{ "data": { "a": { "slug": "agentcard", "name": "Agentcard", "vendor": "Agentcard Corporation", "vendorUrl": "https://agentcard.com", "kind": "http-api", "category": "agent-wallets", "summary": "Agentcard gives AI agents a way to pay at card checkouts. Its Vault stores a user's own cards for approved purchases, and Issuing creates single-use or multi-use virtual Visa cards. Access is by REST API, MCP server and CLI.", "url": "https://www.anchorterminal.com/tools/agentcard", "markdownUrl": "https://www.anchorterminal.com/tools/agentcard.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/agentcard.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/agentcard.json", "dns": "agentcard.grade.anchorterminal.com", "license": "Proprietary service under Agentcard's terms of use. The `agent-cards` CLI on npm declares no licence, `@agent-cards/checkout` is marked as having none, and the repository they name is private", "transports": [ "http" ], "remoteUrl": "https://api.agentcard.sh", "packages": [ { "registry": "npm", "name": "agent-cards" }, { "registry": "npm", "name": "@agent-cards/checkout" } ], "auth": "oauth", "authNotes": "Self-serve. A person signs in to the dashboard or the CLI with an emailed code and creates an OAuth client. `POST /api/v2/oauth/token` exchanges `client_id` and `client_secret` for a platform token that lasts one hour, with the single scope `api`. A user connects by a one-time code, which returns a connection token limited to that user's cards and purchases, refreshed with the platform token. Sandbox and production use separate clients on one host.", "pricing": "freemium", "pricingNotes": "Vault is free up to 5,000 users, with Enterprise by quote. Issuing is $5,000 a month with $0 per card. The Purchase Agent is listed at $0.15 a request and free in beta. A sandbox with test cards needs no contract or card. Prices for the personal plans named in the MCP tools (free, basic, pro) were not found (https://www.agentcard.sh/pricing, checked 2026-10-09).", "priceSummary": "$0.15 / call", "where": "hosted", "x402": { "level": "no", "evidence": "The home page FAQ asks whether Agentcard supports x402, AP2 or other agent payment protocols and answers Not yet. No x402, MPP or L402 in the docs or the OpenAPI file (https://www.agentcard.sh/, checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 33018, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://docs.agentcard.com", "llmsTxt": "https://docs.agentcard.com/llms.txt", "openapi": "https://docs.agentcard.sh/openapi.json", "capabilities": [ "payments.card", "wallet.spend-limits", "wallet.custody" ], "tags": [ "hosted", "freemium", "closed-source", "openapi", "llms-txt", "mcp", "cli", "oauth", "typescript", "sandbox", "webhooks", "virtual-cards", "cards", "approvals", "usdc" ], "lastRelease": "2026-10-09", "graded": true, "anchor": { "graded": true, "score": 52.5, "grade": "D", "agentReady": false, "rank": 989, "ranked": true, "rankOf": 1513, "categoryRank": 9, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 63, "maintenance": 74, "payments": 42, "reliability": 26, "schema": 80, "security": 71, "transparency": 68 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-04" }, "negative": -6, "negativeNotes": [ "8 October 2026, with earlier entries on 6 September, 3 July and 2 July. Agentcard's changelog records released fixes of described flaws with no advisory, among them \"Closed a gap where an app's or a company's token could become a 30-day Vault sign-in in a person's name\" (8 October), a checkout gap where a tokenisation step could be treated as authorising a later payment (6 September) and \"a security gap where a company's API key could, in some cases, reach an individual user's personal account\" (3 July). A further fix on 23 October says a bank's card challenge can never carry the card back to the agent's browser. One folded -3 (https://agentcard.com/updates).", "10 September 2026. The changelog entry headed Breaking says `amount_cents` and `charged_amount_cents` are gone from checkout authorisations, preparations and the Issuing transaction webhooks, and renames the checkout SDK's `amountCents` to `amount`, on the day the change shipped, with no earlier notice found. A published behaviour changed for existing clients on the day it was announced takes -3 (https://agentcard.com/updates)." ], "verdict": "Purchases need the user's passkey approval by default, cards carry spending rules, and card creation takes an idempotency key. No status page or rate limits beyond the token endpoint were found. A 10 September change removed webhook amount fields on the day it was announced, and the changelog describes security fixes with no advisory. Issuing costs $5,000 a month.", "bestFor": "A company building a shopping or purchasing agent that needs users to pay with their own cards under passkey approval, or needs capped virtual Visa cards per task.", "strengths": [ "Vault purchases pause for the user's passkey or master password approval by default, and production card creation returns `approval_pending` with an approval link", "Presets cap spend in total and per rolling day, week and month, and restrict merchants, categories, countries, currencies, days and hours, in `strict` or `watch` mode", "`POST /api/v2/cards` requires an `Idempotency-Key`, and `buy_checkout` re-checks the confirmed total and address before paying", "Errors share one envelope with a stable `code`, and each endpoint page lists the codes it can return", "llms.txt indexes 314 Markdown pages, among them one page for each of 118 MCP tools", "A valid security.txt names security@agentcard.com, and a privacy policy of Agentcard's own was published on 21 October 2026" ], "weaknesses": [ "No status page or incident history was found on the site or in the docs. An SLA is listed for Enterprise plans only, with no published text", "The only rate limit with numbers is 30 requests per 5 minutes per IP on the token endpoint", "On 10 September 2026 webhook and checkout amount fields were removed on the day the changelog announced it", "Security fixes are described in changelog prose, such as an app token that could become a person's Vault sign-in (8 October 2026), with no advisory", "The home page FAQ answers Not yet on x402, AP2 and other agent payment protocols", "An app's auto-approval permission on a saved card has no spending limit or end date, per the Vault docs", "Platform access tokens carry one scope, `api`, and the MCP guide sends the client secret itself as the bearer" ], "agentNotes": [ "Mint a platform token with `POST /api/v2/oauth/token` and cache it for its one hour. The endpoint allows 30 requests per 5 minutes per IP", "Send the same `Idempotency-Key` on every retry of `POST /api/v2/cards`, and the same `idempotency_key` on every retry of `buy_checkout`", "Pass `source: \"issued\"` to the MCP `create_card` tool for a card number. Without it the tool may start Vault setup and return a link", "Call `get_card_details` only at the payment form and never log the result. Each read notifies the member and may return `approval_required`", "Treat `transaction.authorized` and `order.*` webhooks as the record of a payment, and deduplicate deliveries on the event `id`", "Read `amount`, `currency` and `amount_display` on checkout results and transaction webhooks. `amount_cents` and `charged_amount_cents` were removed on 10 September 2026" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 52.5 } ], "editorialScores": { "ergonomics": 63, "maintenance": 74, "payments": 42, "reliability": 26, "schema": 80, "security": 71, "transparency": 48 }, "provenanceScore": 87, "checked": { "categories": { "ergonomics": "2026-11-04", "maintenance": "2026-11-04", "payments": "2026-11-04", "reliability": "2026-11-04", "schema": "2026-11-04", "security": "2026-11-04", "transparency": "2026-11-04" }, "last": "2026-11-04", "lastMoved": "2026-11-04", "oldest": "2026-11-04", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install -g agent-cards", "http": "curl -X POST https://api.agentcard.sh/api/v2/oauth/token -d grant_type=client_credentials -d client_id=$AGENTCARD_CLIENT_ID -d client_secret=$AGENTCARD_CLIENT_SECRET", "claudeCode": "claude mcp add agentcard --transport http https://mcp.agentcard.sh/mcp --header \"Authorization: Bearer YOUR_CLIENT_SECRET\"" }, "letme": { "capability": "https://letme.dev/payments.card", "tool": "https://letme.dev/agentcard" }, "area": "payments", "unitPrices": [ { "item": "Purchase Agent request (listed price, free in beta)", "unit": "call", "usd": 0.15, "note": "https://www.agentcard.sh/pricing" }, { "item": "Issuing plan", "unit": "month", "usd": 5000, "note": "$0 per card, 1 per cent revenue share to the customer" }, { "item": "Vault Free plan, up to 5,000 users", "unit": "month", "usd": 0, "note": "Enterprise by quote" }, { "item": "Issued card international transaction", "unit": "pct", "usd": 1, "note": "no annual fee, 0 per cent APR" } ], "provenance": { "legalEntity": "Agentcard