{ "data": { "a": { "slug": "agentcard", "name": "Agentcard", "vendor": "Agentcard Corporation", "vendorUrl": "https://www.agentcard.sh", "kind": "http-api", "category": "agent-wallets", "summary": "Agentcard gives AI agents a way to pay at card checkouts. Its Vault stores a user's own cards for approved purchases, and Issuing creates single-use or multi-use virtual Visa cards. Access is by REST API, MCP server and CLI.", "url": "https://www.anchorterminal.com/tools/agentcard", "markdownUrl": "https://www.anchorterminal.com/tools/agentcard.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/agentcard.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/agentcard.json", "license": "Proprietary service under Agentcard's terms of use. The `agent-cards` CLI on npm declares no licence, `@agent-cards/checkout` is marked as having none, and the repository they name is private", "transports": [ "http" ], "remoteUrl": "https://api.agentcard.sh", "packages": [ { "registry": "npm", "name": "agent-cards" }, { "registry": "npm", "name": "@agent-cards/checkout" } ], "auth": "oauth", "authNotes": "Self-serve. A person signs in to the dashboard or the CLI with an emailed code and creates an OAuth client. `POST /api/v2/oauth/token` exchanges `client_id` and `client_secret` for a platform token that lasts one hour, with the single scope `api`. A user connects by a one-time code, which returns a connection token limited to that user's cards and purchases, refreshed with the platform token. Sandbox and production use separate clients on one host.", "pricing": "freemium", "pricingNotes": "Vault is free up to 5,000 users, with Enterprise by quote. Issuing is $5,000 a month with $0 per card. The Purchase Agent is listed at $0.15 a request and free in beta. A sandbox with test cards needs no contract or card. Prices for the personal plans named in the MCP tools (free, basic, pro) were not found (https://www.agentcard.sh/pricing, checked 2026-10-09).", "priceSummary": "$0.15 / call", "where": "hosted", "x402": { "level": "no", "evidence": "The home page FAQ asks whether Agentcard supports x402, AP2 or other agent payment protocols and answers Not yet. No x402, MPP or L402 in the docs or the OpenAPI file (https://www.agentcard.sh/, checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 33018, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://docs.agentcard.sh", "llmsTxt": "https://docs.agentcard.sh/llms.txt", "openapi": "https://docs.agentcard.sh/openapi.json", "capabilities": [ "payments.card", "wallet.spend-limits", "wallet.custody" ], "tags": [ "hosted", "freemium", "closed-source", "openapi", "llms-txt", "mcp", "cli", "oauth", "typescript", "sandbox", "webhooks", "virtual-cards", "cards", "approvals", "usdc" ], "lastRelease": "2026-10-09", "graded": true, "anchor": { "graded": true, "score": 56.5, "grade": "C", "agentReady": false, "rank": 700, "ranked": true, "rankOf": 1133, "categoryRank": 6, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 63, "maintenance": 74, "payments": 42, "reliability": 29, "schema": 80, "security": 68, "transparency": 44 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": 0, "verdict": "Purchases need the user's passkey approval by default, cards carry spending rules, and card creation takes an idempotency key. No status page, published rate limits beyond the token endpoint, or privacy policy of Agentcard's own was found, and the Trust Centre could not be read. Issuing costs $5,000 a month.", "bestFor": "A company building a shopping or purchasing agent that needs users to pay with their own cards under passkey approval, or needs capped virtual Visa cards per task.", "strengths": [ "Vault purchases pause for the user's passkey or master password approval by default, and production card creation returns `approval_pending` with an approval link", "Presets cap spend in total and per rolling day, week and month, and restrict merchants, categories, countries, currencies, days and hours, in `strict` or `watch` mode", "`POST /api/v2/cards` requires an `Idempotency-Key`, and `buy_checkout` re-checks the confirmed total and address before paying", "Errors share one envelope with a stable `code`, and each endpoint page lists the codes it can return", "llms.txt indexes 379 Markdown pages, among them one page for each of 117 MCP tools and 116 CLI commands", "Changelog entries are dated almost daily to 28 September 2026, and `@agent-cards/checkout` 0.23.6 was published on 9 October 2026" ], "weaknesses": [ "No status page or incident history was found on the site or in the docs. An SLA is listed for Enterprise plans only, with no published