What's new in Agentcard — new features, improvements, and fixes, shipped continuously.
Added
Book flights end to end — tell your agent where and when you want to fly and it searches real flights, confirms the fare, and pays from your Agentcard balance, no separate login or connect step required
Save a traveler profile so flight bookings reuse your details instead of re-asking every time
Good Eggs is now a first-class merchant in the `buy` tool — order groceries the same conversational way as any other store, with its own address and scheduling flow
New `list_all_transactions` tool (MCP + CLI) returns every transaction across all your cards in one list, each row tagged with the card it belongs to
The Agentcard Pay Chrome extension can now reveal a card's full number, expiry, and CVC on demand from the cards list, and the post-creation screen adds See card and Fill card buttons
Improved
Consumer test mode has been removed — every card you create is now a live, real-money card funded by your saved payment method, with no mode toggle to manage
Fixed
Connecting to an MCP client is more reliable — expired or rotated tokens now return a clean re-authentication signal instead of failing, so clients stop retry-storming
Editing the quantity of a customized item in a cart (e.g. a build-your-own order) now works correctly instead of erroring
Removed a false "something went wrong" error that could appear after a successful merchant connection
Fixed
Identity verification no longer hangs — if a verification doesn't pass, your agent now tells you it failed and how to retry instead of waiting indefinitely
Added
Watch a live demo: ordering DoorDash from Claude, with the checkout paid by an Agentcard virtual card — an AI agent completing a real order end to end
Added
Connect a merchant like DoorDash through a hosted, Plaid-style login — you sign in to the store in a secure browser view and AgentCard seals the session for your agent, with a mobile-friendly login form
Free-plan accounts now get one free real order to try AgentCard end-to-end — after that, browsing stays open and a clear upgrade prompt appears when you go to order; paid plans are unlimited and test mode is never gated
Improved
Beta and waitlist wording has been removed from user-facing messaging — AgentCard is generally available
Clearer errors when finishing a connect flow fails, with a tighter timeout so a stuck connection surfaces quickly instead of hanging
Added
New conversational `buy` tool — tell your agent what to order in plain language ("order a caesar salad from Zuni on DoorDash") and it runs the whole flow: finds the store, builds the cart, asks for your delivery address, and confirms the total before checkout. Available over MCP, in the CLI (`agent-cards buy`), and via a short connect link
New Pro plan at $100/mo — 50 cards per month with up to $1,000 per card — selectable from the CLI, MCP, and dashboard
Order tracking — check the status and ETA of a placed order
Scheduled delivery — pick a delivery time at checkout instead of ordering for right now
Set a default delivery address and per-item substitution preferences so reorders and checkouts use your saved choices
Tip the Dasher directly at checkout
Improved
Checkout is more reliable — orders use a stable idempotency key and are uniquely scoped per client, so a retry can never accidentally place a duplicate order
Carts self-heal — if a store drops a line item or a cart goes stale, AgentCard rebuilds it from the live cart instead of failing, including duplicate reorder lines and quantity edits
Fixed
Your agent can no longer fabricate an order-placement or order-status claim — it only reports an order as placed once checkout actually succeeds
Fixed a connect loop that could leave the merchant-connection flow stuck
Improved
Cards created for a purchase are now sized to the exact order total, including the pinned tip, so the charge always goes through cleanly
Documentation, the API integration guide, and CLI help were overhauled to fix points where agents previously got stuck setting up and using AgentCard
Fixed
Hardened the purchase money-path — idempotency, ledger accuracy, spend policy, and cart handling fixes prevent a charge from being double-counted or wrongly reversed, with a reconciliation safety net that confirms each charge and repairs any pending state
OAuth sign-in now works correctly for more MCP clients — discovery is fixed and the authorization step is properly separated, so connecting from clients like Kilo no longer fails
Added
You can now link external service accounts to AgentCard over OAuth — each connected account gets its own isolated card, so spending and limits never bleed across the agents and services you've connected, and known clients are recognized automatically
Improved
The OAuth consent and magic-link sign-in screens now show the actual app requesting access instead of always saying "Claude", so you can see exactly which client you're authorizing
Fixed
Refunds now go back to your original funding card instead of being stranded — a refund that previously landed in the wrong place is returned to the source it was paid from
Company onboarding is more reliable — the email action button is no longer blocked from opening, and onboarding-completion webhooks are no longer dropped when a delivery has to be retried
The CLI now retries transient network errors while waiting on a result instead of giving up, so a brief connection blip no longer aborts the command
Added
New CLI command `agent-cards cards close <id>` to close a specific card directly from the terminal