Corporation", "domain": "agentcard.com", "domainRegistered": "2000-11-20", "domainNote": "RDAP for agentcard.com gives a registration date of 20 November 2000 and a last change on 17 October 2026. The registration date is when the name was first taken, not when Agentcard acquired it. The API, MCP server and dashboard stay on agentcard.sh.", "endpointOnVendorDomain": true, "terms": "https://agentcard.com/terms", "privacy": "https://agentcard.com/privacy", "statusPage": "", "changelog": "https://agentcard.com/updates", "securityTxt": "valid", "checked": "2026-11-04", "notes": [ "The terms of use (last updated 10 July 2026) name Agentcard Corporation, a Delaware corporation (File No. 10619012), registered office 131 Continental Dr, Suite 305, Newark, DE 19713, and cover the MCP server, CLI, dashboard and API.", "The site moved to agentcard.com in October 2026. robots.txt on www.agentcard.sh names Host agentcard.com, and www.agentcard.sh/terms and /updates answer 301 to agentcard.com.", "Agentcard's own privacy policy at https://agentcard.com/privacy is dated 21 October 2026. It links Rain's issuer privacy policy and account opening notice for the cards.", "Cards are issued by Third National, a Rain company, under a cardholder agreement at https://agentcard.com/card-terms.", "The API answers at api.agentcard.sh, the MCP server at mcp.agentcard.sh and the Vault at vault.agentcard.sh per the docs. We sent no request to those hosts.", "agentcard.com/.well-known/security.txt is valid, with Contact mailto:security@agentcard.com, Expires 2027-10-01 and canonical addresses on agentcard.com and www.agentcard.sh. No status page was found.", "The npm packages name the private repository github.com/tiny-agent-company/tiny-agent-company." ], "score": 87 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/agentcard.json", "live": { "slug": "agentcard", "probe": { "target": "https://api.agentcard.sh", "method": "get", "lastAt": "2026-11-08T14:47:36.614004809Z", "lastOk": true, "lastStatus": 404, "lastMs": 160, "authRequired": false, "uptime24h": 100, "uptime30d": 99.97, "p50ms24h": 160, "p95ms24h": 334, "samples24h": 242, "samples30d": 7411, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 246 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 248, "ok": 248 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 243, "ok": 243 }, { "date": "2026-11-08", "probes": 150, "ok": 150 } ], "since": "2026-10-09T00:00:00Z" }, "versions": [ { "registry": "npm", "name": "@agent-cards/checkout", "version": "0.24.1", "seenAt": "2026-11-08T00:32:14.104718203Z" }, { "registry": "npm", "name": "agent-cards", "version": "0.11.0", "seenAt": "2026-11-08T00:32:13.896393479Z" } ], "npmWeekly": 6790, "securityTxt": { "url": "https://agentcard.com/.well-known/security.txt", "state": "valid", "expires": "2027-10-01T00:00:00.000Z", "checkedAt": "2026-11-07T16:01:10.669523647Z" }, "llmsTxt": { "url": "https://docs.agentcard.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:06.629675119Z" }, "domain": { "domain": "agentcard.sh", "checkedAt": "2026-11-01T14:09:04.459327624Z" }, "pages": [ { "url": "https://www.agentcard.sh/updates", "kind": "changelog", "status": 200, "checkedAt": "2026-11-04T08:36:40.67232636Z", "changedAt": "2026-10-30T05:52:03.96398015Z", "fingerprint": "2fb5bc67fccf" }, { "url": "https://agentcard.com/updates", "kind": "deprecations", "status": 304, "checkedAt": "2026-11-08T14:50:03.469716571Z", "changedAt": "2026-11-07T13:58:48.858029909Z", "fingerprint": "00d2dd35abb3" }, { "url": "https://www.agentcard.sh/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:24:21.584874441Z", "changedAt": "2026-11-07T14:24:21.584874441Z", "fingerprint": "8ad278615fbf" }, { "url": "https://agentcard.com/privacy", "kind": "privacy", "status": 304, "checkedAt": "2026-11-08T14:49:59.332384741Z", "changedAt": "2026-11-07T13:58:44.560719748Z", "fingerprint": "1b700336e4b2" }, { "url": "https://agentcard.com/terms", "kind": "terms", "status": 304, "checkedAt": "2026-11-08T14:50:01.56009023Z", "changedAt": "2026-11-07T13:58:46.819184027Z", "fingerprint": "c2883a20615e" }, { "url": "https://www.agentcard.sh/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-04T08:36:38.841351498Z", "changedAt": "2026-10-27T03:57:29.23803731Z", "fingerprint": "8106fb11f1a0" } ], "updatedAt": "2026-11-08T14:50:03.469716571Z" }, "streak": { "days": 30, "from": "2026-10-09", "sinceWatching": true, "last": { "kind": "breaking", "date": "2026-09-10", "what": "`amount_cents` and `charged_amount_cents` are removed from checkout authorisations, preparations and Issuing transaction webhooks. Read `amount`, `currency` and `amount_display` instead", "source": "https://agentcard.com/updates" }, "best": 30 } }, "answer": "Agentcard scores 52.5 (D) on agent readiness against FluxA AI Wallet's 47 (D), and leads in 6 of 7 scored categories.", "b": { "slug": "fluxa-ai-wallet", "name": "FluxA AI Wallet", "vendor": "FluxA Technology Pte. Ltd.", "vendorUrl": "https://fluxapay.xyz", "kind": "http-api", "category": "agent-wallets", "summary": "FluxA AI Wallet is a hosted agent wallet from FluxA Technology that signs x402 (EIP-3009) USDC payments on Base within budgets a person approves, reached through the fluxa-wallet CLI, a stdio MCP server and agent skills.", "url": "https://www.anchorterminal.com/tools/fluxa-ai-wallet", "markdownUrl": "https://www.anchorterminal.com/tools/fluxa-ai-wallet.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/fluxa-ai-wallet.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/fluxa-ai-wallet.json", "dns": "fluxa-ai-wallet.grade.anchorterminal.com", "repo": "https://github.com/FluxA-Agent-Payment/FluxA-AI-Wallet-MCP", "license": "The CLI and MCP server source is Apache-2.0 (LICENSE file and both package.json files), though the README's last section says MIT. The hosted wallet service is closed, and no terms covering the wallet were found", "transports": [ "http", "stdio" ], "remoteUrl": "https://walletapi.fluxapay.xyz", "packages": [ { "registry": "npm", "name": "@fluxa-pay/fluxa-wallet" }, { "registry": "npm", "name": "@fluxa-pay/fluxa-wallet-mcp" } ], "auth": "mixed", "authNotes": "An agent connects with `fluxa-wallet connect` (or the MCP tool `connect_wallet`), which returns an `authorization_url` on agentwallet.fluxapay.xyz for the owner to approve in a browser. The claim returns an Agent ID, a token and an RS256 JWT, stored in `~/.fluxa-ai-wallet-mcp/config.json` (mode 0600) or injected as `AGENT_ID`, `AGENT_TOKEN` and `AGENT_JWT`. The owner picks the token's validity (1h, 24h, 7d, 1mo, 180d or 1y; the server suggests 180 days locally and 7 days in cloud or container environments), and the JWT is refreshed with the token. `token_expired` and `token_revoked` return `reconnect_required`. The legacy `init` registers an Agent ID with an unauthenticated `POST https://agentid.fluxapay.xyz/register`. Spending needs a mandate the owner signs in the browser. AgentMarket commands can instead use `fxa_live_` keys with a spend limit, revocable from the CLI.", "pricing": "usage", "pricingNotes": "No fee schedule for the wallet, x402 signing, payouts, payment links or refunds was found in the repository, the skills or the AgentMarket pricing, terms and llms.txt pages (checked 2026-11-07). Merchants set x402 prices. Agent card products list their fees through `fluxa-wallet card types`, which needs a connected wallet, so those fees were not read. The wallet site and docs at agentwallet.fluxapay.xyz and docs.fluxapay.xyz could not be read, so whether opening a wallet needs a card is unchecked. AgentMarket's Balance is $1 = 1 Balance, with Units bundles from $1 to $25.", "priceSummary": "Pay per use", "where": "both", "x402": { "level": "partial", "evidence": "The wallet signs x402 `exact` (EIP-3009) payment authorisations for USDC on Base and Base Sepolia as a buyer (`fluxa-wallet x402 --mandate \u003cid\u003e --payload \u003c402 body\u003e`, MCP `request_x402_payment` and `request_x402_v3_payment`), and its payment links can be paid over x402 so another agent can pay the holder (https://github.com/FluxA-Agent-Payment/FluxA-AI-Wallet-MCP/blob/main/skills/fluxa-agent-wallet/INTEGRATION-GUIDE-CHARGE-AGENT.md, checked 2026-11-07). FluxA's own wallet API is not paid over x402, MPP or L402.", "endpoints": [] }, "toolCount": 15, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-07" }, "docsUrl": "https://docs.fluxapay.xyz/", "capabilities": [ "payments.x402", "wallet.spend-limits", "wallet.onchain", "payments.card", "auth.agent-identity" ], "tags": [ "hosted", "official", "open-source", "apache-2.0", "cli", "mcp", "stdio", "skills", "typescript", "wallet", "x402", "stablecoins", "virtual-cards", "usdc", "base" ], "lastRelease": "2026-11-06", "graded": true, "anchor": { "graded": true, "score": 47, "grade": "D", "agentReady": false, "rank": 1164, "ranked": true, "rankOf": 1513, "categoryRank": 11, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 