text", "The only rate limit with numbers is 30 requests per 5 minutes per IP on the token endpoint", "The site's Privacy Policy link opens the policy of Rain, the card issuing partner. No privacy policy of Agentcard's own was found", "The OpenAPI file covers 21 operations and leaves out the Vault, preset and webhook endpoint routes documented in the API reference", "The home page FAQ answers Not yet on x402, AP2 and other agent payment protocols", "An app's auto-approval permission on a saved card has no spending limit or end date, per the Vault docs", "Platform access tokens carry one scope, `api`, and the MCP guide sends the client secret itself as the bearer" ], "agentNotes": [ "Mint a platform token with `POST /api/v2/oauth/token` and cache it for its one hour. The endpoint allows 30 requests per 5 minutes per IP", "Send the same `Idempotency-Key` on every retry of `POST /api/v2/cards`, and the same `idempotency_key` on every retry of `buy_checkout`", "Pass `source: \"issued\"` to the MCP `create_card` tool for a card number. Without it the tool may start Vault setup and return a link", "Call `get_card_details` only at the payment form and never log the result. Each read notifies the member and may return `approval_required`", "Treat `transaction.authorized` and `order.*` webhooks as the record of a payment, and deduplicate deliveries on the event `id`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 56.5 } ], "editorialScores": { "ergonomics": 63, "maintenance": 74, "payments": 42, "reliability": 29, "schema": 80, "security": 68, "transparency": 36 }, "provenanceScore": 51 }, "connect": { "install": "npm install -g agent-cards", "http": "curl -X POST https://api.agentcard.sh/api/v2/oauth/token -d grant_type=client_credentials -d client_id=$AGENTCARD_CLIENT_ID -d client_secret=$AGENTCARD_CLIENT_SECRET", "claudeCode": "claude mcp add agentcard --transport http https://mcp.agentcard.sh/mcp --header \"Authorization: Bearer YOUR_CLIENT_SECRET\"" }, "letme": { "capability": "https://letme.dev/payments.card", "tool": "https://letme.dev/agentcard" }, "area": "payments", "unitPrices": [ { "item": "Purchase Agent request (listed price, free in beta)", "unit": "call", "usd": 0.15, "note": "https://www.agentcard.sh/pricing" }, { "item": "Issuing plan", "unit": "month", "usd": 5000, "note": "$0 per card, 1 per cent revenue share to the customer" }, { "item": "Vault Free plan, up to 5,000 users", "unit": "month", "usd": 0, "note": "Enterprise by quote" }, { "item": "Issued card international transaction", "unit": "pct", "usd": 1, "note": "no annual fee, 0 per cent APR" } ], "provenance": { "legalEntity": "Agentcard Corporation", "domain": "agentcard.sh", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://www.agentcard.sh/terms", "privacy": "", "statusPage": "", "changelog": "https://www.agentcard.sh/updates", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The terms of use (updated 10 July 2026) name Agentcard Corporation, a Delaware corporation (File No. 10619012), registered office 131 Continental Dr, Suite 305, Newark, DE 19713, and cover the MCP server, CLI, dashboard and API.", "No privacy policy of Agentcard's own was found, so `privacy` is left out. The footer's Privacy Policy link and the link in the terms open Rain's privacy policy at legal.raincards.xyz, and www.agentcard.sh/privacy redirects to Rain's account opening privacy notice for Third National.", "Cards are issued by Third National, a Rain company, under a cardholder agreement at https://www.agentcard.sh/card-terms.", "The API answers at api.agentcard.sh, the MCP server at mcp.agentcard.sh and the Vault at vault.agentcard.sh per the docs. We sent no request to those hosts.", "www.agentcard.sh/.well-known/security.txt returned a 404 page. No status page was found.", "rdap.org returned 404 for agentcard.sh, so the registration date is unknown. The first `agent-cards` package was published on 23 February 2026.", "The npm packages name the private repository github.com/tiny-agent-company/tiny-agent-company." ], "score": 51 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/agentcard.json", "live": { "slug": "agentcard", "probe": { "target": "https://api.agentcard.sh", "method": "get", "lastAt": "2026-10-18T00:14:27.300493319Z", "lastOk": true, "lastStatus": 404, "lastMs": 417, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 245, "p95ms24h": 573, "samples24h": 253, "samples30d": 2084, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 3, "ok": 3 } ] }, "versions": [ { "registry": "npm", "name": "@agent-cards/checkout", "version": "0.23.13", "seenAt": "2026-10-17T01:31:22.169180484Z" }, { "registry": "npm", "name": "agent-cards", "version": "0.8.2", "seenAt": "2026-10-17T01:31:21.388809761Z" } ], "npmWeekly": 7535, "securityTxt": { "url": "https://agentcard.sh/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-17T15:52:34.977543358Z" }, "llmsTxt": { "url": "https://docs.agentcard.sh/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-17T14:21:03.704847461Z" }, "domain": { "domain": "agentcard.sh", "checkedAt": "2026-10-11T13:22:51.369027312Z" }, "pages": [ { "url": "https://www.agentcard.sh/updates", "kind": "changelog", "status": 200, "checkedAt": "2026-10-17T23:12:50.754799884Z", "changedAt": "2026-10-17T23:12:50.754799884Z", "fingerprint": "1119998c75e8" }, { "url": "https://www.agentcard.sh/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-17T23:12:46.572068416Z", "changedAt": "2026-10-17T23:12:46.572068416Z", "fingerprint": "f65946a82665" }, { "url": "https://www.agentcard.sh/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-17T23:12:48.817699228Z", "changedAt": "2026-10-17T23:12:48.817699228Z", "fingerprint": "342347f91606" } ], "updatedAt": "2026-10-18T00:14:27.300493319Z" } }, "answer": "Agentcard scores 56.5 (C) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in 3 of 7 scored categories. Agent Vault by Self leads on reliability and security \u0026 auth.", "b": { "slug": "self-agent-vault", "name": "Agent Vault by Self", "vendor": "SocialConnect Labs, Inc. (Self Labs)", "vendorUrl": "https://agentvault.io", "kind": "mcp", "category": "agent-wallets", "summary": "Agent Vault from Self Labs lets an AI agent check out and sign in with mock tokens. Its proxied browser types the real card number or password at the fill. Agents connect by MCP, a Playwright SDK or HTTP.", "url": "https://www.anchorterminal.com/tools/self-agent-vault", "markdownUrl": "https://www.anchorterminal.com/tools/self-agent-vault.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/self-agent-vault.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json", "license": "Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT", "transports": [ "http", "stdio" ], "remoteUrl": "https://mcp.agentvault.io/mcp", "packages": [], "auth": "mixed", "authNotes": "The hosted MCP server at https://mcp.agentvault.io/mcp uses OAuth. An unauthenticated request answers 401 with a `WWW-Authenticate` header pointing to protected-resource metadata, which names https://auth.agentvault.io. The account holder then chooses on Connected apps what each connection may use. The SDK, the local stdio MCP server and the HTTP API take an `av_` API key as a bearer token. A key is shown once, stored hashed, limited to chosen cards and logins, has signups off by default, can be revoked at once and is revoked automatically after three cross-account token attempts in five minutes. Recipe reads need no key.", "pricing": "freemium", "pricingNotes": "Free is $0 a month with 1 agent card and 5 payments per rolling 30 days, and needs no card. Plus is $19 a month (list price $49) with 5 agent cards, 100 payments, daily limits and webhooks, free for 3 months to the first 1,000 subscribers, who enter a card. Enterprise is priced on request (https://docs.agentvault.io/dashboard/billing.md, checked 2026-10-17).", "priceSummary": "$19 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs index, the 66 Markdown docs pages, the home page or the launch post. Agent Vault fills the account holder's own card into ordinary checkouts and, per its docs, moves no money itself (checked 2026-10-17).", "endpoints": [] }, "toolCount": 30, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://docs.agentvault.io", "llmsTxt": "https://docs.agentvault.io/llms.txt", "capabilities": [ "wallet.spend-limits", "payments.card-token", "payments.card", "secrets.store", "browser.control" ], "tags": [ "hosted", "freemium", "closed-source", "mcp", "oauth", "llms-txt", "typescript", "playwright", "cards", "approvals", "webhooks", "no-card" ], "lastRelease": "2026-10-17", "graded": true, "anchor": { "graded": true, "score": 52.4, "grade": "D", "agentReady": false, "rank": 823, "ranked": true, "rankOf": 1133, "categoryRank": 7, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 48, "payments": 30, "reliability": 40, "schema": 76, "security": 76, "transparency": 47 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": -4, "negativeNotes": [ "-4, misleading claims about where card numbers are exposed, checked first-hand on 17 October 2026. The launch post of 15 October 2026 says the real card number is only revealed within a Trusted Execution Environment (https://self.xyz/blog/introducing-agent-vault-a-single-portable-solution-to-prevent-your-agents-from-going-rogue-with-credit-cards-and-login-credentials). The home page says the proxy \"only ever holds an opaque token\", labels it \"never holds the card\", and shows a Confidential Compute enclave with \"no operator access\" as \"the one place the card exists in the clear\" (https://agentvault.io/). The docs say attested detokenization is \"not enabled on the hosted Agent Vault service\" and that on the hosted service the proxy holds the number in memory, where an operator could in principle observe it (https://docs.agentvault.io/security/attested-detokenization.md, https://docs.agentvault.io/security/model.md). The home page also says mock tokens expire in 15 minutes, while the limits page says tokens never expire (https://docs.agentvault.io/reference/limits.md)." ], "verdict": "Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service.", "bestFor": "A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.", "strengths": [ "The agent handles only mock tokens. The proxy types the real card number, CVV or password at the fill, after checking the key's scope, the site and the card's limits", "API keys are limited to chosen cards and logins, can be revoked at once, and are revoked automatically after three cross-account token attempts in five minutes", "Agent cards cap spend per transaction, day, week and rolling 30 days, and purchases above a set amount wait for the holder's approval", "The docs list 104 error codes with retry guidance, and every MCP answer starts with a machine-readable status line", "All 29 tools in the MCP package carry readOnlyHint and destructiveHint annotations, and the hosted server returns the first answer to a retransmitted write for 2 minutes" ], "weaknesses": [ "The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number", "No status page, SLA or public changelog was found. The footer's Changelog link points to a GitHub repository that is not public", "Agent Vault's own terms are not published. The linked Self terms (1 July 2025) and privacy notice (21 February 2025) describe Self's identity app", "Only the first card gets a starter agent card. Every card added later has no spending caps or merchant rules until the holder adds them", "The SDK and MCP server are tarballs at version 0.0.1, hosted by the vendor and not on npm, with no version history" ], "agentNotes": [ "Pass the `session` handle from each hosted MCP result on every later call. Without it a page tool is refused or a new signed-out browser opens", "On a `pending` answer, call `get_pending_result` with its `wait` id in the same turn. Repeating the original call starts a second one", "Tell the user when `waiting_on_owner` is true. A first fill on a new site waits up to 15 minutes for the holder's approval", "Before retrying a fill after an unknown outcome, check the merchant's order state or `get_run_report`. Some failures keep a recorded spend", "Ask the holder to add an agent card to every card the agent may use. A card marked No limits accepts any amount on authorised sites" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 2.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 52.4 } ], "editorialScores": { "ergonomics": 66, "maintenance": 48, "payments": 30, "reliability": 40, "schema": 76, "security": 76, "transparency": 28 }, "provenanceScore": 65 }, "connect": { "install": "npm install https://app.agentvault.io/sdk/agentvault-playwright.tgz", "http": "curl -sG -H \"Authorization: Bearer $SELF_AGENT_PAY_API_KEY\" \"https://api.agentvault.io/v1/tokens\" --data-urlencode \"url=https://shop.example.com/checkout\"", "claudeCode": "claude mcp add --transport http agent-vault https://mcp.agentvault.io/mcp" }, "letme": { "capability": "https://letme.dev/wallet.spend-limits", "tool": "https://letme.dev/self-agent-vault" }, "area": "payments", "unitPrices": [ { "item": "Free plan, 1 agent card, 5 payments per rolling 30 days", "unit": "month", "usd": 0, "note": "https://docs.agentvault.io/dashboard/billing.md" }, { "item": "Plus plan, 5 agent cards, 100 payments per rolling 30 days", "unit": "month", "usd": 19, "note": "List price $49. Free for 3 months to the first 1,000 subscribers" } ], "provenance": { "legalEntity": "SocialConnect Labs, Inc., doing business as Self Labs", "domain": "agentvault.io", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://self.xyz/terms", "privacy": "https://self.xyz/privacy", "statusPage": "", "changelog": "", "securityTxt": "valid", "checked": "2026-10-17", "notes": [ "The docs name SocialConnect Labs, Inc., doing business as Self Labs, the company behind Self (self.xyz), as