Developer Tools

agentcard.sh

Agentcard is an API for generating single-use payment cards that self-destruct after one transaction, ensuring card details never reach your servers.

1 endpoint50 known toolsFirst detected May 29, 2026Last detected September 6, 2026

ENDPOINT 1

https://mcp.agentcard.sh/mcp

No auth detected

MCP server metadata

Name: AgentCard
Version: 1.0.0

Capabilities

tools

Server instructions

Agentcard issues virtual debit cards for AI agents. Calling tools requires connecting an Agentcard account via OAuth — start any tool call to receive the authorization challenge.

Known tools 50

buy

Shop and check out, in natural language, across the merchants the user has linked (DoorDash, etc.

Inferred read-only

surprise_me

Buy the user something totally unexpected and very silly/stupid-fun under a small dollar cap (default $10, hard max $25).

Inferred read-only

get_instructions

Call this FIRST; returns the latest usage guide for shopping with `buy` AND for operating the Agentcard account tools (cards, funding, your own card, KYC, support).

Inferred read-only

whoami

Show who you are operating as: the authenticated AgentCard account's email, user id, name, plan, KYC + account status, member-since date, and how this session is connected (personal login vs a third-party OAuth app connection, with the app name).

Potential side effects

list_cards

The user's wallet: every live card they hold, with IDs, last four digits, expiry, balance, and status.

Inferred read-only

get_card_details

Get decrypted PAN, CVV, expiry, and current balance for a specific card.

Inferred read-only

get_card_balance

The live balance of ONE virtual card (the user's overall cash balance is get_balance).

Inferred read-only

close_card

Permanently close a virtual card.

Inferred read-only

create_card

The one card tool: get the user a virtual debit card for a purchase.

Potential side effects

get_wallet_link

The user's hosted wallet, as one shareable URL.

Inferred read-only

list_added_cards

List the user's ADDED cards (their own Visa/Mastercard cards enrolled via create_card's add-card flow — the funding source that charges their own card), with ids, brand, last4, expiry, and status.

Inferred read-only

remove_added_card

Remove (unenroll) one of the user's added cards.

Potential side effects

pause_card

Pause a multi-use card: temporarily blocks ALL new charges (reversible — use resume_card to unblock).

Inferred read-only

resume_card

Resume a paused multi-use card so it accepts charges again.

Inferred read-only

update_card_limit

Change a multi-use card's total spending limit.

Inferred read-only

get_rewards

Show the user's tokenback: balance, lifetime earned, and recent activity.

Inferred read-only

redeem_rewards

Redeem tokenback: the tokens' cash value (1 token = 1¢) lands on the user's rewards card as spending power.

Inferred read-only

start_support_chat

Start a new support conversation and send the first message

Potential side effects

send_support_message

Send a message in an existing support conversation

Potential side effects

read_support_chat

Read the message history of a support conversation

Potential side effects

list_pending_approvals

List the user's PENDING approval requests: asks from connected apps (create a card, view full card details, close/pause/resume a card, change a limit) waiting on the user's decision.

Potential side effects

approve_request

Resolve a pending approval request (approve or deny) once the USER has decided.

Inferred read-only

submit_user_info

Submit the user's phone number and terms acceptance for a virtual card.

Inferred read-only

start_kyc

Begin (or resume) identity verification.

Inferred read-only

get_kyc_status

Check the user's identity verification (KYC) status.

Inferred read-only

submit_kyc_document

Submit the user's ID photo for identity verification.

Inferred read-only

check_kyc_document

Check the conversational verification state — use after the user uploads their ID via the browser upload link (or any time you need to re-orient).

Potential side effects

submit_kyc_fields

Submit identity fields for verification: the ones the ID photo didn't carry (listed by missingFields — the tax/ID number always has to be asked since IDs don't print it; call it "SSN" only for US documents and "national ID number" otherwise), corrections to extracted values the user flagged, and the User Agreements acceptance (agreements_accepted, after presenting each agreement verbatim).

Inferred read-only

list_transactions

Transactions with amount, merchant, status, and timestamps.

Inferred read-only

setup_payment_method

Save a payment method used ONLY to pay for flight bookings (the fare is charged to it via a hold at booking; no virtual card is created for flights).

Potential side effects

get_balance

The user's cash balance: the money that funds new cards.

Inferred read-only

add_funds

Generate a secure checkout link the user opens to add cash to their own balance (the money that funds new cards) via Apple Pay or Google Pay, in USD.

Potential side effects

create_withdrawal_recipient

Save a bank account as a withdrawal destination for the user's cash balance.

Inferred read-only

list_withdrawal_recipients

List the user's saved bank accounts for withdrawals, masked (bank name and last four only).

Inferred read-only

withdraw

Withdraw cash from the user's balance, either to their saved bank account or to a crypto address on Base (USDC).

Inferred read-only

start_phone_verification

Send (or re-send) the user's one-time funding verification code (the provider verifies the phone on the user's Agentcard identity, valid 60 days).

Potential side effects

verify_phone

Check the one-time code the user received from start_phone_verification.

Inferred read-only

redeem_code

Redeem a promo code that adds money to the user's cash balance.

Inferred read-only

get_plan

Show the user's current subscription plan, card limits, and this month's usage.

Inferred read-only

upgrade_plan

Start a paid-plan upgrade.

Inferred read-only

list_payment_methods

List the saved payment methods (used only to pay for flight bookings, not for cards or adding funds).

Potential side effects

list_connections

List the third-party apps the user has connected to their Agentcard account via OAuth (e.

Inferred read-only

revoke_connection

Revoke a third-party app's access to the user's Agentcard account.

Inferred read-only

get_settings

View the user's notification preferences (which email alerts they receive), their default payment source (which card or balance agents charge — check it before picking a funding source for them), their default delivery address (the wallet-level shipping address to use when buying physical goods for them — check it before asking them to dictate an address), and authorization settings (whether viewing card details or making transactions requires explicit approval).

Potential side effects

link_account

Link or merge another Agentcard account that belongs to the same person.

Inferred read-only

buy_list_merchants

List merchants available for agent commerce (Rappi, Good Eggs, DoorDash) and whether this user has linked each one.

Inferred read-only

buy_unlink_merchant

Disconnect a merchant — drops the saved session + link.

Inferred read-only

buy_connect

Connect a merchant for shopping.

Inferred read-only

buy_connect_status

Check the status of a hosted merchant login started with buy_connect.

Inferred read-only

manage_subscription

Manage a recurring meal/grocery SUBSCRIPTION (e.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.agentcard]
url = "https://mcp.agentcard.sh/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "agentcard": {
      "type": "http",
      "url": "https://mcp.agentcard.sh/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: agentcard
Remote MCP URL: https://mcp.agentcard.sh/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "agentcard": {
      "url": "https://mcp.agentcard.sh/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "agentcard": {
      "type": "http",
      "url": "https://mcp.agentcard.sh/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "agentcard",
  "transport": "streamable-http",
  "url": "https://mcp.agentcard.sh/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for agentcard.sh was fetched 2026-07-26T07:05:11.667Z and is being refreshed.

Trust status Neutral

agentcard.sh is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.