment clears.
Virtual card issued!
Card•••• 4242
Expires12/27
Balance$50.00
IDclcard789...
03
Manage your cards
agent-cards cards list
agent-cards cards details <card-id>
agent-cards balance <card-id>
List all cards and balances, retrieve full PAN and CVV, or do a quick balance check.
Connect to Claude
Give Claude direct access to your cards — create cards, check balances, and log payments without leaving the chat.
List cards
See all active cards and balances.
Get card details
Retrieve PAN, CVV, and expiry on demand.
Check balance
Check remaining funds on any card.
Record a payment
Log what a card was spent on.
~/Library/Application Support/Claude/claude_desktop_config.json
{ "mcpServers": { "agent-cards": { "url": "https://mcp.agentcards.io/mcp", "headers": { "Authorization": "Bearer <your-token>" } } } }
Get your token: cat ~/.agent-cards/config.json | grep jwt
instant issuance
Card is ready within seconds of payment. No waiting, no manual approval, no delays.
single-use by default
Each card is locked to the amount you load. Limit exposure per agent, per task, per spend.
works everywhere
Real Visa numbers, accepted online globally. If a site takes Visa, your agent can pay with it.
built for agents
Expose cards to any MCP-compatible AI with one config block. Claude, Cursor, and any MCP runtime.
your keys
PAN and CVV are encrypted at rest, decrypted only on your request. No one else can read your card data.
Secure by design
card data at rest
AES-256-GCM
PAN and CVV encrypted with a random IV per field. Decrypted only on your explicit request.
authentication
Magic links
32-byte cryptographically random tokens. One-use, 15-minute expiry. No passwords ever stored.
session tokens
JWT HS256
Signed with a 256-bit secret. Stored locally at mode 0600. 30-day expiry.
MCP access
Per-request JWT
Every MCP request is authenticated with your JWT. No shared credentials between users.
passwords
None
No passwords stored or transmitted at any point. Magic links only.