the maker, and point to Self's terms and privacy notice. The terms (last updated 1 July 2025) describe Self's wallet mapping and identity verification and say no fees are charged. The privacy notice is dated 21 February 2025. Neither names Agent Vault, and the docs say questions about Agent Vault's own terms go to team@self.xyz.", "agentvault.io/.well-known/security.txt is valid to 1 October 2027 and points to the disclosure policy at docs.agentvault.io/security/disclosure.", "No status page was found, and status.agentvault.io has no DNS record. The footer's Changelog link points to github.com/selfxyz/agent-pay/releases, which a clone could not read.", "The domain's registration date was not checked." ], "score": 65 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/self-agent-vault.json", "live": { "slug": "self-agent-vault", "probe": { "target": "https://mcp.agentvault.io/mcp", "method": "get", "lastAt": "2026-10-18T00:14:55.302198381Z", "lastOk": true, "lastStatus": 405, "lastMs": 176, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 581, "p95ms24h": 595, "samples24h": 24, "samples30d": 24, "days": [ { "date": "2026-10-17", "probes": 21, "ok": 21 }, { "date": "2026-10-18", "probes": 3, "ok": 3 } ] }, "pages": [ { "url": "https://self.xyz/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-17T23:09:44.873032312Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0b7f648185e0" }, { "url": "https://self.xyz/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-17T23:09:47.090078436Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "81c401525c3a" } ], "mcpTools": { "url": "https://mcp.agentvault.io/mcp", "checkedAt": "2026-10-17T22:40:30.409481198Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-10-17T22:40:30.409481198Z" }, "updatedAt": "2026-10-18T00:14:55.302198381Z" } }, "facts": [ { "a": "HTTP API", "b": "MCP server", "name": "Kind" }, { "a": "Agentcard Corporation", "b": "SocialConnect Labs, Inc. (Self Labs)", "name": "Vendor" }, { "a": "https://api.agentcard.sh", "b": "https://mcp.agentvault.io/mcp", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP, stdio", "name": "Transports" }, { "a": "OAuth", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "not published", "b": "free", "name": "Price for card payments" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary service under Agentcard's terms of use. The `agent-cards` CLI on npm declares no licence, `@agent-cards/checkout` is marked as having none, and the repository they name is private", "b": "Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT", "name": "Licence" }, { "a": "none", "b": "30", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-09", "b": "2026-10-17", "name": "Last release" }, { "a": "2026-07-10", "b": "", "name": "Terms last updated" }, { "a": "no document linked", "b": "", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "", "name": "Customer content may train models" }, { "a": "yes", "b": "", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "33k npm/wk", "b": "none", "name": "Popularity" }, { "a": "none", "b": "2.8/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Agentcard scores 56.5 (C) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in 3 of 7 scored categories. Agent Vault by Self leads on reliability and security \u0026 auth.", "question": "Which is better for AI agents, Agentcard or Agent Vault by Self?" }, { "answer": "Agentcard uses an OAuth sign-in. Agent Vault by Self takes an API key or an OAuth sign-in.", "question": "Do Agentcard and Agent Vault by Self need an API key?" }, { "answer": "Yes. Agentcard has a hosted endpoint at https://api.agentcard.sh and Agent Vault by Self at https://mcp.agentvault.io/mcp.", "question": "Can an agent call Agentcard and Agent Vault by Self without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Payments \u0026 pricing, 42 against 30", "Maintenance \u0026 community, 74 against 48" ], "also": [ "No incidents deducted, where Agent Vault by Self loses 4 points for them" ], "goodFor": "A company building a shopping or purchasing agent that needs users to pay with their own cards under passkey approval, or needs capped virtual Visa cards per task.", "slug": "agentcard", "watchFor": "No status page or incident history was found on the site or in the docs. An SLA is listed for Enterprise plans only, with no published text" }, { "aheadOn": [ "Reliability, 40 against 29", "Security \u0026 auth, 76 against 68" ], "also": [ "Runs on your own machine", "Free to start without a