New CLI commands `agent-cards payment-method list` and `agent-cards payment-method default` to view your funding methods and choose which one is used by default
Improved
The MCP server now matches the API and CLI feature-for-feature — switching between test and live mode, listing and defaulting payment methods, and cancelling a plan are all available to agents over MCP
The CLI `mode` command is now listed in `--help` and no longer prints a misleading beta notice
Fixed
Slack Connect channel setup for new company accounts is now resilient to Slack rate limits — invites are paced and retried instead of being silently lost, and re-running setup reuses the existing channel rather than failing or sending a duplicate invite
Improved
All transactional emails redesigned to the dark agentcard.sh brand — magic links, approval requests, card and transaction notifications, billing emails, and onboarding sequences now share one consistent look
Every standalone browser page — auth verification, OAuth success, approvals, funding, identity verification, and subscription pages — now matches the dark agentcard.sh design instead of using bare HTML
Added
New company accounts now get a shared Slack Connect channel with the AgentCard team, created automatically when the organization is set up — the founders join and your billing contact is invited
Company accounts now receive an onboarding email from the founder when the organization is created — the team counterpart of the welcome email individual users already get
Added
Card creation now sends a confirmation email — just like transactions and card closures — whenever a card is created via the API, CLI, MCP, or dashboard; you can opt out per account in your notification settings
Improved
Test mode is now called "test mode" everywhere — CLI banners and docs no longer say "sandbox", making it clearer that new accounts start in test mode and go live with `agent-cards mode prod`
Fixed
Single-use cards now close the moment they're charged, so a follow-up charge is no longer wrongly declined as "card closed" while the card still showed as open
Closing a card after a purchase no longer occasionally fails — an already-closed card is now treated as a successful close
A declined charge caused by card-network fraud throttling no longer removes your funding card, and the decline message now suggests paying with Apple Pay or Google Pay instead
Improved
`agent-cards-admin keys list` now shows each API key's age and flags keys overdue for rotation, with a reminder to rotate stale ones
Fixed
Production API keys are no longer revoked without warning — orgs now get an email when a subscription goes past due (keys keep working through the billing grace period) and a notice if keys are eventually revoked
Rotating an API key now keeps the old key valid for 24 hours, so in-flight requests using the previous key don't fail the instant you rotate
Revoking or rotating an API key now only affects keys that belong to your own organization
Improved
The MCP server and CLI welcome screen now tell you that new accounts start in test mode and show the exact `agent-cards mode prod` command to switch to live
Sign-ups using disposable email addresses are now blocked, and repeated sign-up attempts from the same IP are rate-limited
Added
New users now receive a welcome email from the founder the first time they verify their magic link and sign in
Added
`get_plan` and `upgrade_plan` MCP tools — agents can now read your current plan, card limits, and monthly usage, and kick off a Stripe Checkout upgrade to Basic directly from a conversation
Improved
`create_card` is now plan-aware — when you hit a card limit, the error message points the agent at `get_plan` and `upgrade_plan` instead of showing a generic limit message
Fixed
Database connections are now automatically refreshed when AWS rotates RDS credentials — long-running Vercel instances that previously produced 503 errors after a rotation now recover on their own without a redeploy
Improved
Blog refreshed and restyled across all posts
About page updated with black-and-white portraits of our angel investors and founders
Agent-discovery metadata refreshed — agent.txt, llms.txt, and the .well-known endpoints (agent-card, agent-skills, API catalog, and MCP server card) now reflect current capabilities
Fixed
Webhook auto-disable now measures the 7-day failure window from the start of the current failure streak — not the endpoint's age — so a long-idle endpoint is no longer disabled on its first failed delivery, and the clock resets the moment a delivery succeeds
Improved
Admin dashboard now shows decline analytics — top decline reasons, declines by merchant, and a caller-type breakdown (human vs agent) so you can see exactly why and where transactions are being declined
Added
Outbound webhooks for the Public API — organizations can now subscribe to card, cardholder, transaction, and balance events via signed HTTP POST instead of polling. Supports 10 event types, 5-stage automatic retries, and endpoint auto-disable after 7 consecutive days of failures
AgentCard-Signature header on all webhook deliveries — timestamped HMAC-SHA256 signature (t=…,v1=…) makes payloads replay-safe and easy to verify in any language
`agent-cards-admin webhooks` command group — list, create, update, delete, reveal and rotate secrets, and inspect delivery history from the CLI
CLI auth now validates your stored token before any command runs — stale or revoked keys are caught immediately with an interactive re-login prompt instead of a mid-command error
Fixed
card.updated events now fire on balance changes — webhook subscribers previously received no notification when a transaction settled and updated the card balance
