Your agent is using your card
Real credit cards and raw API keys end up pasted into agent context. One leak exposes the actual account — with no spend cap and no way to revoke just that agent.
Each agent gets its own spending limit, scoped credentials, and a hard stop that fires before anything is charged. Works with every payment rail and every LLM provider — so one runaway agent can't drain the company card.
pip install runvault# Give the agent a wallet with a $500 ceiling.
agent = runvault.connect(
agent_id="research-agent-01",
budget=500.00,
scope=["llm", "commerce"],
)
# Same identity. Any rail. No raw card number.
agent.pay(merchant="amazon.com", amount=29.99)
# ↳ RunVault picks the rail, issues a one-use card,
# enforces the cap, logs the spend.
Today most teams hand their agent a shared API key or a company card and hope for the best. When something goes wrong — a prompt injection, a bad loop, a compromised dependency — there's no per-agent cap, no audit trail, and no way to stop a charge before it clears.
Real credit cards and raw API keys end up pasted into agent context. One leak exposes the actual account — with no spend cap and no way to revoke just that agent.
Stripe ACP, Visa VIC, Google AP2, x402 — six agent-payment protocols in 18 months. Each one needs its own registration, credentials, and merchant list.
Payment networks authorise after the transaction is submitted. Concurrent agents race each other and collectively overspend before any check fires.
An agent can be well within its Claude budget while dramatically overspending on purchases. No single view of what an agent actually cost you.
Reputation doesn't follow the agent. Merchants can't screen an agent before fulfilling a high-value order, because every rail has its own registry.
"Every financial system built in the last fifty years assumes a human is the one spending. Agents aren't humans. They need a wallet of their own."
RunVault sits between your agent and the outside world. You write two lines; we handle the wallet, the cap, and the rail underneath.
runvault.connect() issues a signed, short-lived credential
tied to one agent. You set the ceiling and the scope — LLM calls,
purchases, or both. Revocable in under a second.
Every spend goes through a single atomic check. The cap is enforced before any upstream call — so a thousand concurrent agents can't race past the limit.
Virtual card today. Stripe ACP, Visa VIC, stablecoin tomorrow. RunVault picks the right rail for the merchant. You never re-integrate.
In the last eighteen months, every major network shipped an agent payment rail — and none of them agree on who the agent is.
Partners include Anthropic, OpenAI, Stripe, and Microsoft.
Three competing agent-commerce protocols in one quarter. Agent checkout becomes mainstream.
Cryptographic agent authentication at merchant checkout. Cloudflare and Worldpay co-launch.
Free agentic shopping. Agent-initiated purchases settle via PayPal.
Six rails. Zero shared identity. That's the gap RunVault fills.
Every AI team building agents needs per-agent cost controls.
Visa, Stripe, Mastercard, and Google are racing to own the rail.
Works on every merchant today — no protocol adoption required.
Self-serve signup. No enterprise procurement cycle required.
The SDK is MIT-licensed and free forever. Managed infrastructure, virtual cards, and the reputation network are paid tiers.
For hobby projects and evaluation.
For AI-native teams shipping real agents.
For scale, compliance, and multi-region.
We're onboarding ten design partners before public GA. If you're shipping agents that spend real money, let's talk.