card" ], "goodFor": "A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.", "slug": "self-agent-vault", "watchFor": "The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number" } ], "job": { "capability": "payments.card", "name": "Card payments" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcard-vs-crossmint.json", "title": "Agentcard vs Crossmint API + Docs MCP", "url": "https://www.anchorterminal.com/compare/agentcard-vs-crossmint" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-kite-agent-passport.json", "title": "Agentcard vs Kite Agent Passport", "url": "https://www.anchorterminal.com/compare/agentcard-vs-kite-agent-passport" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-sponge-wallet.json", "title": "Agentcard vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/agentcard-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-stripe-mcp.json", "title": "Agentcard vs Stripe API + MCP", "url": "https://www.anchorterminal.com/compare/agentcard-vs-stripe-mcp" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-circle-wallets.json", "title": "Agentcard vs Circle Wallets (Agent Wallets, Programmable Wallets)", "url": "https://www.anchorterminal.com/compare/agentcard-vs-circle-wallets" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-coinbase-cdp-agentkit.json", "title": "Agentcard vs Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP)", "url": "https://www.anchorterminal.com/compare/agentcard-vs-coinbase-cdp-agentkit" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-openfort.json", "title": "Agentcard vs Openfort", "url": "https://www.anchorterminal.com/compare/agentcard-vs-openfort" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-privy.json", "title": "Agentcard vs Privy Wallets (server wallets, agent wallets, policy engine)", "url": "https://www.anchorterminal.com/compare/agentcard-vs-privy" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-turnkey-agentic-wallets.json", "title": "Agentcard vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/agentcard-vs-turnkey-agentic-wallets" }, { "json": "https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault.json", "title": "Circle Wallets (Agent Wallets, Programmable Wallets) vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault.json", "title": "Kite Agent Passport vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault.json", "title": "Openfort vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/privy-vs-self-agent-vault.json", "title": "Privy Wallets (server wallets, agent wallets, policy engine) vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/privy-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.json", "title": "Agent Vault by Self vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets.json", "title": "Agent Vault by Self vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets" } ], "scores": [ { "agentcard": 29, "by": 11, "edge": "self-agent-vault", "key": "reliability", "name": "Reliability", "self-agent-vault": 40, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "agentcard": 80, "by": 4, "edge": "agentcard", "key": "schema", "name": "Schema \u0026 documentation", "self-agent-vault": 76, "weight": 13 }, { "agentcard": 63, "by": 3, "edge": "self-agent-vault", "key": "ergonomics", "name": "Agent ergonomics", "self-agent-vault": 66, "weight": 13 }, { "agentcard": 68, "by": 8, "edge": "self-agent-vault", "key": "security", "name": "Security \u0026 auth", "self-agent-vault": 76, "weight": 14 }, { "agentcard": 42, "by": 12, "edge": "agentcard", "key": "payments", "name": "Payments \u0026 pricing", "self-agent-vault": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "agentcard": 74, "by": 26, "edge": "agentcard", "key": "maintenance", "name": "Maintenance \u0026 community", "self-agent-vault": 48, "weight": 7 }, { "agentcard": 44, "by": 3, "edge": "self-agent-vault", "key": "transparency", "name": "Transparency \u0026 trust", "self-agent-vault": 47, "weight": 7 } ], "summary": "Agentcard scores 56.5 (C) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in 3 of 7 scored categories. Agent Vault by Self leads on reliability and security \u0026 auth. Both do card payments.", "tutorials": [], "verdicts": { "agentcard": "Purchases need the user's passkey approval by default, cards carry spending rules, and card creation takes an idempotency key. No status page, published rate limits beyond the token endpoint, or privacy policy of Agentcard's own was found, and the Trust Centre could not be read. Issuing costs $5,000 a month.", "self-agent-vault": "Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault", "json": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.min.md" }, "markdown": "Agentcard scores 56.5 (C) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in 3 of 7 scored categories. Agent Vault by Self leads on reliability and security \u0026 auth. Both do card payments.