Mastercard and Alchemy Let AI Agents Check Out With Your Existing Card

SAN FRANCISCO — Alchemy's AgentCard now supports Mastercard payment credentials through an integration with Mastercard Agent Pay, letting developers build AI agents that can complete online purchases anywhere Mastercard is accepted using tokenized credentials tied to a person's existing card rather than a separate, standalone account. The companies said the goal is to let an agent transact on a user's behalf while the underlying rewards and credit relationship stays with the cardholder's existing Mastercard.

Mechanically, AgentCard provisions each AI agent with its own identity — a dedicated email address and phone number — plus a stablecoin wallet and one-time-use, tokenized Mastercard credentials generated per transaction rather than a durable card number the agent holds indefinitely. Linking the tokenized credentials back to a cardholder's existing Mastercard account is meant to let rewards points, credit lines and existing card benefits carry over to purchases the agent makes, rather than requiring a person to fund a separate agent-specific balance.

The control layer is the part aimed at issuers and cardholders rather than developers: banks and cardholders can set spending limits, restrict purchases to specific merchant categories, and require authorization through what Mastercard calls Verifiable Intent — a record intended to establish that an agent acted within instructions a person actually approved, rather than exceeding its mandate. That kind of auditable authorization trail is the piece card networks have identified as the prerequisite for banks to feel comfortable letting autonomous software initiate charges at all; without it, an issuer has no way to distinguish an agent acting on legitimate instructions from one that has been manipulated or compromised.

Neither company disclosed adoption figures, which banks or card issuers have enabled Agent Pay for their cardholders, or transaction volume moving through AgentCard to date. As with other early AI-agent payment integrations, the near-term test is less the technical plumbing — tokenized, one-time credentials are a well-established fraud-reduction pattern in card payments generally — and more whether issuers, merchants and regulators are satisfied that the authorization and dispute framework holds up when an autonomous agent, rather than a person, is the one initiating the charge.