MCP Server Enables AI Agents to Make Real Purchases with Ephemeral Virtual Cards
A developer has created an MCP server that enables AI agents to make real purchases using ephemeral virtual Visa cards. This addresses a key limitation in current agent frameworks: while agents can browse, search, compare, and select products, they typically cannot complete checkout processes.
How It Works
The agent calls the MCP tool with a purchase intent that includes merchant, amount, and description. The request goes to the user for approval via MFA. Upon approval, a virtual Visa card is issued just-in-time with specific constraints:
- Locked to the specified merchant
- Capped at the approved amount
- 15-minute time-to-live (TTL)
The agent receives the card credentials, completes checkout, and the card self-destructs after use.
Security Architecture
The system uses two separate financial rails:
- User → Stripe → PayClaw balance (funding)
- PayClaw → Lithic-issued virtual Visa → merchant (spending)
Real card credentials never enter the agent's context by architectural design, not just policy. The rails don't intersect.
Security Benefits for Self-Hosted Setups
For users running local models, this approach limits potential damage from prompt injection attacks. The worst-case scenario is limited to:
- One transaction only
- Bounded by the approved amount
- Limited to the approved merchant
- Within a 15-minute window
This contrasts with having persistent card numbers sitting in context.
Key Differences from Previous Tools
This approach differs from the ClawHub tool that was pulled, which collected actual card PANs in the agent chat context. This new system issues ephemeral virtual cards from a BaaS provider, ensuring the agent never has access to real credentials.
Technical Stack
- TypeScript MCP server
- Lithic for card issuing
- Stripe for funding
The tool uses standard MCP tool registration and should work with anything running an MCP client, including Claude, LM Studio with MCP support, and other compatible systems.
Current Status
A dev sandbox is currently available. The developer is seeking feedback on architecture, security model, use cases, and general testing in the sandbox environment.
📖 Read the full source: r/LocalLLaMA
👀 See Also
Anchormd: A Tool for Managing Context Across Claude AI Sessions
Anchormd is an open-source tool that addresses context loss in Claude AI sessions by indexing curated markdown plans into a searchable knowledge graph. It allows agents to load project overviews at session start and query for specific details as needed.
claude-sessions: Terminal UI for Browsing Claude Code Transcripts
claude-sessions is an open-source terminal UI tool that scans local Claude Code transcript files, allowing developers to browse, search, and resume past sessions. Built with Claude Code itself, it features WASD navigation, keyword search, and one-click session resumption.
AI Roundtable: Tool for Comparing 200+ AI Models on Structured Questions
AI Roundtable is a free tool that lets users pose questions with defined answer options, select up to 50 models from a pool of 200+, and get structured responses under identical conditions. It also includes a debate feature where models can see each other's reasoning and a reviewer model that summarizes transcripts.
Dynamic Status Bar for Claude Code Shows Live Updates
A developer has improved their Claude Code status bar from static text to dynamic display with real-time updates showing what Claude is working on. The configuration is available as a GitHub gist.