Self Labs launches Agent Vault, a way for AI agents to log in and pay by card without ever seeing the real credentials
At Self Labs, we’ve been using agents since day one Our agentic web identity & privacy stack is already used by companies like Google Today we're launching the missing piece: Agent Vault, a secure way for agents to log in & make credit card payments Superpowers for your agents
Context
As agents start shopping and signing in on people's behalf, keeping card numbers and passwords out of the agent's reach is one of the main safety problems to solve.
This is a first hand launch post from Self Labs, a company that builds identity and privacy tools, so it is promotional. The claim that its stack is used by companies like Google is the company's own.
Deep dive
On October 15, Self posted that Self Labs has been using agents since day one, that its agentic web identity and privacy stack is already used by companies like Google, and that it was launching what it called the missing piece: Agent Vault, a secure way for agents to log in and make credit card payments.
The company's press release says Agent Vault lets agents sign in and complete purchases for a person without seeing or storing that person's information. It says the agent only handles tokens that have no value of their own, while the real card number is revealed inside a Trusted Execution Environment that completes the payment, and real usernames and passwords are swapped in by Self's proxy at the moment of sign in. Users can set spending caps by day, week, month and transaction, limit a card to named merchants and revoke it at any time.
The release says Agent Vault works with agents including Muse, OpenClaw, Hermes, Claude and Codex, and comes in Free, Plus and Enterprise tiers. The product site says card numbers are tokenized with Basis Theory, a PCI DSS Level 1 vault, and that it works with any agent built on Playwright.
Self CEO Rene Reinsberg said in the release that Self verifies over 20 million real humans.
What to expect next
Watch whether security researchers test the token swap and proxy design, and whether any agent manages to leak or misuse credentials through it.
Also watch whether major agent makers or payment networks back this approach or build their own, since card networks and AI labs are also launching tools for agent payments. Adoption numbers after the three month free Plus offer for the first 1,000 sign ups ends will show real demand.