60, "maintenance": 66, "payments": 45, "reliability": 20, "schema": 61, "security": 52, "transparency": 32 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-11-07" }, "negative": 0, "verdict": "Every spend runs against a mandate the owner signs in a browser, with a budget, a validity window and an optional host allowlist, and payouts need approval or a mandate. The published MCP package is 0.2.0 from March 2026 against 0.6.0 in the repository, and no status page, fee schedule, wallet terms or custody statement was found.", "bestFor": "An agent in a CLI-capable client that needs to pay x402 APIs, send USDC on Base or receive payments through links, inside budgets a person signs.", "strengths": [ "Spending runs against owner-signed mandates with a limit, a validity window and an optional host allowlist, enforced by the wallet API", "Payouts need per-payout browser approval unless a signed mandate is passed, and a required `payout_id` makes repeats return the same payout", "The CLI returns JSON with error codes, `next_command` hints and `retryable` and `reconnect_required` flags", "Client source is public under Apache-2.0, with 25 CLI releases on npm since March 2026, the latest on 6 November 2026", "Payment links let another agent pay the holder over x402, and refunds of link payments are supported" ], "weaknesses": [ "The published MCP package is 0.2.0 from 2 March 2026 with 13 tools, while the repository says 0.6.0 with 15", "No status page, rate limit, SLA, fee schedule or security contact was found", "Who holds the wallet keys is not stated. The docs say FluxA Wallet signs and call it managed", "The only terms and privacy policy read are AgentMarket's, which do not mention the wallet, cards, KYC or payouts", "The skill steers agents to paid APIs over free search and to request budgets for at least 100 calls by default" ], "agentNotes": [ "Run `fluxa-wallet status` first. If `configured` and `wallet_linked` are true, skip `connect`; otherwise show the `authorization_url` and wait with `connect-status --wait 100`", "On `token_expired` or `token_revoked`, reconnect with the same `--agent-id`. Never run `init` to recover, which creates a new identity", "Pass a unique `--id` on every `payout` and reuse it on retry; a repeat returns the existing payout instead of paying twice", "Check `fluxa-wallet mandates` for a signed mandate with enough remaining budget before creating one, and size new budgets to the task", "Install the CLI from npm, not the MCP package, whose npm release 0.2.0 lacks `connect_wallet` and `get_wallet_connection`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 47 } ], "editorialScores": { "ergonomics": 60, "maintenance": 66, "payments": 45, "reliability": 20, "schema": 61, "security": 52, "transparency": 26 }, "provenanceScore": 38, "checked": { "categories": { "ergonomics": "2026-11-07", "maintenance": "2026-11-07", "payments": "2026-11-07", "reliability": "2026-11-07", "schema": "2026-11-07", "security": "2026-11-07", "transparency": "2026-11-07" }, "last": "2026-11-07", "oldest": "2026-11-07", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install -g @fluxa-pay/fluxa-wallet" }, "letme": { "capability": "https://letme.dev/payments.x402", "tool": "https://letme.dev/fluxa-ai-wallet" }, "sameCompany": [ "fluxa-agentmarket" ], "area": "payments", "provenance": { "legalEntity": "FluxA Technology Pte. Ltd.", "domain": "fluxapay.xyz", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "", "securityTxt": "unknown", "checked": "2026-11-07", "notes": [ "The legal entity is from the footer of agentmarket.fluxapay.xyz, \"© 2025 FluxA Technology Pte. Ltd. All rights reserved.\", the same on the about, terms, privacy and pricing pages. No registration number, address or country is given on those pages. A web search result names a companieshouse.sg page for FluxA Technology Pte Ltd with UEN 202555700C; that host could not be fetched, so the register entry is unread.", "AgentMarket's terms (effective 14 January 2026) and privacy policy (updated 14 January 2026) describe the marketplace and its Balance and do not mention the Agent Wallet, cards, KYC or payouts, so they are not recorded as the wallet's terms. The terms name no entity in their text and no governing law; contact support.fluxapay@fluxapay.xyz.", "fluxapay.xyz, agentwallet.fluxapay.xyz and docs.fluxapay.xyz could not be read. Each robots.txt fetch was refused for want of an approval on 7 November 2026, so nothing on those hosts was fetched. The wallet's own terms, privacy policy, fees, security.txt and docs are unchecked.", "https://agentmarket.fluxapay.xyz/.well-known/security.txt answered a client error. The repository has no SECURITY.md.", "The wallet API, Agent ID API and approval pages are on fluxapay.xyz subdomains named in the CLI source. agentmarket.fluxapay.xyz's robots.txt allows / and disallows /api/ (except /api/discover and /api/llm/skills.md) and /console/; nothing disallowed was fetched.", "unchecked: RDAP for fluxapay.xyz, the MCP registry, the Wayback Machine, GitHub stars and issues (the GitHub API refused the session) and npm download counts." ], "score": 38 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/fluxa-ai-wallet.json", "live": { "slug": "fluxa-ai-wallet", "probe": { "target": "https://walletapi.fluxapay.xyz", "method": "get", "lastAt": "2026-11-08T14:47:50.695700215Z", "lastOk": true, "lastStatus": 404, "lastMs": 532, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 542, "p95ms24h": 603, "samples24h": 90, "samples30d": 90, "days": [ { "date": "2026-11-08", "probes": 90, "ok": 90 } ], "since": "2026-11-08T00:00:00Z" }, "updatedAt": "2026-11-08T14:47:50.695700215Z" }, "streak": { "days": 0, "from": "2026-11-08", "sinceWatching": true, "best": 0 } }, "edges": [ { "by": 36, "category": "transparency", "leads": "agentcard", "name": "Transparency \u0026 trust", "reasons": { "a": "A closed service. The repository named in the npm packages is private, `agent-cards` declares no licence and `@agent-cards/checkout` is marked as having none (per the 9 October check). The terms of use, updated 10 July 2026, name the legal entity and its addresses, cover the API, MCP server and CLI, and state what a card is and who issues it (13 of 30). Agentcard now publishes its own privacy policy at agentcard.com/privacy, last updated 21 October 2026. It lists what is collected, including session recordings in the dashboard, says personal data isn't sold, holds a one-time card credential for at most 45 minutes, and keeps other data as long as the account is active or as needed, with no fixed period and no public DPA (the Enterprise plans offer one) (15 of 30). The older token path is kept with a note, and the changelog labels some changes Breaking on the day they ship. No deprecation policy or advance notice was found (5 of 20). The privacy policy names Crossmint, Coinbase, Third National, Sumsub, Visa and Stripe, lists other providers by kind (AI model providers, browser session providers, analytics and error monitoring) and names Ahrefs Analytics, PostHog and Vector, and says data is transferred to the United States. The CLI README discloses telemetry and two settings that turn it off (15 of 20). 13 + 15 + 5 + 15 = 48.", "b": "The CLI and MCP server source is Apache-2.0 per the LICENSE file and both package.json files, while the README's last section says MIT. The hosted wallet is closed, and no terms covering it were found. AgentMarket's terms describe only the marketplace (15 of 30). AgentMarket's privacy policy of 14 January 2026 names Stripe and model providers and gives no retention periods, and it does not mention wallet addresses, KYC profiles, card data or payouts, which the CLI collects or handles. The wallet's own privacy policy was unreachable (5 of 30). The README marks `init` and `link-wallet` as legacy but still supported, and the skill pins a minimum CLI version; no deprecation policy or dated notice was found (3 of 20). Stripe is the only provider named; no card issuer, KYC provider, custody provider or data location is named. The CLI and MCP code send no telemetry (3 of 20). Total 26." }, "scores": { "a": 68, "b": 32 } }, { "by": 19, "category": "schema", "leads": "agentcard", "name": "Schema \u0026 documentation", "reasons": { "a": "A public OpenAPI 3.1.0 file at docs.agentcard.sh/openapi.json, version 2.0.0, with 20 paths and 21 operations for tokens, connections, identity checks, `/buy` and cards. The Vault, preset, webhook endpoint and Blooio routes in the API reference are Markdown pages with no entry in the file. Each MCP tool has a page with typed inputs and returns (17 of 25). We read the description file and the Markdown pages, not the rendered reference. llms.txt indexes 379 pages, each with a Markdown twin (10). Tool and endpoint descriptions say what a call does, when to use it and when not to, for example that `get_card_details` is for the payment form only and `get_card_balance` is preferred otherwise (17 of 20). The OpenAPI file has 36 enums and 31 required lists, and amounts are integers in cents. `/buy` takes free text in `ask`, and `preset` accepts a name, a list, inline JSON or an object (11 of 15). Every operation documents error responses with named codes, the file holds 37 examples, and MCP pages show captured error results (13 of 15). The API is versioned in the path as `/api/v2`, the older `/api/v1/oauth/token` path still answers, and a public changelog is dated almost daily to 28 September 2026. The changelog mixes product and API changes and the OpenAPI version has no dated history (12 of 15).", "b": "No OpenAPI file or reference for the wallet API was found; the README shows sample requests for five endpoints. The MCP server's 15 tools in the 0.6.0 source carry typed Zod input schemas, and the CLI's flags are documented in prose in the skill files and `--help`. The MCP server is the secondary surface and its npm release is 0.2.0, so 12 of 25. The skill and its 18 Markdown guides are written for agents, and AgentMarket's llms.txt describes the wallet's payment role (10). `connect_wallet`, `init_agent_id` and `create_intent_mandate` say when to use them and when not to, and the skill has a when-to-use table per capability, while the payment-link and status tools have one-line descriptions (12 of 20). Zod enums for validity, runtime, hosting and currency, a regex on payout amounts and strict objects, but the x402 requirement fields are plain strings and `outputSchema` is a free-form record (10 of 15). The README has an example for every MCP tool, the skills give CLI examples and output, and error codes are tabled for mandates, payouts, cards and connections (12 of 15). Semver on npm with 25 CLI versions and a version line in the skill, two git tags and no changelog (5 of 15). Total 61." }, "scores": { "a": 80, "b": 61 } }, { "by": 19, "category": "security", "leads": "agentcard", "name": "Security \u0026 auth", "reasons": { "a": "OAuth 2.0 client credentials. Client secrets are shown once, clients are separate for sandbox and production and can be revoked, platform tokens last one hour, and user connection tokens last one hour with refresh tokens that rotate on each use. Platform tokens carry the single scope `api`, and the MCP guide sends the client secret itself as the bearer for organisation tools. No secret travels in a URL (23 of 30). Vault purchases wait for the user's passkey or master password by default, production card creation returns `approval_pending`, users can require approval for each reveal of card details, and presets cap spend and restrict merchants, categories, places, currencies and hours. A connected app gets `read_only` when it tries to change presets, and approval tools answer `personal_surface_only` to a connected session. An app's auto-approval permission on a saved card has no spending limit or end date per the docs (18 of 20). The Purchase API returns merchant catalogue text to the agent. Money moves only when the agent echoes a cart `hash`, `buy_checkout` re-checks `expected_total_cents` and the address, and preset rules ignore the `merchant` text an agent sends. No guidance that names untrusted content or prompt injection was found (9 of 15). Webhooks cover cards, transactions, approvals and orders, deliveries are logged, each read of card credentials notifies the member, and transactions are listed by API and tool (11 of 15). agentcard.com/.well-known/security.txt is valid on 4 November 2026, with the contact security@agentcard.com and an expiry of 1 October 2027, and states no acknowledgement time (7). The Enterprise plans list a SOC 2 report and a pen-test summary, and the Trust Centre on app.vanta.com was closed to us by robots.txt on 9 October, so the report wasn't read (3). No bug bounty or published advisory was found. The changelog describes security fixes in prose (10 of 20). 23 + 18 + 9 + 11 + 10 = 71.", "b": "The agent holds an Agent ID, a token whose validity the owner picks from 1 hour to 1 year at browser approval, and a short-lived RS256 JWT refreshed from the token; `token_revoked` exists. Credentials sit in a 0600 JSON file or environment variables. The token is not scoped, since limits live in mandates, and legacy `init` tokens are described as not expiring. Agent VCs are audience-bound and rejected by FluxA's own endpoints. No secret travels in a URL (22 of 30). Every x402 payment needs a mandate the owner signs, with a limit, a validity and an optional host allowlist enforced by the wallet API, payouts need per-payout approval unless a mandate covers them, cards need a mandate and KYC, and linked-card mandates are scoped to one merchant. A payout mandate sets no payee allowlist that was documented, and the skill tells agents to request budgets for at least 100 calls by default (16 of 20). The wallet returns little third-party content itself, but the skill sends agents to third-party x402 APIs, ClawPI posts and a remote announcement.md with no guidance on treating them as untrusted, its description steers agents to paid APIs even when a free web search looks enough, and the daily check-in runs `npx -y @fluxa-pay/fluxa-wallet@latest` unpinned twice a day (4 of 15). `mandates` lists limit, spent and remaining, with `recent-transactions`, `received-records` and payout status by CLI, and the MCP server writes a local audit log; the wallet app's logs were not read (10 of 15). No SECURITY.md, disclosure policy, bug bounty or certification was found, and agentmarket.fluxapay.xyz has no security.txt; fluxapay.xyz's is unchecked (0 of 20). Total 52." }, "scores": { "a": 71, "b": 52 } }, { "by": 8, "category": "maintenance", "leads": "agentcard", "name": "Maintenance \u0026 community", "reasons": { "a": "The newest changelog entry is dated 27 October 2026, and `@agent-cards/checkout` 0.23.6 was published on 9 October 2026 per the 9 October check (30). The changelog has 176 dated entries from 27 February to 27 October 2026, 82 of them in the 90 days from 6 August (20). The service is closed and the repository named in the packages is private. Support is an email address, a support chat reachable through MCP tools and the CLI, and an `ask_agentcard_engineer` tool. None was tested (10 of 15). The CLI and the TypeScript checkout SDK were current on 9 October, and npm wasn't re-read. Presence in the official MCP registry was not checked (10 of 15). The CLI has 19 runtime dependencies, needs Node 22 or later and declares no licence. CI is not visible (4 of 10). 30 + 20 + 10 + 10 + 4 = 74.", "b": "`@fluxa-pay/fluxa-wallet` 0.6.0 was published on 6 November 2026, one day before this check (30). Eight CLI releases since 10 August 2026, among them 0.5.2 on 14 October, 0.5.3 on 25 October and 0.5.6, 0.5.7 and 0.6.0 between 3 and 6 November (20). The repository merged 43 pull requests, all from the organisation's own branches, and commits run weekly. Issues and outside pull requests could not be read because the GitHub API refused the session. Discord and a support address are linked from AgentMarket and were not tested (8 of 25). Graded as an API, the line asks for current official SDKs. The CLI is current, but there is no SDK library and the MCP package on npm has not been published since 2 March 2026 (5 of 15). 68 node:test cases exist with no CI workflow, neither npm package declares its repository, and the MCP package's last release lags the source by eight months (3 of 10). Total 66." }, "scores": { "a": 74, "b": 66 } }, { "by": 6, "category": "reliability", "leads": "agentcard", "name": "Reliability", "reasons": { "a": "Graded as a hosted service on the REST API at api.agentcard.sh and the MCP server at mcp.agentcard.sh. The site moved to agentcard.com in October 2026, and www.agentcard.sh pages answer 301 to it. No status page was found. The site footer and the docs link none (0). With no readable incident history the record takes the default (5). The changelog of 22 September 2026 records a fixed startup failure in which a deploy could make every API request return an error, with no duration. The only rate limit with numbers is 30 requests per 5 minutes per IP on the token endpoint, and the MCP `create_card` tool can answer `rate_limited` with advice to wait about a minute (5 of 15, the 9 October partial kept). `POST /api/v2/cards` requires an `Idempotency-Key`, `buy_checkout` and the organisation `create_card` tool take an `idempotency_key`, webhooks are delivered at least once with advice to deduplicate on `id`, and the docs say never to retry a payment automatically. No 429 response or `Retry-After` header is documented (10 of 15). The pricing page lists an SLA with uptime and response-time guarantees in writing for the Enterprise plans, and no SLA text is published. A listed SLA nobody could read scores 0 in this run (0 of 10). Vault and Issuing carry no beta label. The Purchase Agent is free in beta and `create_card` can return `beta_capacity_reached` (6 of 10, the 9 October partial kept). 