Evervault Launches Browser Tokens to Secure AI-Powered Payments
Evervault has announced the launch of Browser Tokens at Money20/20, introducing a new security solution designed to help developers build safer agentic commerce applications. The product enables artificial intelligence (AI) agents and browser automation systems to make purchases, access user accounts, and complete sensitive online transactions without exposing payment card details, passwords, or other personal information to AI models or browser service providers.
As AI agents increasingly take on tasks traditionally performed by people, businesses are exploring ways to automate online shopping, payments, account management, and other digital processes. However, these activities frequently require access to confidential information, creating security challenges for developers and organizations deploying autonomous systems.
Evervault’s Browser Tokens address this issue by replacing sensitive information with temporary, format-preserving tokens. This approach allows AI agents to interact with merchant websites and existing checkout systems while keeping the underlying data protected throughout the automated workflow.
Addressing Security Challenges in Agentic Commerce
Agentic commerce is emerging as an important area of development for businesses seeking to automate purchasing and other digital transactions. AI agents can navigate websites, select products, enter information, and initiate checkout processes on behalf of users. Nevertheless, completing these activities often requires payment card numbers, login credentials, and other sensitive data.
When this information passes through AI models, automation frameworks, prompts, application logs, or hosted browser infrastructure, it can increase the risk of unauthorized exposure. Developers must also consider the regulatory and compliance obligations associated with handling payment information, including requirements under the Payment Card Industry Data Security Standard (PCI DSS).
These challenges can complicate the development and deployment of agentic commerce solutions, particularly when multiple third-party services are involved in processing transactions.
Browser Tokens provide a mechanism for separating sensitive information from the systems responsible for carrying out automated tasks. Instead of accessing original payment details or passwords, AI agents work with substitute values that can be used within authorized online workflows.
According to Evervault, the solution is designed to help developers use existing websites and payment infrastructure without unnecessarily exposing confidential information to the AI systems performing the work.
How Browser Tokens Work
Evervault’s Browser Tokens replace sensitive values with short-lived tokens that preserve the format expected by websites and online services. This allows browser automation systems to interact with existing forms and checkout processes without requiring merchants to redesign their payment experiences.
When an AI agent enters information into a website, it uses the token rather than the underlying sensitive value. Requests submitted through Evervault’s browser proxy are processed according to developer-defined destination permissions. The original value is restored over the network only when the request reaches a destination explicitly approved by the developer.
This architecture helps prevent plaintext payment details and credentials from being unnecessarily exposed to AI agents, browser providers, prompts, and system logs.
For payment cards, Browser Tokens maintain compatibility with common checkout validation mechanisms, including card-number length requirements, Bank Identification Number (BIN) recognition, and the Luhn algorithm. These features allow tokenized card values to work with existing merchant checkout forms.
The product also supports passwords and account credentials. For example, an AI agent can use a substitute password to access a user’s account on a merchant website. If the account already contains a saved payment card, the agent can proceed with the purchase without directly handling the original card details.
By supporting both payment information and login credentials, Browser Tokens can help developers automate more complete customer journeys, from account authentication to transaction completion.
A Network-Agnostic Approach to AI Payments
Several payment industry initiatives are developing solutions to support transactions initiated by AI agents. Network-led programs, including Visa Intelligent Commerce and Mastercard Agent Pay, represent approaches to enabling AI-powered commerce through payment network infrastructure.
However, the availability and functionality of these initiatives can depend on the card network, issuing bank, geographic market, and participating merchant.
Evervault positions Browser Tokens as a network-agnostic compatibility layer for the existing web. The product is designed to work with current payment cards, merchant websites, and account-access processes without requiring businesses to adopt a new agentic payment standard or implement a different checkout experience.
This approach could provide developers with greater flexibility when building AI-powered purchasing applications that must operate across different merchants and payment environments.
Rather than depending exclusively on the adoption of new payment protocols, developers can use existing online infrastructure while introducing additional controls over how sensitive information is accessed and transmitted.
Shane Curran, founder and chief executive officer of Evervault, emphasized the importance of protecting confidential information as AI agents become more involved in commercial transactions.
“Agentic payments are just payments,” Curran said. He explained that AI agents will become more useful in commerce when they can perform transactions without creating additional points of sensitive data exposure or requiring merchants to adopt multiple new payment standards.
He added that Browser Tokens allow developers to use existing cards, credentials, and websites while keeping plaintext information out of AI agents, prompts, logs, and browser infrastructure.
Integration With Browser Automation Platforms
Browser Tokens are designed to work with existing browser automation technologies and development environments. Supported options include Playwright-based environments and hosted browser providers such as Browserbase.
This compatibility allows developers to incorporate the product into existing automation workflows rather than building an entirely new browser infrastructure.
Developers can also configure restrictions for individual tokens, including approved hostnames and short expiration periods. These controls are intended to limit where tokens can be used and reduce the risk of sensitive information being disclosed or reused outside authorized environments.
For businesses developing autonomous shopping assistants, automated purchasing systems, and other AI-driven applications, these restrictions can provide an additional layer of control over the movement of confidential data.
The ability to integrate with established automation tools may also help development teams introduce tokenization into their applications without significantly changing their existing technical architecture.
Early Adoption by Ramp and Natural
Ramp and Natural are among the first customers building with Browser Tokens, highlighting early interest in technologies designed to support secure AI-powered commerce.
Walt Leung, co-founder and chief product officer at Natural, described how the technology enables AI agents to complete checkout processes using tokenized information.
“Agents complete checkout with tokenized data, and the real card is only swapped in when it reaches the merchant,” Leung said.
He added that this approach could help agentic commerce expand across today’s web without requiring every merchant to adopt new protocols.
The ability to use tokenized information within existing checkout systems is particularly relevant as developers seek to scale automated purchasing across different online retailers. By reducing the need to expose original payment details during browser interactions, Browser Tokens aim to address one of the practical security challenges associated with autonomous transactions.
Availability and Company Background
Browser Tokens are available to Evervault customers, and new developers can begin using the product for free through the company’s official product page: https://evervault.com/products/browser-tokens.
Evervault is a developer-focused platform that helps businesses encrypt and orchestrate sensitive information without handling the data in plaintext. Its payment technology combines encryption with 3D Secure authentication, network tokens, and card data enrichment through a single integration.
The company serves organizations including Ramp, Blackhawk Network, and Modern Treasury. Its platform helps businesses build payment orchestration systems, reduce the scope of PCI compliance requirements, accelerate development, and maintain control over their payment infrastructure.
Founded in 2019, Evervault is backed by Ribbit Capital, Sequoia, and Index. The company aims to establish infrastructure for securely managing sensitive information across digital services.
With the launch of Browser Tokens, Evervault is extending its security capabilities to AI-driven browser automation and agentic commerce. The product focuses on enabling automated systems to interact with existing payment and account-access workflows while limiting their exposure to confidential information, as businesses explore new ways to deploy AI agents in commercial environments.
Source Link: https://www.businesswire.com/