Improved
Backend and MCP server migrated from Railway to Vercel with AWS RDS Postgres — more reliable infrastructure with auto-scaling, advisory-lock-safe cron jobs, and DB-backed webhook retry queues
Fixed
Sandbox and live Stripe customer IDs are now stored separately — mixing a sandbox API key with a live cardholder row no longer returns a 500
Improved
Card issuance is now exclusively through Privacy.com — Stripe Issuing code paths have been removed, simplifying the backend and eliminating a source of confusion between providers
Added
Test mode — new accounts default to test mode, where card creation uses fully in-process sandboxing with no payment method, KYC, or plan limits required. Switch modes with `agent-cards mode [test|prod]`
Fixed
CLI card creation no longer prompts for confirmation when the backend requests approval — you're already at the keyboard, so approvals are auto-resolved immediately
Fixed
Sandbox API keys now mock card issuance entirely — sandbox_priv_ cards with deterministic 4242 PANs are returned instead of minting real cards
CLI login no longer hits rate limits during magic-link polling — /auth/me is now excluded from the auth rate limiter
Admin CLI shows actionable recovery steps on an invalid API key error — previously showed a terse message with no path forward
Improved
Identity verification now requires a selfie that matches your document — the KYC session is rejected if the photo doesn't match
`cards details` now shows the billing address — agents filling checkout forms no longer need to look it up separately
Fixed
KYC start no longer returns a 500 on Stripe errors — upstream failures are now caught and return a proper error response
Fixed
Sandbox payment intents are now routed correctly — webhook handlers and card close no longer fail with "No such payment_intent" on sandbox cards
Closing a card is now idempotent — concurrent close attempts no longer throw an error when the payment intent is already in a terminal state
Added
Identity verification — card creation now requires a government-issued ID, verified via Stripe Identity. Your name and date of birth are populated automatically from the verified document
Added
Org subscriptions — organizations can now subscribe to a paid plan via the admin CLI (`subscribe`), unlocking production API keys (`sk_live_`)
Production vs sandbox mode switching — `agent-cards-admin env` lets you switch between environments and all subsequent commands use the right API and key prefix automatically
Fixed
Admin CLI now defaults to the production API — previously defaulted to sandbox, causing cryptic JSON parse errors on first run
Improved
Unhandled async errors across all routes now fail fast with a proper response instead of timing out
Fixed
auth/me and slack/install endpoints returned errors in some environments — both now respond correctly
Added
Promotion codes — discount codes can now be applied when upgrading to a paid plan at checkout
Improved
Transactional emails, approval pages, and MCP consent page updated with a cleaner monospaced design
Support emails now route to Slack in real-time — human replies from Slack are sent back as email replies automatically
MCP server now listed on Glama — discoverable by agents browsing the MCP directory
Fixed
Approval route errors now return a proper response instead of hanging — unhandled async failures are caught across all routes
Added
CLI auto-upgrade — `agent-cards` now checks for new versions on each run and upgrades itself automatically
Uptime monitoring across all API endpoints — incidents are detected and tracked automatically
Improved
Card list now shows full card IDs and creation dates — easier to identify and reference specific cards
Fixed
CLI update check no longer runs during the `update` command itself, preventing a redundant loop
Added
Subscription plans — choose a plan that fits your usage, billed via Stripe with lifecycle emails at each stage
Monthly card usage shown in `agent-cards plan` — see how many cards you've created this billing period
Improved
Transactional emails, approval pages, and the MCP consent page updated to match the new Agentcard design
Improved
Card issuance upgraded — more reliable authorization and faster card delivery
CLI help output redesigned with grouped commands, examples, and a step-by-step 'How it works' flow
Fixed
Sandbox cardholder creation now uses the correct individual type to avoid issuing rejections
Added
Remove payment method — available from the CLI, MCP, and backend API
Sandbox mock services fully wired — card creation and payments in sandbox mode are fully isolated
Added
Refund endpoint for card transactions — admins can issue refunds directly via the API
Structured error codes for card creation and transaction failures — easier to handle errors programmatically
Improved
Card notification emails now sent to all org admins in addition to the cardholder
Spend limit and balance are validated before a transaction is processed — clearer errors on failure
Fixed
Stale card cleanup now correctly handles cards with a 2-hour timeout
Added
sk_live_ API key support — production keys now work alongside sandbox sk_test_ keys
Fixed
IP blocklist now correctly handles IPv6-mapped addresses and proxy headers
Added
Webhook notifications for card events — get notified when cards are created, authorized, or closed
Added
Slack integration — link your account, create cards with /card, and receive DM notifications for transactions and closures
Card creation requests in Slack require approval — admins are prompted in-channel before a card is issued
Improved
Cards are now debit cards — updated across all product copy and documentation