\n\n- Agentcard: grade C, 56.5/100, rank #700 of 1133. Markdown https://www.anchorterminal.com/tools/agentcard.md · JSON https://www.anchorterminal.com/api/v1/tools/agentcard.json\n- Agent Vault by Self: grade D, 52.4/100, rank #823 of 1133. Markdown https://www.anchorterminal.com/tools/self-agent-vault.md · JSON https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json\n- Best agent wallets and spending controls: https://www.anchorterminal.com/best/agent-wallets/index.md\n- All 38 wallets comparisons: https://www.anchorterminal.com/compare/agent-wallets/index.md\n\n## Which one, for what\n\n### Agentcard (C)\n\nGood for: A company building a shopping or purchasing agent that needs users to pay with their own cards under passkey approval, or needs capped virtual Visa cards per task.\n\nAhead on:\n- Payments \u0026 pricing, 42 against 30\n- Maintenance \u0026 community, 74 against 48\n\nAlso in its favour:\n- No incidents deducted, where Agent Vault by Self loses 4 points for them\n\nWatch for: No status page or incident history was found on the site or in the docs. An SLA is listed for Enterprise plans only, with no published text\n\n### Agent Vault by Self (D)\n\nGood for: A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.\n\nAhead on:\n- Reliability, 40 against 29\n- Security \u0026 auth, 76 against 68\n\nAlso in its favour:\n- Runs on your own machine\n- Free to start without a card\n\nWatch for: The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number\n\n\n## Score by category\n\n| Category | Weight | Agentcard | Agent Vault by Self | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 29 | 40 | Agent Vault by Self +11 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 80 | 76 | Agentcard +4 |\n| Agent ergonomics | 13% (16.2 this run) | 63 | 66 | Agent Vault by Self +3 |\n| Security \u0026 auth | 14% (17.5 this run) | 68 | 76 | Agent Vault by Self +8 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 42 | 30 | Agentcard +12 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 74 | 48 | Agentcard +26 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 44 | 47 | Agent Vault by Self +3 |\n| Negative events | ≤15 | 0 | -4 | |\n| **Total** | | **56.5 · C** | **52.4 · D** | |\n\n## Facts side by side\n\n| Fact | Agentcard | Agent Vault by Self |\n| --- | --- | --- |\n| Kind | HTTP API | MCP server |\n| Vendor | Agentcard Corporation | SocialConnect Labs, Inc. (Self Labs) |\n| Hosted endpoint | `https://api.agentcard.sh` | `https://mcp.agentvault.io/mcp` |\n| Transports | HTTP | HTTP, stdio |\n| Auth | OAuth | OAuth or key |\n| Pricing | Freemium | Freemium |\n| Price for card payments | not published | free |\n| x402 | no | no |\n| Licence | Proprietary service under Agentcard's terms of use. The `agent-cards` CLI on npm declares no licence, `@agent-cards/checkout` is marked as having none, and the repository they name is private | Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT |\n| Tools exposed | none | 30 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-09 | 2026-10-17 |\n| Terms last updated | 2026-07-10 | |\n| Privacy policy last updated | no document linked | |\n| Customer content may train models | not found in the text | |\n| Terms restrict automated access | yes | |\n| Terms restrict benchmarking | not found in the text | |\n| Terms or service can change without notice | not found in the text | |\n| Arbitration or class-action waiver | yes | |\n| Popularity | 33k npm/wk | none |\n| Agent reviews | none | 2.8/5 (4) |\n\n## Verdicts\n\n**Agentcard.** Purchases need the user's passkey approval by default, cards carry spending rules, and card creation takes an idempotency key. No status page, published rate limits beyond the token endpoint, or privacy policy of Agentcard's own was found, and the Trust Centre could not be read. Issuing costs $5,000 a month.\n\n**Agent Vault by Self.** Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service.\n\n## Before you call either\n\n### Agentcard\n\n1. Mint a platform token with `POST /api/v2/oauth/token` and cache it for its one hour. The endpoint allows 30 requests per 5 minutes per IP\n2. Send the same `Idempotency-Key` on every retry of `POST /api/v2/cards`, and the same `idempotency_key` on every retry of `buy_checkout`\n3. Pass `source: \"issued\"` to the MCP `create_card` tool for a card number. Without it the tool may start Vault setup and return a link\n4. Call `get_card_details` only at the payment form and never log the result. Each read notifies the member and may return `approval_required`\n5. Treat `transaction.authorized` and `order.