Rain has launched Agent Vaults. The product gives AI agents a prefunded balance and issues a fresh virtual Visa or Mastercard card for every purchase, with the amount, merchant and expiry fixed when the card is created, The Paypers reported. Rain says the agent cannot raise its own limit and merchants need no changes.
Rain was one of several recent moves that put controls on agent spending. Clink added Mastercard Agent Pay alongside Visa Intelligent Commerce. Coinbase added per-trade limits, 24-hour caps and a loss-based auto-stop for its trading agents. A Dallas Fed survey found banks restricting customers' agents, and Cowbell announced standalone AI agent liability insurance.
The controls are arriving well ahead of the purchases they govern. Uber CFO Balaji Krishnamurthy said on the November 4 earnings call that agents booked 4 rides and about 500 Uber Eats orders in Halloween week, out of about 320 million combined rides and orders, Fortune reported. Our earlier post on eBay blocking outside agents, citing The Verge, placed those 4 rides in the third quarter. Fortune also quotes DoorDash CEO Tony Xu describing "maybe several hundred orders in total across the time that they have been up and running," a cumulative figure, not the quarterly one that post suggested.
Willingness thins as prices rise. In research Censuswide conducted for Adyen among 11,000 consumers, 22% would let AI buy groceries without asking, 13% travel and 7.5% luxury goods. Adyen sells agentic payments infrastructure. Signicat research found 8% would let AI make high-value purchases, Retail Gazette reported.
Limits set at the moment of purchase
The emerging model is narrow authority per transaction. Stripe says Link issues Meta's Muse "a single-use virtual card scoped to the approved purchase," and that consumers approve the total in the chat every time, according to Stripe's announcement. Meta uses that setup as Muse launches in Mexico.
Amazon's Auto-Buy, which anchors its Black Friday Week, works differently. The shopper sets a target price, and Amazon limits eligibility to Prime members, items fulfilled by Amazon and one unit per request, according to US Credit Cards 101. Sources disagree on cancellation: Modern Retail quotes fine print giving "24 hours to cancel before it ships," while TheStreet describes a 24-hour window after the order is placed. No Amazon-stated dollar cap has surfaced.
For business buying, Céline Vuillequez, vice president of Amazon Business Europe, named spending limits, built-in policy, human approval above the limits and a complete record of agent actions as essentials, according to a Procurement Magazine account cited by PYMNTS. Cowbell's underwriting looks at similar things: observability, autonomy and governance. Its policy, on sale January 1, 2027 through wholesale brokers, covers losses such as an accounts payable agent paying a supplier twice. Pricing was not reported.
How merchants are meant to recognize an agent
The card networks are layering identity on top, part of the contest to control how AI agents pay. Visa introduced its Trusted Agent Protocol on October 14, 2025, built with Cloudflare. Visa's specification has agents sign web requests with an "agent-browser-auth" tag for browsing or "agent-payer-auth" for paying, and says a message with neither "has not been signed by a trusted agent." Mastercard Agent Pay reportedly issues "Agentic Tokens" bound to a named agent, a consent policy and merchant scopes, though that description comes from Eco, a vendor explainer, not Mastercard documentation.
PYMNTS argues the networks are competing to own the rules for who authenticates an agent and sets its spending authority. Not yet confirmed is whether the agent credential reaches merchants and acquirers in authorization data or stays mostly with issuers and networks. Rain's claim that merchants need no changes suggests agent orders may look like ordinary card payments at checkout.
Banks are drawing their own lines. Among 70 Eleventh District bankers, 11.4% said they already restrict customers' agents, 22.9% plan to within six months and 27.1% did not know. The Dallas Fed calls this a regional snapshot. JPMorganChase, Citigroup, Bank of America and Charles Schwab said agents will not be allowed to move customer money, PYMNTS reported.
Who pays when an authorized agent errs
Visa's Core Rules, edition of April 18, 2026, define an "Agentic Transaction" and set processing requirements. A Private.law summary says providers must get the cardholder's separate acknowledgment of responsibility for the agent's actions. C9group quotes rule language holding the cardholder responsible "as if the Cardholder initiated the Transaction," wording we could not confirm in the public PDF.
Chargeflow, a chargeback vendor, says the public text defines no separate agentic dispute condition or liability shift. It cites a Worldpay analysis saying disputes such as a misread instruction remain unsettled among merchant, issuer and agent platform. On Mastercard, sources split: Digital Applied says verified intent credentials bring merchant liability protection in some categories, while Chargeflow and Worldpay say no formal shift exists. For OpenAI's Agentic Commerce Protocol, Digital Applied reports that chargebacks stay with the merchant and its payment provider.
In the UK, HM Treasury's July 14 consultation asks whether consent and unauthorized-payment liability rules need to change, Bratby reports. We found no CFPB or Federal Reserve guidance on agent disputes. Published Mastercard dispute rules and clarity on what merchants see in authorization data would settle much of what remains open.