Improved
setup-mcp now automatically prompts new users to sign up — no extra steps to get started from the CLI
Added
Agentcard Pay Chrome extension — lets your AI agent detect checkout pages in the browser and fill card details automatically
pay_checkout, detect_checkout, and fill_card MCP tools — agents can now complete purchases end-to-end without manual card entry
Billing address collected at card creation and shown in card details
Improved
Payment method declines now return detailed error messages — failed methods are auto-removed so you can retry with a new one
Phone number is now required at signup to meet identity verification requirements
Card limit lowered to $50 — clearer upgrade messaging shown when the limit is hit
Added
Payment method onboarding — add a debit or credit card once and use it to fund all future cards
Hold-based card funding — funds are held on your payment method at card creation, captured when used, and released when the card is closed
Real-time authorization webhook — transactions are confirmed in real time
Improved
Wallet and x402 removed — funding is now handled directly via your saved payment method for a simpler flow
Stale cards are automatically cleaned up and the MCP and CLI messaging updated to reflect the new funding model
Added
Sandbox environment — sandbox.api.agentcard.sh is now live for testing without real charges
REST API under /api/v1/ — organizations, cardholders, and wallets accessible via API key
Unified Cardholder model — identity, wallet, and cards all scoped to a named cardholder
Admin CLI for managing organizations, API keys, and team members
Multi-key management in the CLI — store and switch between API keys with `keys set`
API key authentication for CLI login — use your API key instead of email magic link
Added
Transaction history — view past charges per card in the CLI (`cards transactions`) and via MCP (`list_transactions`)
AI auto-reply in support chat — common questions answered instantly without waiting for a human
IN_USE card status shown while a transaction is being authorized
Improved
Full card lifecycle handled — declines, reversals, expirations, and refunds all tracked correctly
Rate limits relaxed to reduce false positives for normal usage patterns
Fixed
Card creation no longer crashes after collecting user info for the first time
Closed cards now behave correctly and sandbox mode removed to match production behavior
Added
fund_wallet MCP tool — agents can now top up your wallet balance directly
wallet balance and wallet fund commands added to the CLI
User info collection during card creation — the CLI and MCP now guide you through submitting identity details on first use
ChatGPT app store compatibility — Agentcard now works as a ChatGPT plugin
Improved
MCP tools now include safety annotations so agents understand which actions are read-only vs. destructive
Card creation returns a checkout URL when your wallet balance is too low — no more silent failures
Fixed
MCP create_card now correctly handles the 202 approval-pending response
One-time use card cancellation now uses native lifecycle controls
Added
Wallet system — fund a wallet balance once, then create cards instantly without a new checkout each time
Real card issuance — physical-network virtual cards backed by your wallet
Inline approval flow for CLI and MCP — approve or deny card requests without leaving your terminal or chat
Improved
Card limits enforced — $500 maximum per card, up to 5 active cards at a time
Fixed
Nurture email sequence now respects step delays correctly — emails send in the right order at the right time
Failed nurture emails are now retried after delivery errors instead of being silently dropped
Added
Chip logo with robot face easter egg across the site and dashboard
OAuth 2.1 support — connect Agentcard directly to Claude.ai as a native connector
MCP server now has a favicon so it appears with the Agentcard icon in Claude.ai
Waitlist reactivation email campaign for users who signed up but haven't gotten started
Improved
Onboarding email sequence expanded to 4 steps with bounce filtering — fewer failed deliveries
OAuth magic link emails now use the same polished template as all other Agentcard emails
Fixed
OAuth magic link verification now works correctly regardless of middleware order
Added
MCP package published to npm as @agent-cards/mcp with auto-sync from monorepo
Rewritten MCP README with quick setup instructions and clearer product description
Improved
MCP bumped to v0.2.1
Added
MCP auto-discovery via .well-known/mcp/server-card.json endpoint
Added
Automated nurture emails to help you get started after signup
Clear decline reasons shown when a transaction is rejected — in CLI, MCP, and email
Improved
Content and technical optimizations for AI search engine visibility (GEO)
Fixed
Admin CORS headers now included on rate-limited responses
MCP server deploy now targets the correct service
Added
Full merchant category detection — every transaction now shows what it was spent on
Enhanced security controls — detailed audit trail for all card activity
Improved
Support notifications now include more context so issues get resolved faster
Login attempt limits relaxed — fewer lockouts during normal use
Better error messages when creating cards that need approval
Fixed
CLI no longer crashes when creating a card that requires approval
Added
Live support chat directly from the CLI and MCP
Agents now request your approval before taking sensitive actions
Improved
Cards are clearly marked as single-use — they close automatically after the first transaction
Added
setup-mcp command in CLI — connect your AI agent to Agentcard in one step