0 + 5 + 5 + 10 + 0 + 6 = 26.", "b": "Graded with the hosted lines, because signing, mandates and approvals all run on FluxA's wallet API and the CLI and MCP server only wrap it, as kite-agent-passport and kane-cli were read. No status page was found in the repository, the skills or AgentMarket's pages. fluxapay.xyz and the wallet and docs hosts could not be read, so a status page there is unchecked and scored absent (0). With no readable history the record takes the default (5). No rate limit with numbers was found (0). The connection service treats 429 `slow_down` as wait and poll and marks errors `retryable`, the skill says a 503 means retry shortly, payouts require a caller-chosen `payout_id` that returns the existing payout on a repeat, `--biz-id` rejects a duplicate with 409, and card create and recharge resume with `--request-id` instead of paying again. No Retry-After or backoff schedule is documented for the wallet API (10 of 15). No SLA was found (0). No beta label was found on the wallet in what was read, but both packages are at 0.x, agent cards sit behind a waitlist and the wallet site was unread (5 of 10). Total 20." }, "scores": { "a": 26, "b": 20 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Agentcard Corporation", "b": "FluxA Technology Pte. Ltd.", "name": "Vendor" }, { "a": "https://api.agentcard.sh", "b": "https://walletapi.fluxapay.xyz", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP, stdio", "name": "Transports" }, { "a": "OAuth", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Pay per use", "name": "Pricing" }, { "a": "no", "b": "payer tooling only", "name": "x402" }, { "a": "Proprietary service under Agentcard's terms of use. The `agent-cards` CLI on npm declares no licence, `@agent-cards/checkout` is marked as having none, and the repository they name is private", "b": "The CLI and MCP server source is Apache-2.0 (LICENSE file and both package.json files), though the README's last section says MIT. The hosted wallet service is closed, and no terms covering the wallet were found", "name": "Licence" }, { "a": "none", "b": "15", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-10-09", "b": "2026-11-06", "name": "Last release" }, { "a": "2026-07-10", "b": "no document linked", "name": "Terms last updated" }, { "a": "2026-10-21", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not read yet", "name": "Customer content may train models" }, { "a": "yes", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "not read yet", "name": "Arbitration or class-action waiver" }, { "a": "33k npm/wk", "b": "none", "name": "Popularity" } ], "faq": [ { "answer": "Agentcard scores 52.5 (D) on agent readiness against FluxA AI Wallet's 47 (D), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, Agentcard or FluxA AI Wallet?" }, { "answer": "Agentcard uses an OAuth sign-in. FluxA AI Wallet takes an API key or an OAuth sign-in.", "question": "Do Agentcard and FluxA AI Wallet need an API key?" }, { "answer": "Yes. Agentcard has a hosted endpoint at https://api.agentcard.sh and FluxA AI Wallet at https://walletapi.fluxapay.xyz.", "question": "Can an agent call Agentcard and FluxA AI Wallet without installing anything?" }, { "answer": "No open-source release is listed for Agentcard. FluxA AI Wallet is open source (The CLI and MCP server source is Apache-2.0 (LICENSE file and both package.json files), though the README's last section says MIT. The hosted wallet service is closed, and no terms covering the wallet were found).", "question": "Are Agentcard and FluxA AI Wallet open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 26 against 20", "Schema \u0026 documentation, 80 against 61", "Security \u0026 auth, 71 against 52", "Maintenance \u0026 community, 74 against 66", "Transparency \u0026 trust, 68 against 32" ], "also": null, "goodFor": "A company building a shopping or purchasing agent that needs users to pay with their own cards under passkey approval, or needs capped virtual Visa cards per task.", "slug": "agentcard", "watchFor": "No status page or incident history was found on the site or in the docs. An SLA is listed for Enterprise plans only, with no published text" }, { "aheadOn": null, "also": [ "Runs on your own machine", "Open source", "No incidents deducted, where Agentcard loses 6 points for them" ], "goodFor": "An agent in a CLI-capable client that needs to pay x402 APIs, send USDC on Base or receive payments through links, inside budgets a person signs.", "slug": "fluxa-ai-wallet", "watchFor": "The published MCP package is 0.2.0 from 2 March 2026 with 13 tools, while the repository says 0.6.0 with 15" } ], "history": { "agentcard": [ { "causes": [ "product", "correction" ], "date": "2026-11-04", "delta": -4.3, "from": 56.8, "fromGrade": "C", "to": 52.5, "toGrade": "D" }, { "causes": [ "evidence" ], "date": "2026-10-27", "delta": 0.3, "from": 56.5, "fromGrade": "C", "to": 56.8, "toGrade": "C" } ], "fluxa-ai-wallet": null }, "job": { "capability": "payments.card", "name": "Card payments" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcard-vs-crossmint.json", "title": "Agentcard vs Crossmint API + Docs MCP", "url": "https://www.anchorterminal.com/compare/agentcard-vs-crossmint" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-kite-agent-passport.json", "title": "Agentcard vs Kite Agent Passport", "url": "https://www.anchorterminal.com/compare/agentcard-vs-kite-agent-passport" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.json", "title": "Agentcard vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-sponge-wallet.json", "title": "Agentcard vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/agentcard-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-stripe-mcp.json", "title": "Agentcard vs Stripe API + MCP", "url": "https://www.anchorterminal.com/compare/agentcard-vs-stripe-mcp" }, { "json": "https://www.anchorterminal.com/compare/circle-wallets-vs-fluxa-ai-wallet.json", "title": "Circle Wallets (Agent Wallets, Programmable Wallets) vs FluxA AI Wallet", "url": "https://www.anchorterminal.com/compare/circle-wallets-vs-fluxa-ai-wallet" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-fluxa-ai-wallet.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs FluxA AI Wallet", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-fluxa-ai-wallet" }, { "json": "https://www.anchorterminal.com/compare/circle-gateway-nanopayments-vs-fluxa-ai-wallet.json", "title": "Circle Gateway Nanopayments vs FluxA AI Wallet", "url": "https://www.anchorterminal.com/compare/circle-gateway-nanopayments-vs-fluxa-ai-wallet" }, { "json": "https://www.anchorterminal.com/compare/fluxa-agentmarket-vs-fluxa-ai-wallet.json", "title": "FluxA AgentMarket vs FluxA AI Wallet", "url": "https://www.anchorterminal.com/compare/fluxa-agentmarket-vs-fluxa-ai-wallet" }, { "json": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-kite-agent-passport.json", "title": "FluxA AI Wallet vs Kite Agent Passport", "url": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-kite-agent-passport" }, { "json": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-nevermined.json", "title": "FluxA AI Wallet vs Nevermined API + MCP", "url": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-nevermined" }, { "json": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-openfort.json", "title": "FluxA AI Wallet vs Openfort", "url": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-openfort" }, { "json": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-payman.json", "title": "FluxA AI Wallet vs Payman Genie MCP", "url": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-payman" }, { "json": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-privy.json", "title": "FluxA AI Wallet vs Privy Wallets (server wallets, agent wallets, policy engine)", "url": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-privy" }, { "json": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-sponge-wallet.json", "title": "FluxA AI Wallet vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-turnkey-agentic-wallets.json", "title": "FluxA AI Wallet vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-turnkey-agentic-wallets" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-circle-wallets.json", "title": "Agentcard vs Circle Wallets (Agent Wallets, Programmable Wallets)", "url": "https://www.anchorterminal.com/compare/agentcard-vs-circle-wallets" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-coinbase-cdp-agentkit.json", "title": "Agentcard vs Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP)", "url": "https://www.anchorterminal.com/compare/agentcard-vs-coinbase-cdp-agentkit" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-openfort.json", "title": "Agentcard vs Openfort", "url": "https://www.anchorterminal.com/compare/agentcard-vs-openfort" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-privy.json", "title": "Agentcard vs Privy Wallets (server wallets, agent wallets, policy