Skip to product details
Agentic.Pay

Agentic.Pay / Vault

Customer cards. Customer control.

Keep the payment method close to its owner. Bring encrypted card storage, explicit approval and visible device access into your agent experience.

Illustrative sandbox environment · No live transaction
device_042
  1. Encrypt on device
  2. Review the request
  3. Keep access visible
A boundary you can see.

01 / Device encryption

A card enters.
Ciphertext leaves.

Card details are encrypted on the customer’s device before entering Vault. Device keys and a company-scoped Vault keep the stored record tied to its owner.

Illustrative card-sandbox flow · test card 4242
Illustrative sandbox example
YOUR DEVICEEncrypted here.Only ciphertext leaves.
Device key · active
cipher_042
7f ◇ a2 ◇ 91 ◇ c4
e8 ◇ 16 ◇ b0 ◇ 5a
Encrypted record
DEVICE-ENCRYPTED
VAULTYOUR CARD. YOUR CONTROL.
Illustrative card-sandbox flow · test card 4242

02 / Deliberate approval

Make the request
worth a second look.

Show the merchant and amount before a customer approves or rejects a sandbox payment request. The approval has its own status and expiry; a stored card is not a blanket permission.

Approval is separate from a completed payment.
Illustrative sandbox example
Agentic.Pay
•••• 4242
CUSTOMER CARDEncrypted on deviceYour permission.
PAYMENT REQUEST / req_042A card is not
a blank check.
Merchant
Sandbox store
Amount
$49.00
Customer review required
ReviewApproved · sandbox
Approval is separate from a completed payment.

03 / Visible access

Know which device
holds the keys.

Inspect enrolled devices and their status. Revoke a device’s access and keep the distinction between an active key, a pending approval and a returned result visible.

Card Vault examples use sandbox mode. Merchant login storage is a separate workflow.
Illustrative sandbox example
DEVICE ACCESS / device_042Customer deviceActive keyAccess revokedRevision 4 → 5
Agentic.Pay
•••• 4242
CUSTOMER CARDEncrypted on deviceYour permission.
Card Vault examples use sandbox mode. Merchant login storage is a separate workflow.

From a scene to your workflow

Build with a boundary.
Keep the result.

Start in the sandbox workspace. Use the documentation to connect your application, preserve operation identifiers and inspect each returned status.

  1. 01Open your company workspace

    Keep the company and customer context explicit.

  2. 02Connect the documented flow

    Use the configured credentials and supported operations.

  3. 03Inspect the returned result

    A request, an approval and a payment are separate facts.

A few useful distinctions

Vault, clearly.

Does storing a card authorize every purchase?

No. Card storage, device access and purchase approval are separate operations. An approval is attached to its specific request and status.

Where can a customer manage their card?

The customer Vault is a separate authenticated experience at /vault. It contains the connected-company selector, stored test cards and checkout approvals.

Does this page process a payment?

No. These scenes are illustrations. The card and approval examples describe the sandbox workflow; no card is charged by the page.