COMPANY detail

Nevermined Pay
Let your agents pay and get paid. Autonomously.

/

Card Fallback

ONE COMMAND TO GET STARTED.

$ npm install @nevermined-io/payments
Doc

CARD FEATURE OVERVIEW.

CARD NAME
NEVERMINED PAY Badge
DETAILS
SETUP & MONTHLY FEES
?
The cost to maintain the agent's card.
Free
CASHBACK & REWARDS
?
The percentage user earns back on the AI's spending.
0%
FUNDING SOURCE
?
How you loads the money (e.g., Stablecoins, Fiat Credit Line, Crypto Collateral).
Fiat
IDENTITY REQUIREMENT
?
What is needed to open the account (e.g., Human KYC, Business KYB, None).
KYC
SPEND LIMITS & CONTROLS
?
Can you set hard daily/monthly dollar caps?
YES
MERCHANT WHITELISTING
?
Can you restrict the AI to only buy from specific websites/categories?
YES
HUMAN APPROVAL REQUIRED
?
Can it be set to ask you for permission before spending?
OPTIONAL
SUPPORTED AI FRAMEWORKS
?
Which AI systems it plugs into natively (e.g., LangChain, OpenAI, Claude, Any).
YES
SUPPORTED CURRENCIES
?
The specific coins or fiat the agent is allowed to spend (e.g., USDC, USDT).
USD, USDC, EURC
HARDWARE WALLET SUPPORT
?
Can a physical cold wallet (like Ledger) act as the master override key?
No
REAL-TIME ALERTS
?
Do you get an instant notification/log when the AI swipes?
Yes
CUSTODY TYPE
?
Who holds the keys (e.g., Self-Custodial, Platform Managed).
Hybrid
PAYMENT NETWORK
?
The underlying rail the AI uses to pay (e.g., Visa, Mastercard, Web3 Native).
Visa, Mastercard
GEOGRAPHIC AVAILABILITY
?
Supported region to get the card.
Global
Last Updated: Jul 6, 2026

Card Enrollment & Security

  • CARD TOKENIZATION:

User enters their real credit/debit card in a PCI-compliant iframe widget powered by VGS (Very Good Security). Card data goes from VGS → Visa directly. Nevermined never sees raw PAN. Tokenized, verified via 3DS or FIDO2 passkey. Current eligibility for Visa VIC: US-issued consumer Visa cards only. No corporate/business cards. No Chase-issued cards.

  • COMPLIANCE STACK:

ISO 27001 certified ISMS. SOC 2 Type II audited (security, availability, confidentiality). PCI SAQ-D compliant card capture. AES-256 at rest, TLS 1.3 in transit. GDPR compliant. FIDO2 passkey authentication.

Card Capture
VGS (PCI SAQ-D vault)
Verification
3DS or FIDO2 passkey
Encryption
AES-256 rest, TLS 1.3 transit
Certification
ISO 27001, SOC 2 Type II, PCI SAQ-D
Identity
FIDO2 passkeys

Visa Intelligent Commerce (VIC) Integration

  • HOW VIC WORKS:

1. User's card is tokenized via Visa Token Service (VTS) — real PAN replaced with device-provisioned token (DPAN) bound to Nevermined. 2. When agent needs to pay, VIC generates a one-time credential (TAVV cryptogram). 3. Credential authorizes exactly that one transaction. 4. Agent payment settled through real acquiring banks on real Visa rails.

Spending Mandate Model

  • MANDATE STRUCTURE:

Users define: amount cap (e.g., $500), currency (USD), expiry date, max transaction count, optional merchant category restrictions. Agent receives an API key — "payment capability, not card credentials." One key can work across sessions, tools, and frameworks.

  • MANDATE ENFORCEMENT:

When agent hits a paywall, Nevermined checks: (1) is the mandate still active? (2) is the amount within the cap? (3) is the merchant category allowed? If yes, VIC generates one-time credential and payment authorizes in milliseconds. If no, payment is blocked.

Mandate Params
amount cap, currency, expiry, max txns, merchant categories
Revoke
1 API call
Audit Trail
agent ID, amount, merchant, timestamp per txn

x402 Payment Protocol

  • HTTP 402 PAYMENT REQUIRED:

The open standard for AI agent payments. Agent sends GET request → server returns 402 Payment Required with payment terms → agent attaches X-Payment header with token → server verifies, VIC generates credential → Stripe settles → 200 OK with content delivered. No checkout. No redirect. No human in the loop (after mandate approval).

