The Pulse
Evervault Launches Browser Tokens for AI Agent Checkouts
Evervault introduced Browser Tokens at Money20/20 in Las Vegas on October 20, 2026. The product lets browser agents use payment cards and credentials without passing their plaintext values through the agent or browser platform.
AI.info Team · Written with AI · fact-checked ·
Evervault announced Browser Tokens at Money20/20 in Las Vegas on October 20, 2026, offering developers a way to let AI agents complete online purchases without handing them raw card details. The product also covers passwords and other credentials used in browser-based workflows. Evervault says the same approach works with existing merchant websites, without requiring a new checkout protocol.
Tokens travel through the browser; plaintext does not
Browser Tokens replace sensitive values with short-lived, format-preserving stand-ins. An agent or browser automation fills in those stand-ins as it would ordinary card or account data; when the browser sends a request through Evervault’s proxy, the proxy replaces them with the original values for destinations the developer has approved. Evervault says card tokens retain properties such as card-number length and BIN recognition, and pass Luhn validation used by checkout forms.
The approach also applies to passwords, allowing an agent to sign in to a user’s account and use a card already saved with a merchant. The company names Playwright-based setups and hosted provider Browserbase among the environments its product supports. Ramp and Natural are among the first customers building with Browser Tokens, according to Evervault.
Evervault’s case for a network-agnostic route
Evervault presents the product as an alternative to network-led agentic payment programs, including Visa Intelligent Commerce and Mastercard Agent Pay. The company says the availability of those programs can depend on the network, issuer, geography and merchant support, while Browser Tokens work through existing card and account flows. That compatibility is the product’s central pitch: merchants need not adopt a new checkout experience for an agent to submit payment details.
“Agentic payments are just payments. AI agents will only become useful in commerce if they can act without becoming another place where sensitive data is exposed, and without the need for merchants to adopt one of many new agentic payment standards,” said Shane Curran, founder and CEO of Evervault. Curran said Browser Tokens let developers use existing cards, credentials and websites while keeping plaintext out of agents, prompts, logs and browser infrastructure.
Hostname rules reduce exposure, not payment authority
Developers can restrict where a token’s underlying value is revealed and set an expiration period. Evervault’s documentation says its proxy does not reveal a value to a hostname outside the policy, and that the company does not store the plaintext or a server-side mapping between token values and the original data. The merchant or payment provider still receives the original card information when the request reaches an approved destination.
The controls do not authorize a purchase or impose spending limits. Evervault’s documentation says transaction authorization remains with the card issuer or payment processor, and a token may be used more than once before it expires. The proxy also does not handle browser-level challenges such as multi-factor authentication or 3D Secure challenges; those may require user intervention or support from the browser platform.
Available to customers, with a preview caveat
Evervault’s announcement says Browser Tokens are live for its customers and that new developers can get started for free. Its documentation, however, labels the product a preview subject to change and directs developers to contact support for access. That distinction matters for teams assessing whether they can begin an integration immediately.
Natural co-founder and chief product officer Walt Leung said: “Agents complete checkout with tokenized data, and the real card is only swapped in when it reaches the merchant.” He added that the approach lets agentic commerce use existing websites rather than wait for merchants to adopt new protocols. For teams testing the product, the key boundary is concrete: the agent handles a token, while the proxy supplies the original value only as traffic reaches an approved destination.