engine)", "url": "https://www.anchorterminal.com/compare/agentcard-vs-privy" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-turnkey-agentic-wallets.json", "title": "Agentcard vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/agentcard-vs-turnkey-agentic-wallets" }, { "json": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-self-agent-vault.json", "title": "FluxA AI Wallet vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-self-agent-vault" } ], "panel": null, "scores": [ { "agentcard": 26, "by": 6, "edge": "agentcard", "fluxa-ai-wallet": 20, "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "agentcard": 80, "by": 19, "edge": "agentcard", "fluxa-ai-wallet": 61, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "agentcard": 63, "by": 3, "edge": "agentcard", "fluxa-ai-wallet": 60, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "agentcard": 71, "by": 19, "edge": "agentcard", "fluxa-ai-wallet": 52, "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "agentcard": 42, "by": 3, "edge": "fluxa-ai-wallet", "fluxa-ai-wallet": 45, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "agentcard": 74, "by": 8, "edge": "agentcard", "fluxa-ai-wallet": 66, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "agentcard": 68, "by": 36, "edge": "agentcard", "fluxa-ai-wallet": 32, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Agentcard scores 52.5 (D) on agent readiness against FluxA AI Wallet's 47 (D), and leads in 6 of 7 scored categories. Both do card payments.", "tasks": null, "tutorials": [], "verdicts": { "agentcard": "Purchases need the user's passkey approval by default, cards carry spending rules, and card creation takes an idempotency key. No status page or rate limits beyond the token endpoint were found. A 10 September change removed webhook amount fields on the day it was announced, and the changelog describes security fixes with no advisory. Issuing costs $5,000 a month.", "fluxa-ai-wallet": "Every spend runs against a mandate the owner signs in a browser, with a budget, a validity window and an optional host allowlist, and payouts need approval or a mandate. The published MCP package is 0.2.0 from March 2026 against 0.6.0 in the repository, and no status page, fee schedule, wallet terms or custody statement was found." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/agentcard-vs-fluxa-ai-wallet", "json": "https://www.anchorterminal.com/compare/agentcard-vs-fluxa-ai-wallet.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/agentcard-vs-fluxa-ai-wallet.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/agentcard-vs-fluxa-ai-wallet.min.md" }, "markdown": "Agentcard scores 52.5 (D) on agent readiness against FluxA AI Wallet's 47 (D), and leads in 6 of 7 scored categories. Both do card payments.\n\n- Agentcard: grade D, 52.5/100, rank #989 of 1513. Markdown https://www.anchorterminal.com/tools/agentcard.md · JSON https://www.anchorterminal.com/api/v1/tools/agentcard.json\n- FluxA AI Wallet: grade D, 47/100, rank #1164 of 1513. Markdown https://www.anchorterminal.com/tools/fluxa-ai-wallet.md · JSON https://www.anchorterminal.com/api/v1/tools/fluxa-ai-wallet.json\n- Best agent wallets and spending controls: https://www.anchorterminal.com/best/agent-wallets/index.md\n- All 77 wallets comparisons: https://www.anchorterminal.com/compare/agent-wallets/index.md\n\n## Which one, for what\n\n### Agentcard (D)\n\nGood for: A company building a shopping or purchasing agent that needs users to pay with their own cards under passkey approval, or needs capped virtual Visa cards per task.\n\nAhead on:\n- Reliability, 26 against 20\n- Schema \u0026 documentation, 80 against 61\n- Security \u0026 auth, 71 against 52\n- Maintenance \u0026 community, 74 against 66\n- Transparency \u0026 trust, 68 against 32\n\nWatch for: No status page or incident history was found on the site or in the docs. An SLA is listed for Enterprise plans only, with no published text\n\n### FluxA AI Wallet (D)\n\nGood for: An agent in a CLI-capable client that needs to pay x402 APIs, send USDC on Base or receive payments through links, inside budgets a person signs.\n\nAlso in its favour:\n- Runs on your own machine\n- Open source\n- No incidents deducted, where Agentcard loses 6 points for them\n\nWatch for: The published MCP package is 0.2.0 from 2 March 2026 with 13 tools, while the repository says 0.6.0 with 15\n\n\n## Why the edge\n\n### Transparency \u0026 trust: Agentcard +36\n\n- Agentcard (68): A closed service. The repository named in the npm packages is private, `agent-cards` declares no licence and `@agent-cards/checkout` is marked as having none (per the 9 October check). The terms of use, updated 10 July 2026, name the legal entity and its addresses, cover the API, MCP server and CLI, and state what a card is and who issues it (13 of 30). Agentcard now publishes its own privacy policy at agentcard.com/privacy, last updated 21 October 2026. It lists what is collected, including session recordings in the dashboard, says personal data isn't sold, holds a one-time card credential for at most 45 minutes, and keeps other data as long as the account is active or as needed, with no fixed period and no public DPA (the Enterprise plans offer one) (15 of 30). The older token path is kept with a note, and the changelog labels some changes Breaking on the day they ship. No deprecation policy or advance notice was found (5 of 20). The privacy policy names Crossmint, Coinbase, Third National, Sumsub, Visa and Stripe, lists other providers by kind (AI model providers, browser session providers, analytics and error monitoring) and names Ahrefs Analytics, PostHog and Vector, and says data is transferred to the United States. The CLI README discloses telemetry and two settings that turn it off (15 of 20). 13 + 15 + 5 + 15 = 48.\n- FluxA AI Wallet (32): The CLI and MCP server source is Apache-2.0 per the LICENSE file and both package.json files, while the README's last section says MIT. The hosted wallet is closed, and no terms covering it were found. AgentMarket's terms describe only the marketplace (15 of 30). AgentMarket's privacy policy of 14 January 2026 names Stripe and model providers and gives no retention periods, and it does not mention wallet addresses, KYC profiles, card data or payouts, which the CLI collects or handles. The wallet's own privacy policy was unreachable (5 of 30). The README marks `init` and `link-wallet` as legacy but still supported, and the skill pins a minimum CLI version; no deprecation policy or dated notice was found (3 of 20). Stripe is the only provider named; no card issuer, KYC provider, custody provider or data location is named. The CLI and MCP code send no telemetry (3 of 20). Total 26.\n\n### Schema \u0026 documentation: Agentcard +19\n\n- Agentcard (80): A public OpenAPI 3.1.0 file at docs.agentcard.sh/openapi.json, version 2.0.0, with 20 paths and 21 operations for tokens, connections, identity checks, `/buy` and cards. The Vault, preset, webhook endpoint and Blooio routes in the API reference are Markdown pages with no entry in the file. Each MCP tool has a page with typed inputs and returns (17 of 25). We read the description file and the Markdown pages, not the rendered reference. llms.txt indexes 379 pages, each with a Markdown twin (10). Tool and endpoint descriptions say what a call does, when to use it and when not to, for example that `get_card_details` is for the payment form only and `get_card_balance` is preferred otherwise (17 of 20). The OpenAPI file has 36 enums and 31 required lists, and amounts are integers in cents. `/buy` takes free text in `ask`, and `preset` accepts a name, a list, inline JSON or an object (11 of 15). Every operation documents error responses with named codes, the file holds 37 examples, and MCP pages show captured error results (13 of 15). The API is versioned in the path as `/api/v2`, the older `/api/v1/oauth/token` path still answers, and a public changelog is dated almost daily to 28 September 2026. The changelog mixes product and API changes and the OpenAPI version has no dated history (12 of 15).\n- FluxA AI Wallet (61): No OpenAPI file or reference for the wallet API was found; the README shows sample requests for five endpoints. The MCP server's 15 tools in the 0.6.0 source carry typed Zod input schemas, and the CLI's flags are documented in prose in the skill files and `--help`. The MCP server is the secondary surface and its npm release is 0.2.0, so 12 of 25. The skill and its 18 Markdown guides are written for agents, and AgentMarket's llms.txt describes the wallet's payment role (10). `connect_wallet`, `init_agent_id` and `create_intent_mandate` say when to use them and when not to, and the skill has a when-to-use table per capability, while the payment-link and status tools have one-line descriptions (12 of 20). Zod enums for validity, runtime, hosting and currency, a regex on payout amounts and strict objects, but the x402 requirement fields are plain strings and `outputSchema` is a free-form record (10 of 15). The README has an example for every MCP tool, the skills give CLI examples and output, and error codes are tabled for mandates, payouts, cards and connections (12 of 15). Semver on npm with 25 CLI versions and a version line in the skill, two git tags and no changelog (5 of 15). Total 61.