Agent Identity & Smart Accounts (Crypto Rails)

  • ERC-8004 AGENT IDENTITY:

Verifiable, portable on-chain identity for AI agents. Prevents spoofing across deployments and frameworks. Signature checks prove provenance. Works with MCP, A2A, OpenClaw.

  • ERC-4337 SMART ACCOUNTS:

Session keys enable autonomous settlement — scoped permissions, time-bound access, automatic revocation. Agents settle USDC/EURC on Base without private key custody. No gas-fee management for the agent.

THE REAL STORY ON THIS CARD.

PROS
[ STRENGTHS ]
  • thumbs-up-fill Real card rails, not prepaid — charge runs on user's existing credit/debit card, appears on normal statement, settled through Stripe or Visa's merchant network.
  • thumbs-up-fill No raw card number ever stored — card captured via PCI-compliant VGS vault, tokenized before it enters Nevermined's system, verified with FIDO2 passkey or 3DS.
  • thumbs-up-fill Enterprise-grade certifications: ISO 27001, SOC 2 Type II, PCI SAQ-D — put it in front of auditors, compliant from day one.
  • thumbs-up-fill Visa VIC integration: one-time cryptograms per transaction, device-provisioned tokens (DPANs) bound to Nevermined — credential is destroyed after each use.
  • thumbs-up-fill White-label embeddable widgets: three-line embed for card enrollment, mandate creation, and agent spend — zero PCI scope for the host application.
  • thumbs-up-fill ERC-8004 agent identity + ERC-4337 smart accounts for crypto rails — on-chain verifiable agent identity with session keys, scoped permissions, automatic revocation.
CONS
[ LIMITATIONS ]
  • thumbs-down-fill Visa VIC limited to US-issued consumer Visa cards only — no corporate/business cards, no Chase-issued cards, no non-US cards for the virtual card network pathway.
  • thumbs-down-fill PayPal Braintree still "coming soon" — only Stripe available as payment provider today, limiting PSP choice.
  • thumbs-down-fill Not a standalone agent card product — it's infrastructure that requires integration (SDK/MCP/widget), not a turnkey "sign up, get a card, give it to your agent" experience.
  • thumbs-down-fill Merchant category whitelisting supported but specific per-merchant allow/deny lists not yet documented — spending controls are category-level, not site-level.
  • thumbs-down-fill Requires user's real card — unlike prepaid or wallet-funded agent cards, the user must have and be willing to delegate their actual credit/debit card.

GENERAL QUESTIONS.

Nevermined Pay is framework-agnostic with explicit support for OpenAI, Anthropic, LangChain, CrewAI, OpenClaw, and any agent supporting MCP, A2A, or the x402 protocol. Integration options: TypeScript SDK (@nevermined-io/payments), Python SDK (payments-py), MCP server (direct tool access for Claude Desktop, Cursor, Windsurf), CLI, and REST API. The platform is "vibe-coding ready" — pointing your coding assistant at the docs gives it everything needed to scaffold and ship in minutes. LLM-optimized docs at nevermined.ai/docs and llms.txt context file for AI comprehension.

Humans control spending through scoped mandates: when enrolling a card, the user sets an amount cap (e.g., $500), currency (USD), expiry date, maximum number of transactions, and optional merchant category restrictions. The agent receives an API key — "payment capability, not card credentials" — that encodes these limits. Every payment attempt is checked against the mandate: is it still active? Is the amount within the cap? Is the merchant category allowed? If yes, Visa VIC generates a one-time cryptogram authorized for that exact transaction. If no, the payment is blocked. Mandates can be revoked with one API call — instant, no questions, no lingering credentials.

Nevermined does not publicly list pricing tiers, setup fees, subscription costs, or per-transaction fees on its website, docs, or dashboard pages. The "Get started free" CTA suggests a free tier exists. The platform is primarily self-serve: install the SDK (npm install @nevermined-io/payments or pip install payments-py), create an account at nevermined.app, enroll a card, and delegate. Standard Stripe processing fees (2.9% + $0.30) likely apply to card transactions since settlement goes through Stripe Connect. Enterprise customers negotiate custom pricing. Contact nevermined.ai for official pricing.

MORE AGENTIC CARDS.