Agentcard is a remote MCP server that gives an AI agent 55 tools, among them add_funds, allow_card_merchant, approve_request. It answers at https://mcp.agentcard.sh/mcp over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 6 of 6 times since 12 September 2026; the last check, on 24 October 2026, succeeded.
Prepaid virtual cards for AI agents: one-time cards, spend caps, human approvals.
Description as the publisher wrote it.
| Tool | What it does |
|---|---|
add_funds | Generate a secure checkout link the user opens to add cash to their own balance (the money that funds new cards) via Apple Pay or Google Pay, in USD. Calling this tool moves NO money and initiates NO transfer: it only prepares a single-use Inputs: amount_cents, payment_method |
allow_card_merchant | Remember a merchant on a card so the next matching charge is allowed even when the card's category or merchant rules would otherwise deny it. One tool call — does not replace the rest of the preset. Inputs: pattern, card_id |
approve_request | Resolve a pending approval request (approve or deny) once the USER has decided. Use this after get_card_details or create_card returns a 202 requiring approval, or for a row from list_pending_approvals. For card_details and transaction, app Inputs: approval_id, decision, action, resource_id |
buy | Shop and check out, in natural language, across the merchants the user has linked (DoorDash, etc.). Pass the whole ask as `request` — e.g. "order a caesar salad from Zuni on DoorDash" — and this tool runs the shopping flow for you. It is CO Inputs: request, conversation_id, new_order |
buy_connect | Connect a merchant for shopping. For merchants that need a real login (e.g. DoorDash) this opens a secure hosted browser session and returns a URL the user opens to log in; after they finish, call buy_connect_status with the pending_id to c Inputs: merchant |
buy_connect_status | Check the status of a hosted merchant login started with buy_connect. Returns linking (still in progress — call again in a few seconds), linked (success — the merchant is ready to shop), expired, or error. Pass the merchant and the pending_ Inputs: merchant, pending_id |
buy_list_merchants | List merchants available for agent commerce (Rappi, Good Eggs, DoorDash) and whether this user has linked each one. Link a merchant before shopping it. |
buy_unlink_merchant | Disconnect a merchant — drops the saved session + link. The user must re-link (e.g. hosted connect) before shopping it again. Inputs: merchant |
check_kyc_document | Check the conversational verification state — use after the user uploads their ID via the browser upload link (or any time you need to re-orient). Returns the current step and the fields still missing. |
close_card | Permanently close a virtual card. This is irreversible — the card cannot be reopened. Safe to call on an already-closed card (idempotent). The user's rewards card (the card their tokenback redeems onto) is close-protected: closing it return Inputs: card_id, confirm_rewards_card, approval_id |
create_card | The one card tool: get the user a virtual debit card for a purchase. Cards are live and charged for real when used. For a FIRST-TIME user it starts by putting the user's OWN card in their Agentcard vault (any Visa, Mastercard, Amex, or Disc Inputs: amount_cents, connected_card_id, pending_card_id, purchase_key, source, restart_setup |
delete_preset | Delete a preset you saved (from save_preset). Refuses built-in template names — there's nothing to delete there. Cards already issued keep whatever rules they have; this only retires the name for future use. Refused while a card still inher Inputs: name |
get_balance | The user's cash balance: the money that funds new cards. Provisions the balance account on first use. Users add cash with Apple Pay or Google Pay in USD; funds are held as USDC. (Their wallet, meaning the cards themselves, is list_cards.) |
get_card_balance | The live balance of ONE virtual card (the user's overall cash balance is get_balance). Prefer this over get_card_details when you only need to verify available funds: it is faster and does not expose sensitive card credentials. Inputs: card_id |
get_card_details | Get decrypted PAN, CVV, expiry, and current balance for a specific card. Use this only when you need to fill in a payment form — prefer get_card_balance if you only need the balance. May require human approval before returning credentials. Inputs: card_id, approval_id |