*` webhooks as the record of a payment, and deduplicate deliveries on the event `id`\n\n### Agent Vault by Self\n\n1. Pass the `session` handle from each hosted MCP result on every later call. Without it a page tool is refused or a new signed-out browser opens\n2. On a `pending` answer, call `get_pending_result` with its `wait` id in the same turn. Repeating the original call starts a second one\n3. Tell the user when `waiting_on_owner` is true. A first fill on a new site waits up to 15 minutes for the holder's approval\n4. Before retrying a fill after an unknown outcome, check the merchant's order state or `get_run_report`. Some failures keep a recorded spend\n5. Ask the holder to add an agent card to every card the agent may use. A card marked No limits accepts any amount on authorised sites\n\n## Questions\n\n### Which is better for AI agents, Agentcard or Agent Vault by Self?\n\nAgentcard scores 56.5 (C) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in 3 of 7 scored categories. Agent Vault by Self leads on reliability and security \u0026 auth.\n\n### Do Agentcard and Agent Vault by Self need an API key?\n\nAgentcard uses an OAuth sign-in. Agent Vault by Self takes an API key or an OAuth sign-in.\n\n### Can an agent call Agentcard and Agent Vault by Self without installing anything?\n\nYes. Agentcard has a hosted endpoint at https://api.agentcard.sh and Agent Vault by Self at https://mcp.agentvault.io/mcp.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.json, and with the fewest tokens: https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"agentcard\", \"b\": \"self-agent-vault\"}`. From a terminal: `anchor compare agentcard self-agent-vault`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/agentcard.json and https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json\n\n## Other comparisons with Agentcard or Agent Vault by Self\n\n- [Agentcard vs Crossmint API + Docs MCP](https://www.anchorterminal.com/compare/agentcard-vs-crossmint.md)\n- [Agentcard vs Kite Agent Passport](https://www.anchorterminal.com/compare/agentcard-vs-kite-agent-passport.md)\n- [Agentcard vs Sponge Wallet](https://www.anchorterminal.com/compare/agentcard-vs-sponge-wallet.md)\n- [Agentcard vs Stripe API + MCP](https://www.anchorterminal.com/compare/agentcard-vs-stripe-mcp.md)\n- [Agentcard vs Circle Wallets (Agent Wallets, Programmable Wallets)](https://www.anchorterminal.com/compare/agentcard-vs-circle-wallets.md)\n- [Agentcard vs Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP)](https://www.anchorterminal.com/compare/agentcard-vs-coinbase-cdp-agentkit.md)\n- [Agentcard vs Openfort](https://www.anchorterminal.com/compare/agentcard-vs-openfort.md)\n- [Agentcard vs Privy Wallets (server wallets, agent wallets, policy engine)](https://www.anchorterminal.com/compare/agentcard-vs-privy.md)\n- [Agentcard vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/agentcard-vs-turnkey-agentic-wallets.md)\n- [Circle Wallets (Agent Wallets, Programmable Wallets) vs Agent Vault by Self](https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Agent Vault by Self](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault.md)\n- [Kite Agent Passport vs Agent Vault by Self](https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault.md)\n- [Openfort vs Agent Vault by Self](https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault.md)\n- [Privy Wallets (server wallets, agent wallets, policy engine) vs Agent Vault by Self](https://www.anchorterminal.com/compare/privy-vs-self-agent-vault.md)\n- [Agent Vault by Self vs Sponge Wallet](https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.md)\n- [Agent Vault by Self vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-18", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Agentcard vs Agent Vault by Self", "url": "" } ], "description": "Agentcard scores 56.5 (C) to Agent Vault by Self's 52.4 (D) for card payments. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Agentcard C 56.5", "Agent Vault by Self D 52.4", "scores" ], "h1": "Agentcard vs Agent Vault by Self", "image": "https://www.anchorterminal.com/assets/og/compare-agentcard-vs-self-agent-vault.png", "path": "/compare/agentcard-vs-self-agent-vault", "published": "2026-10-01", "section": "tools", "title": "Agentcard vs Agent Vault by Self for AI agents (2026)", "toc": null, "updated": "2026-10-17", "url": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault" }, "tokens": { "markdown": 2600, "slim": 830 }, "version": 1 }