AI Agents Can Now Shop Without Ever Seeing Your Card

AI Agents Can Now Shop for you end to end, from finding the product to paying at checkout, while your card details never touch the agent at all. That is the promise of a new launch from security company Evervault, which on October 20, 2026 unveiled its Browser Tokens system at the Money20/20 payments conference in Las Vegas. The idea is simple and, for anyone who has let a chatbot pick out sneakers or groceries, long overdue: let the AI do the buying without ever handing it your money.

Here is how it works, according to the company's announcement. When an AI agent needs to pay, log in, or complete some other sensitive step on a website, it no longer gets your real card number, password, or personal details. Instead it receives a short-lived token that looks and behaves like the real value but expires quickly. The agent fills in the checkout form with the token, and only when the request passes through Evervault's browser proxy does the real value get restored, and only for a destination the developer explicitly approved. The agent itself, the browser platform, and the AI model behind it never see the actual secrets.

Why shopping agents kept hitting a wall at checkout

AI shopping agents have been the industry's favorite demo for two years, yet actually completing a purchase has stayed stubbornly hard. That was the consensus of a panel at the Fortune Brainstorm Tech gathering, where researchers said a customer still cannot easily get an AI agent to finish a purchase on their behalf. The blockers are part security protocol, part missing standards, and part retailer policy. Some stores have actively sought to block third-party shopping agents from their sites.

The discovery side is not much better. Melissa Bridgeford, the cofounder and chief executive of Wizard Commerce, said at the panel that even product discovery is rough: ask a mainstream chatbot about something like ski gloves and it responds with specific product recommendations only nine percent of the time. Her view, shared on stage, was that the big chatbots fumbled their first attempts at turning conversation into commerce. Without a way to pay, an AI shopping assistant is really just a talkative search bar. The industry wants a world where AI Agents Can Now Shop as easily as they chat, and this launch is the first credible blueprint for getting there.

Behind the scenes, the security problem is the reason banks are nervous. Handing raw card details to an AI model, a hosted browser, or an automation framework creates serious risk, and it drags more systems into the scope of the payment industry's data security rules. That caution has teeth: JPMorgan has blocked AI agents from touching customer bank accounts, a stance covered recently on GenZ NewZ as banks draw a line between helpful automation and direct access to your money. Agents need a way to transact that does not require anyone to trust them with the crown jewels.

How the token trick compares to the card networks

Evervault is not the first to chase this. Visa's Intelligent Commerce program and Mastercard's Agent Pay are building network-led routes for AI-driven payments. Those matter, but availability depends on the card network, the issuer, the geography, and whether the merchant signs on. Evervault pitches its approach as the compatibility layer for the web as it already exists: it works with the cards people already carry and the checkout pages stores already run, without asking merchants to adopt a new payment experience.

In the company's words, agents can check out on any merchant web page, independent of all agentic commerce protocols, without accessing underlying sensitive payment information and credentials. That independence is the selling point for developers building agentic products today rather than waiting for the whole payments industry to agree on a standard.

What this could mean for how you shop

Picture the near future the launch is betting on. You tell your assistant to reorder your skincare when it runs low, grab the cheapest flight for a holiday weekend, or find concert tickets under a price cap. The agent browses, compares, and checks out, and your actual card number stays locked in a vault the whole time. The convenience is real: the checkout wall that has kept AI shopping assistants in demo mode finally has a plausible engineering answer.

There are catches, and they are not small. Retailers that have been blocking shopping agents are unlikely to roll out a welcome mat just because the payment plumbing got safer. Approval still sits with the developer, which means the question of who gets to spend your money, and how much, moves from the bank's fraud department to a settings screen you may never open. And tokens do not fix the discovery problem: an agent that cannot find the right product nine times out of ten still needs better taste before it deserves your wallet.

Still, the direction of travel is hard to miss. Job hunters already have their own application agents, as reported here, and fashion apps like Daydream are turning screenshots into shoppable checkouts. Payments were the missing piece, and a world where AI Agents Can Now Shop without seeing your card is now a credible engineering bet. The question for the next year is not whether AI agents will handle your purchases, but which version of the plumbing wins, and who sets the limits.

For now, the launch matters less as a product you will use tomorrow and more as a signal of where the industry is converging: AI agents that act like customers need infrastructure that treats them like strangers. Browsers that swap real secrets for disposable tokens are one way to get there. The risks are real, as India's warning about rogue agents made clear, but the engineering is finally catching up with the ambition. Your next shopping assistant might be a lot more useful, and a lot less dangerous to your bank balance, than the last one.