get_card_preset | Read a card's preset (spend limits, rate limits, allowed categories/merchants, time windows, and surfaces) as a plain-English summary. A card without a preset is unrestricted. Inputs: card_id |
get_instructions | Call this FIRST; returns the latest usage guide for shopping with `buy` AND for operating the Agentcard account tools (cards, funding, your own card, KYC, support). |
get_kyc_status | Check the user's identity verification (KYC) status. Returns whether they are verified and, if not, the current state plus the conversational next step. Use this to poll after the user does the face scan, or any time create_card reports kyc |
get_plan | Show the user's current subscription plan, card limits, and this month's usage. Call this before create_card when you need the per-card amount cap or remaining monthly quota, and ALWAYS before creating a multi-use card: multi-use cards are |
get_rewards | Show the user's tokenback: balance, lifetime earned, and recent activity. Tokenback pays tokens (1 token = 1¢ of credit value) on settled card spend. AI cards (create_card scope_preset: 'ai_labs') earn a boosted rate on AI-lab purchases, an |
get_settings | View the user's notification preferences (which email alerts they receive), their default payment source (which card or balance agents charge — check it before picking a funding source for them), their default delivery address (the wallet-l |
get_wallet_link | The user's hosted wallet, as one shareable URL. Opens their Agentcard wallet in the browser: every card in one place, apply for an Agentcard card (identity verification runs right in the page). Mint it whenever the user needs a browser step Inputs: purpose, merchant, amount_cents |
link_account | Link or merge another Agentcard account that belongs to the same person. Use when the user says they already have an account under a DIFFERENT email or phone number — most often after identity verification (KYC) is rejected as a duplicate, Inputs: type, identifier, ticket, code |
list_added_cards | List the user's ADDED cards (their own Visa/Mastercard cards enrolled via create_card's add-card flow — the funding source that charges their own card), with ids, brand, last4, expiry, and status. The row marked isDefault is what create_car |
list_cards | The user's wallet: every live card they hold, with IDs, last four digits, expiry, balance, and status, plus `vaultCards`: the user's OWN cards stored in their Agentcard vault (display fields only; a vaulted card pays through buy with an app |
list_connections | List the third-party apps the user has connected to their Agentcard account via OAuth (e.g. Kilo), including when each was connected and whether it is still active. Read-only. To revoke an app, call revoke_connection with its clientId. |
list_payment_methods | List the saved payment methods (used only to pay for flight bookings, not for cards or adding funds). Returns each method with its id, brand, last 4 digits, and expiry, and marks the default one. Use setup_payment_method to add a new one. T |
list_pending_approvals | List the user's PENDING approval requests: asks from connected apps (create a card, view full card details, close/pause/resume a card, change a limit) waiting on the user's decision. Surface each one to the user and let THEM decide; after t |
list_presets | List every preset you can use by name: the built-in templates (ai_labs, weekday_meals, cli_only, daily) plus any you've saved yourself, each with a plain-English summary of its rules. |
list_transactions | Transactions with amount, merchant, status, and timestamps. Pass card_id for one card's transactions; OMIT it for every card in the account (newest first, each row tagged with its card). Use limit and status to filter. The gated views list_ Inputs: card_id, limit, offset, status |
manage_subscription | Manage a recurring meal/grocery SUBSCRIPTION (e.g. Locale) — NOT a one-time purchase, and no payment is taken (the subscription auto-bills the card on file at the merchant). action: 'menu_search' (browse the recurring menu; items flagged in Inputs: merchant, action, query, limit, date, dates |
name_card | Tell the vault which card product one of the user's own stored cards is (e.g. "Chase Sapphire Preferred", "Amex Gold"), so smart purchases can rank it. Takes a vault card id (a `vaultCards` row from list_cards) and the product name as the u Inputs: card_id, product, clear_product, smart_excluded |
