Identity Primitives

Agent Card

Issue virtual Visa and Mastercard cards for your AI agents. Set spending limits, restrict merchant categories, and receive real-time transaction webhooks. Your agent can make purchases on the web without sharing your primary payment method.

Virtual Visa and Mastercard

Each agent card is a virtual payment card issued on the Visa or Mastercard network. The card has a unique number, CVV, and expiration date. It works anywhere online that accepts Visa or Mastercard, including subscription services, SaaS tools, and e-commerce sites.

Cards are funded from your Humiris workspace balance. You can top up your balance via bank transfer, wire, or crypto.

bash

# Provision an agent with a virtual card
curl -X POST https://api.humiris.com/v1/agents \
  -H "Authorization: Bearer hum_sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "slug": "purchasing-agent",
    "persona": {
      "firstName": "Alex",
      "lastName": "Rivera"
    },
    "identity": {
      "card": {
        "network": "visa",
        "currency": "USD"
      }
    }
  }'

# Response
{
  "card": {
    "id": "card_v8k2m9",
    "last4": "4242",
    "network": "visa",
    "exp_month": 12,
    "exp_year": 2028,
    "status": "active"
  }
}

bash

# Retrieve full card details (PCI-compliant endpoint)
curl https://api.humiris.com/v1/agents/purchasing-agent/card/details \
  -H "Authorization: Bearer hum_sk_live_..."

# Response
{
  "number": "4242424242424242",
  "cvv": "123",
  "exp_month": 12,
  "exp_year": 2028,
  "billing_address": {
    "line1": "100 Market St",
    "city": "San Francisco",
    "state": "CA",
    "zip": "94105",
    "country": "US"
  }
}

Spending limits and controls

Configure per-transaction limits, daily limits, and monthly limits. You can also restrict the card to specific merchant category codes (MCCs) or block certain categories entirely. Controls can be updated at any time via the API.

bash

# Set spending controls
curl -X PATCH https://api.humiris.com/v1/agents/purchasing-agent/card/controls \
  -H "Authorization: Bearer hum_sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "per_transaction_limit": 500,
    "daily_limit": 1000,
    "monthly_limit": 5000,
    "allowed_categories": ["software", "cloud_services", "saas"],
    "blocked_categories": ["gambling", "crypto_exchange"]
  }'

# Freeze the card instantly
curl -X POST https://api.humiris.com/v1/agents/purchasing-agent/card/freeze \
  -H "Authorization: Bearer hum_sk_live_..."

# Unfreeze
curl -X POST https://api.humiris.com/v1/agents/purchasing-agent/card/unfreeze \
  -H "Authorization: Bearer hum_sk_live_..."

Transaction webhooks

Receive real-time notifications for every card transaction. Webhooks fire for authorizations, captures, declines, and refunds. Use these events to track agent spending, trigger workflows, or flag unexpected purchases.

bash

# Register a webhook for card events
curl -X POST https://api.humiris.com/v1/webhooks \
  -H "Authorization: Bearer hum_sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://yourapp.com/hooks/card",
    "events": [
      "card.authorization",
      "card.capture",
      "card.decline",
      "card.refund"
    ]
  }'

Example webhook payload for a card authorization:

json

{
  "event": "card.authorization",
  "agent": "purchasing-agent",
  "data": {
    "id": "txn_p3k8m2",
    "amount": 29.99,
    "currency": "USD",
    "merchant": "Vercel Inc.",
    "category": "cloud_services",
    "status": "approved",
    "created_at": "2026-04-06T10:15:00Z"
  }
}

bash

# List recent transactions
curl https://api.humiris.com/v1/agents/purchasing-agent/card/transactions \
  -H "Authorization: Bearer hum_sk_live_..."

# Get transaction details
curl https://api.humiris.com/v1/agents/purchasing-agent/card/transactions/txn_p3k8m2 \
  -H "Authorization: Bearer hum_sk_live_..."

Next steps

Combine Agent Card with Agent Browser for automated web purchases. Add Agent Wallet for crypto payments. Set up Webhooks for real-time transaction monitoring. See the API Reference for all card endpoints.