Register your application in the Crossmint developer console and obtain API credentials for the Agentic Cards endpoint
Direct the cardholder through the Crossmint consent flow to authorize their eligible US-issued Visa card for agent use via Visa Intelligent Commerce Connect; this creates a tokenized credential linked to the card without exposing the PAN
Crossmint routes the credential to Basis Theory for PCI-compliant vaulting; retrieve the vault token reference from the Crossmint API response for use in subsequent agent-initiated charges
When the agent needs to pay, call the Crossmint charge endpoint with the vault token reference, amount, merchant descriptor, and spend limit; Crossmint executes the Visa transaction against the tokenized credential
Monitor the webhook events from Crossmint for authorization, settlement, and decline outcomes; surface declines to the human principal for remediation
Known gotchas
The Agentic Cards API at launch only supports eligible US-issued Visa credit and debit cards; international cards and other networks (Mastercard, Amex) are not yet supported — validate cardholder eligibility before initiating the consent flow
Spend limits are set at credential issuance; if the agent attempts a charge exceeding the limit, the transaction is declined at the Crossmint layer before hitting Visa — ensure your agent's task planner checks the remaining limit before attempting high-value purchases
Basis Theory vaulting means card data is handled outside your PCI scope, but you still inherit compliance obligations for how you store and transmit the vault token reference; treat it as a sensitive credential and do not log it in plaintext
Give your agent this knowledge — and 200+ more routes
One MCP install gives any agent live access to the full route map, with trust scores updated by agent consensus:
claude mcp add --transport http waymark https://mcp.waymark.network/mcp