pause_card | Pause a multi-use card: temporarily blocks ALL new charges (reversible — use resume_card to unblock). Right for "stop this subscription for now" or a card the user suspects is compromised but is not sure. Only multi-use cards can be paused; Inputs: card_id, approval_id |
read_support_chat | Read the message history of a support conversation Inputs: conversation_id |
recommend_card | Ask the vault which of the user's own stored cards earns the most for a purchase (smart purchases). Pass the merchant name, its website when you know it, and the amount. Returns the card id to use as card_id at checkout, the reason in plain Inputs: merchant, merchant_url, amount_cents, currency |
redeem_code | Redeem a promo code that adds money to the user's cash balance. Each code works once per user; the credit lands in the balance and becomes spendable within a minute or two. Some codes hold the money until the user verifies their identity — Inputs: code |
redeem_rewards | Redeem tokenback: the tokens' cash value (1 token = 1¢) lands on the user's rewards card as spending power. The rewards card is permanent and locked to AI-lab merchants (OpenAI, Anthropic, Gemini) — created on first redemption, topped up af Inputs: tokens |
remove_added_card | Remove (unenroll) one of the user's added cards. Irreversible for that enrollment: any virtual cards created against it are closed first, then the card is unenrolled at the network. ALWAYS confirm with the user before calling. Get ids from Inputs: attached_card_id |
resume_card | Resume a paused multi-use card so it accepts charges again. The inverse of pause_card. Inputs: card_id, approval_id |
revoke_connection | Revoke a third-party app's access to the user's Agentcard account. Disconnects the app and invalidates its OAuth tokens; it must reconnect via OAuth to regain access. Pass the clientId shown by list_connections. Inputs: client_id |
save_preset, send_support_message, set_card_preset, setup_payment_method, start_kyc, start_phone_verification, start_support_chat, submit_kyc_document, submit_kyc_fields, submit_user_info, surprise_me, update_card_limit, upgrade_plan, verify_phone, whoami
Every block below points at https://mcp.agentcard.sh/mcp. Pick your client and copy.
claude mcp add --transport http agentcard https://mcp.agentcard.sh/mcp
{
"mcpServers": {
"agentcard": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://mcp.agentcard.sh/mcp"]
}
}
}{
"mcpServers": {
"agentcard": {
"url": "https://mcp.agentcard.sh/mcp"
}
}
}{
"servers": {
"agentcard": {
"type": "http",
"url": "https://mcp.agentcard.sh/mcp"
}
}
}{
"context_servers": {
"agentcard": {
"url": "https://mcp.agentcard.sh/mcp"
}
}
}{
"mcpServers": {
"agentcard": {
"serverUrl": "https://mcp.agentcard.sh/mcp"
}
}
}{
"mcpServers": {
"agentcard": {
"url": "https://mcp.agentcard.sh/mcp"
}
}
}name: Agentcard
version: 0.0.1
schema: v1
mcpServers:
- name: Agentcard
type: streamable-http
url: https://mcp.agentcard.sh/mcp{
"mcpServers": {
"agentcard": {
"httpUrl": "https://mcp.agentcard.sh/mcp"
}
}
}{
"mcpServers": {
"agentcard": {
"type": "http",
"url": "https://mcp.agentcard.sh/mcp"
}
}
}{
"mcpServers": {
"agentcard": {
"url": "https://mcp.agentcard.sh/mcp"
}
}
}goose://extension?url=https%3A%2F%2Fmcp.agentcard.sh%2Fmcp&type=streamable_http&id=agentcard&name=Agentcard
It answered our last check on 24 October 2026 in 842 ms. Over 6 checks since 12 September 2026 it answered 6. Status here comes from Neuronto's own probes, not from the publisher.
Yes. It is published by agentcard.sh and served from mcp.agentcard.sh, the vendor's own domain: https://mcp.agentcard.sh/mcp.
55, as returned by the server's own tools/list on 23 September 2026: add_funds, allow_card_merchant, approve_request, buy, buy_connect, buy_connect_status, buy_list_merchants, buy_unlink_merchant, and 47 more.
It answered our last check on 24 October 2026 in 842 ms. Over 6 checks since 12 September 2026 it answered 6.
Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://mcp.agentcard.sh/mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.
It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.
Publisher: sh.agentcard. Endpoint host: mcp.agentcard.sh. ARD identifier: urn:air:sh.agentcard:mcp:agentcard.
First indexed 10 September 2026. The tools are exactly what the server returned; nothing on this page
is inferred from its name. Ranking in Neuronto search is never for sale.