\n\n### Security \u0026 auth: Agentcard +19\n\n- Agentcard (71): OAuth 2.0 client credentials. Client secrets are shown once, clients are separate for sandbox and production and can be revoked, platform tokens last one hour, and user connection tokens last one hour with refresh tokens that rotate on each use. Platform tokens carry the single scope `api`, and the MCP guide sends the client secret itself as the bearer for organisation tools. No secret travels in a URL (23 of 30). Vault purchases wait for the user's passkey or master password by default, production card creation returns `approval_pending`, users can require approval for each reveal of card details, and presets cap spend and restrict merchants, categories, places, currencies and hours. A connected app gets `read_only` when it tries to change presets, and approval tools answer `personal_surface_only` to a connected session. An app's auto-approval permission on a saved card has no spending limit or end date per the docs (18 of 20). The Purchase API returns merchant catalogue text to the agent. Money moves only when the agent echoes a cart `hash`, `buy_checkout` re-checks `expected_total_cents` and the address, and preset rules ignore the `merchant` text an agent sends. No guidance that names untrusted content or prompt injection was found (9 of 15). Webhooks cover cards, transactions, approvals and orders, deliveries are logged, each read of card credentials notifies the member, and transactions are listed by API and tool (11 of 15). agentcard.com/.well-known/security.txt is valid on 4 November 2026, with the contact security@agentcard.com and an expiry of 1 October 2027, and states no acknowledgement time (7). The Enterprise plans list a SOC 2 report and a pen-test summary, and the Trust Centre on app.vanta.com was closed to us by robots.txt on 9 October, so the report wasn't read (3). No bug bounty or published advisory was found. The changelog describes security fixes in prose (10 of 20). 23 + 18 + 9 + 11 + 10 = 71.\n- FluxA AI Wallet (52): The agent holds an Agent ID, a token whose validity the owner picks from 1 hour to 1 year at browser approval, and a short-lived RS256 JWT refreshed from the token; `token_revoked` exists. Credentials sit in a 0600 JSON file or environment variables. The token is not scoped, since limits live in mandates, and legacy `init` tokens are described as not expiring. Agent VCs are audience-bound and rejected by FluxA's own endpoints. No secret travels in a URL (22 of 30). Every x402 payment needs a mandate the owner signs, with a limit, a validity and an optional host allowlist enforced by the wallet API, payouts need per-payout approval unless a mandate covers them, cards need a mandate and KYC, and linked-card mandates are scoped to one merchant. A payout mandate sets no payee allowlist that was documented, and the skill tells agents to request budgets for at least 100 calls by default (16 of 20). The wallet returns little third-party content itself, but the skill sends agents to third-party x402 APIs, ClawPI posts and a remote announcement.md with no guidance on treating them as untrusted, its description steers agents to paid APIs even when a free web search looks enough, and the daily check-in runs `npx -y @fluxa-pay/fluxa-wallet@latest` unpinned twice a day (4 of 15). `mandates` lists limit, spent and remaining, with `recent-transactions`, `received-records` and payout status by CLI, and the MCP server writes a local audit log; the wallet app's logs were not read (10 of 15). No SECURITY.md, disclosure policy, bug bounty or certification was found, and agentmarket.fluxapay.xyz has no security.txt; fluxapay.xyz's is unchecked (0 of 20). Total 52.\n\n### Maintenance \u0026 community: Agentcard +8\n\n- Agentcard (74): The newest changelog entry is dated 27 October 2026, and `@agent-cards/checkout` 0.23.6 was published on 9 October 2026 per the 9 October check (30). The changelog has 176 dated entries from 27 February to 27 October 2026, 82 of them in the 90 days from 6 August (20). The service is closed and the repository named in the packages is private. Support is an email address, a support chat reachable through MCP tools and the CLI, and an `ask_agentcard_engineer` tool. None was tested (10 of 15). The CLI and the TypeScript checkout SDK were current on 9 October, and npm wasn't re-read. Presence in the official MCP registry was not checked (10 of 15). The CLI has 19 runtime dependencies, needs Node 22 or later and declares no licence. CI is not visible (4 of 10). 30 + 20 + 10 + 10 + 4 = 74.\n- FluxA AI Wallet (66): `@fluxa-pay/fluxa-wallet` 0.6.0 was published on 6 November 2026, one day before this check (30). Eight CLI releases since 10 August 2026, among them 0.5.2 on 14 October, 0.5.3 on 25 October and 0.5.6, 0.5.7 and 0.6.0 between 3 and 6 November (20). The repository merged 43 pull requests, all from the organisation's own branches, and commits run weekly. Issues and outside pull requests could not be read because the GitHub API refused the session. Discord and a support address are linked from AgentMarket and were not tested (8 of 25). Graded as an API, the line asks for current official SDKs. The CLI is current, but there is no SDK library and the MCP package on npm has not been published since 2 March 2026 (5 of 15). 68 node:test cases exist with no CI workflow, neither npm package declares its repository, and the MCP package's last release lags the source by eight months (3 of 10). Total 66.\n\n### Reliability: Agentcard +6\n\n- Agentcard (26): Graded as a hosted service on the REST API at api.agentcard.sh and the MCP server at mcp.agentcard.sh. The site moved to agentcard.com in October 2026, and www.agentcard.sh pages answer 301 to it. No status page was found. The site footer and the docs link none (0). With no readable incident history the record takes the default (5). The changelog of 22 September 2026 records a fixed startup failure in which a deploy could make every API request return an error, with no duration. The only rate limit with numbers is 30 requests per 5 minutes per IP on the token endpoint, and the MCP `create_card` tool can answer `rate_limited` with advice to wait about a minute (5 of 15, the 9 October partial kept). `POST /api/v2/cards` requires an `Idempotency-Key`, `buy_checkout` and the organisation `create_card` tool take an `idempotency_key`, webhooks are delivered at least once with advice to deduplicate on `id`, and the docs say never to retry a payment automatically. No 429 response or `Retry-After` header is documented (10 of 15). The pricing page lists an SLA with uptime and response-time guarantees in writing for the Enterprise plans, and no SLA text is published. A listed SLA nobody could read scores 0 in this run (0 of 10). Vault and Issuing carry no beta label. The Purchase Agent is free in beta and `create_card` can return `beta_capacity_reached` (6 of 10, the 9 October partial kept). 0 + 5 + 5 + 10 + 0 + 6 = 26.\n- FluxA AI Wallet (20): Graded with the hosted lines, because signing, mandates and approvals all run on FluxA's wallet API and the CLI and MCP server only wrap it, as kite-agent-passport and kane-cli were read. No status page was found in the repository, the skills or AgentMarket's pages. fluxapay.xyz and the wallet and docs hosts could not be read, so a status page there is unchecked and scored absent (0). With no readable history the record takes the default (5). No rate limit with numbers was found (0). The connection service treats 429 `slow_down` as wait and poll and marks errors `retryable`, the skill says a 503 means retry shortly, payouts require a caller-chosen `payout_id` that returns the existing payout on a repeat, `--biz-id` rejects a duplicate with 409, and card create and recharge resume with `--request-id` instead of paying again. No Retry-After or backoff schedule is documented for the wallet API (10 of 15). No SLA was found (0). No beta label was found on the wallet in what was read, but both packages are at 0.x, agent cards sit behind a waitlist and the wallet site was unread (5 of 10). Total 20.