Use Stripe Issuing to provision scoped single-use virtual cards for agent-initiated purchases with per-card spend limits and merchant locks

Verified steps

1. Enable Stripe Issuing on your Stripe account and complete the required compliance review; understand that Stripe Issuing virtual cards issued for agent use fall under the Agentic Commerce Suite launched December 2025
2. Use the Stripe Agent Toolkit (available on npm and PyPI) to wrap the Issuing API for LLM function-calling: the toolkit exposes card creation, spend limit configuration, and card cancellation as callable tools
3. When an agent needs to make a purchase, call the card creation endpoint with a spending limit object specifying amount, currency, interval (one-time), and optionally an allowed_merchant_categories or specific merchant ID restriction
4. Pass the generated virtual card number (returned only at creation and not stored by Stripe in retrievable form after that point) to the checkout flow; the card will decline automatically once the spend limit is exhausted or the merchant restriction is violated
5. Subscribe to Issuing authorization webhooks to receive real-time approval or decline events; implement a handler that can auto-approve within policy or escalate to a human reviewer for out-of-policy requests
6. After purchase confirmation, cancel or archive the card to ensure it cannot be reused; log the Issuing card ID, authorization ID, and associated agent session ID for your audit trail