Self Labs launches Agent Vault, a hosted browser proxy that lets agents such as Claude Code, Codex and Grok Bot sign in and check out using placeholder tokens. The proxy enters the real card number or password into the site only at the moment of the fill, so the agent never holds a credential. The company says a prompt-injected agent can then spend at most within the caps the user sets.
This is how agents should handle your card.
Self Labs launched Agent Vault, a hosted browser proxy that lets agents like Claude Code, Codex and Grok Bot check out and sign in using placeholder tokens, while the proxy types your real card number or password into the site only at the moment of the fill.
Because the agent never holds a credential worth stealing, a prompt-injected agent can at most spend within the caps you set.
At Self Labs, we’ve been using agents since day one Our agentic web identity & privacy stack is already used by companies like Google Today we're launching the missing piece: Agent Vault, a secure way for agents to log in & make credit card payments Superpowers for your agents
Source: Rohan Paul · x.comPublished · added here