\n\n## Score by category\n\n| Category | Weight | Agentcard | FluxA AI Wallet | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 26 | 20 | Agentcard +6 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 80 | 61 | Agentcard +19 |\n| Agent ergonomics | 13% (16.2 this run) | 63 | 60 | Agentcard +3 |\n| Security \u0026 auth | 14% (17.5 this run) | 71 | 52 | Agentcard +19 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 42 | 45 | FluxA AI Wallet +3 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 74 | 66 | Agentcard +8 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 68 | 32 | Agentcard +36 |\n| Negative events | ≤15 | -6 | 0 | |\n| **Total** | | **52.5 · D** | **47 · D** | |\n\n## Facts side by side\n\n| Fact | Agentcard | FluxA AI Wallet |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Agentcard Corporation | FluxA Technology Pte. Ltd. |\n| Hosted endpoint | `https://api.agentcard.sh` | `https://walletapi.fluxapay.xyz` |\n| Transports | HTTP | HTTP, stdio |\n| Auth | OAuth | OAuth or key |\n| Pricing | Freemium | Pay per use |\n| x402 | no | payer tooling only |\n| Licence | Proprietary service under Agentcard's terms of use. The `agent-cards` CLI on npm declares no licence, `@agent-cards/checkout` is marked as having none, and the repository they name is private | The CLI and MCP server source is Apache-2.0 (LICENSE file and both package.json files), though the README's last section says MIT. The hosted wallet service is closed, and no terms covering the wallet were found |\n| Tools exposed | none | 15 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-10-09 | 2026-11-06 |\n| Terms last updated | 2026-07-10 | no document linked |\n| Privacy policy last updated | 2026-10-21 | no document linked |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | yes | not read yet |\n| Terms restrict benchmarking | not found in the text | not read yet |\n| Terms or service can change without notice | not found in the text | not read yet |\n| Arbitration or class-action waiver | yes | not read yet |\n| Popularity | 33k npm/wk | none |\n\n## How the scores have moved\n\n### Agentcard\n\n- -4.3 on 4 November 2026 (C to D): product, correction\n- +0.3 on 27 October 2026: new evidence\n\n### FluxA AI Wallet\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Agentcard.** Purchases need the user's passkey approval by default, cards carry spending rules, and card creation takes an idempotency key. No status page or rate limits beyond the token endpoint were found. A 10 September change removed webhook amount fields on the day it was announced, and the changelog describes security fixes with no advisory. Issuing costs $5,000 a month.\n\n**FluxA AI Wallet.** Every spend runs against a mandate the owner signs in a browser, with a budget, a validity window and an optional host allowlist, and payouts need approval or a mandate. The published MCP package is 0.2.0 from March 2026 against 0.6.0 in the repository, and no status page, fee schedule, wallet terms or custody statement was found.\n\n## Before you call either\n\n### Agentcard\n\n1. Mint a platform token with `POST /api/v2/oauth/token` and cache it for its one hour. The endpoint allows 30 requests per 5 minutes per IP\n2. Send the same `Idempotency-Key` on every retry of `POST /api/v2/cards`, and the same `idempotency_key` on every retry of `buy_checkout`\n3. Pass `source: \"issued\"` to the MCP `create_card` tool for a card number. Without it the tool may start Vault setup and return a link\n4. Call `get_card_details` only at the payment form and never log the result. Each read notifies the member and may return `approval_required`\n5. Treat `transaction.authorized` and `order.*` webhooks as the record of a payment, and deduplicate deliveries on the event `id`\n6. Read `amount`, `currency` and `amount_display` on checkout results and transaction webhooks. `amount_cents` and `charged_amount_cents` were removed on 10 September 2026\n\n### FluxA AI Wallet\n\n1. Run `fluxa-wallet status` first. If `configured` and `wallet_linked` are true, skip `connect`; otherwise show the `authorization_url` and wait with `connect-status --wait 100`\n2. On `token_expired` or `token_revoked`, reconnect with the same `--agent-id`. Never run `init` to recover, which creates a new identity\n3. Pass a unique `--id` on every `payout` and reuse it on retry; a repeat returns the existing payout instead of paying twice\n4. Check `fluxa-wallet mandates` for a signed mandate with enough remaining budget before creating one, and size new budgets to the task\n5. Install the CLI from npm, not the MCP package, whose npm release 0.2.0 lacks `connect_wallet` and `get_wallet_connection`\n\n## Questions\n\n### Which is better for AI agents, Agentcard or FluxA AI Wallet?\n\nAgentcard scores 52.5 (D) on agent readiness against FluxA AI Wallet's 47 (D), and leads in 6 of 7 scored categories.\n\n### Do Agentcard and FluxA AI Wallet need an API key?\n\nAgentcard uses an OAuth sign-in. FluxA AI Wallet takes an API key or an OAuth sign-in.\n\n### Can an agent call Agentcard and FluxA AI Wallet without installing anything?\n\nYes. Agentcard has a hosted endpoint at https://api.agentcard.sh and FluxA AI Wallet at https://walletapi.fluxapay.xyz.\n\n### Are Agentcard and FluxA AI Wallet open source?\n\nNo open-source release is listed for Agentcard. FluxA AI Wallet is open source (The CLI and MCP server source is Apache-2.0 (LICENSE file and both package.json files), though the README's last section says MIT. The hosted wallet service is closed, and no terms covering the wallet were found).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/agentcard-vs-fluxa-ai-wallet.json, and with the fewest tokens: https://www.anchorterminal.com/compare/agentcard-vs-fluxa-ai-wallet.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"agentcard\", \"b\": \"fluxa-ai-wallet\"}`. From a terminal: `anchor compare agentcard fluxa-ai-wallet`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/agentcard.json and https://www.anchorterminal.com/api/v1/tools/fluxa-ai-wallet.json\n\n## Other comparisons with Agentcard or FluxA AI Wallet\n\n- [Agentcard vs Crossmint API + Docs MCP](https://www.anchorterminal.com/compare/agentcard-vs-crossmint.md)\n- [Agentcard vs Kite Agent Passport](https://www.anchorterminal.com/compare/agentcard-vs-kite-agent-passport.md)\n- [Agentcard vs Agent Vault by Self](https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.md)\n- [Agentcard vs Sponge Wallet](https://www.anchorterminal.com/compare/agentcard-vs-sponge-wallet.md)\n- [Agentcard vs Stripe API + MCP](https://www.anchorterminal.com/compare/agentcard-vs-stripe-mcp.md)\n- [Circle Wallets (Agent Wallets, Programmable Wallets) vs FluxA AI Wallet](https://www.anchorterminal.com/compare/circle-wallets-vs-fluxa-ai-wallet.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs FluxA AI Wallet](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-fluxa-ai-wallet.md)\n- [Circle Gateway Nanopayments vs FluxA AI Wallet](https://www.anchorterminal.com/compare/circle-gateway-nanopayments-vs-fluxa-ai-wallet.md)\n- [FluxA AgentMarket vs FluxA AI Wallet](https://www.anchorterminal.com/compare/fluxa-agentmarket-vs-fluxa-ai-wallet.md)\n- [FluxA AI Wallet vs Kite Agent Passport](https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-kite-agent-passport.md)\n- [FluxA AI Wallet vs Nevermined API + MCP](https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-nevermined.md)\n- [FluxA AI Wallet vs Openfort](https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-openfort.md)\n- [FluxA AI Wallet vs Payman Genie MCP](https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-payman.md)\n- [FluxA AI Wallet vs Privy Wallets (server wallets, agent wallets, policy engine)](https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-privy.md)\n- [FluxA AI Wallet vs Sponge Wallet](https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-sponge-wallet.md)\n- [FluxA AI Wallet vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-turnkey-agentic-wallets.md)\n- [Agentcard vs Circle Wallets (Agent Wallets, Programmable Wallets)](https://www.anchorterminal.com/compare/agentcard-vs-circle-wallets.md)\n- [Agentcard vs Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP)](https://www.anchorterminal.com/compare/agentcard-vs-coinbase-cdp-agentkit.md)\n- [Agentcard vs Openfort](https://www.anchorterminal.com/compare/agentcard-vs-openfort.md)\n- [Agentcard vs Privy Wallets (server wallets, agent wallets, policy engine)](https://www.anchorterminal.com/compare/agentcard-vs-privy.md)\n- [Agentcard vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/agentcard-vs-turnkey-agentic-wallets.md)\n- [FluxA AI Wallet vs Agent Vault by Self](https://www.anchorterminal.com/compare/fluxa-ai-wallet-vs-self-agent-vault.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Agentcard vs FluxA AI Wallet", "url": "" } ], "description": "Agentcard scores 52.5 (D) to FluxA AI Wallet's 47 (D) for card payments. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Agentcard D 52.5", "FluxA AI Wallet D 47", "scores" ], "h1": "Agentcard vs FluxA AI Wallet", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/agentcard-vs-fluxa-ai-wallet", "published": "2026-10-01", "section": "tools", "title": "Agentcard vs FluxA AI Wallet for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/agentcard-vs-fluxa-ai-wallet" }, "tokens": { "markdown": 6150, "slim": 1180 }, "version": 1 }