Evervault has launched Browser Tokens, a tool that lets an AI agent buy things or log in to accounts for you without ever seeing your real card number or password. The agent works with a stand-in. The real detail is swapped in only when the request reaches a store the developer has approved.
How it works
AI agents that act for people on shopping sites often need card details or logins to finish a task. Browser Tokens replace those values with short-lived stand-ins that look like the real thing. A stand-in card passes common checkout checks, such as card-number length. Passwords work the same way, so an agent can log in with a stand-in and pay with a card already saved in that account.
Requests pass through Evervault's browser proxy, a middle step that handles the web traffic. Only there is the original value restored, and only for an approved destination. Developers can limit each stand-in to certain websites and a short expiry time. That reduces the chance an agent leaks or reuses the data elsewhere.
Who it affects
This is built for developers, not shoppers. It works with existing tools, including Playwright and hosted browsers such as Browserbase. Ramp and Natural are among the first customers. Merchants do not have to change their checkout. It is live now for Evervault customers, and new developers can start for free.
What is not known yet
The material does not say what the tool costs after the free start, or how soon everyday users will see it in the apps they use. Card network programs such as Visa Intelligent Commerce and Mastercard Agent Pay offer another route, but their availability depends on the card network, bank, country and merchant.
The takeawayIf you let an AI shop for you or your business, ask whether it ever sees your real card or password, or only a stand-in.