Basis Theory for agents
Give agents the ability to act, not access to your credentials.
Agents need to pay, sign in, call APIs, and handle sensitive data. Basis Theory turns credentials you already own into scoped, revocable access without handing over the card number, password, or key.
Use Cases
Build agents that can finish the job.
Buying, selling, signing in, calling a protected service, or working with real records: each one needs the agent to handle the information securely.
Build an agent that buys
Used for
Travel booking split across airlines, hotels, and local providers
Subscription recovery after a card reissue
Build an agent that works in the browser
Used for
In-page insurance purchase with no redirect
Ad-to-checkout inside a streaming experience
Build an agent that operates real systems
Used for
A connected account used without handing over the session
Build an agent that works with real records
Used for
An agent reasoning over card data inside PCI scope
Don’t hand agents credentials. Route the capability they need.
The original credential stays with you. Basis Theory issues a scoped, single-use, revocable credential for one job, in the format the destination accepts. Your agent can act. It never holds the secret.
Agentic Payments
LIVE
Let an agent spend.
Visa Intelligent Commerce
Mastercard Agent Pay
Stripe SPTs
Stripe Link
Stablecoins
+ More coming soon
Your agent gets the exact credential the merchant accepts.
Give an agent an allowance, a merchant and a time window. At checkout, Basis Theory mints the credential the merchant accepts, and the agent never sees the card.
A payment policy for any agentic payment protocol.
The protocol shouldn’t decide whether your agent can pay safely. Basis Theory converts one approved source into the card, network token, shared payment token, or stablecoin payment the checkout requires.
PCI Agent Runtimes
LIVE
Run the agent where sensitive data can be used safely.
Many teams face this decision: keep sensitive data away from their agents, or pull the agent into PCI scope. Instead, run the agent logic, SDKs, and models you already use inside a PCI Level 1 environment.
Vercel AI SDK
OpenAI SDK
LlamaIndex
Claude Agent SDK
Llama Stack
+ Any other model
Your agent code. Your model choice. A boundary you do not have to build.
Browser Aperture
Alpha
Give the browser a job, not open-ended access.
Browser Aperture holds an agent to the sites, actions, data, and spend limits you approve. It works inside that envelope, and sensitive actions come to us. Every move is recorded.
Agent Credential Proxy
Alpha
Give an agent access to an API. Not the API key.
An agent can call Stripe, GitHub, a bank, or any authenticated service without ever holding the credential. Basis Theory checks each request against your policy, attaches the real credential in flight, strips sensitive values from the response, and logs it per agent.
As agents grow in use, so do the security risks.
A key in a .env file vs. a key behind the proxy.
COMING SOON
Soon
More ways to give agents access.
Soon
Managed Auth
Let agents sign in without ever learning your password.
Store logins the same way Basis Theory stores payment credentials. An agent can use an approved account in an approved browser flow without the username, password, or session becoming part of its prompt or tool configuration.
Vaulted like a card
Never in the prompt
Pairs with Browser Aperture
Spend and amount ceilings
Soon
PCI LLM Router
Use the models your agent needs without moving sensitive data outside the boundary.
One OpenAI-compatible endpoint for sending sensitive prompts to supported models inside Basis Theory’s PCI Level 1 environment. Cardholder data stays in the boundary, and you still pick the right model.
One API for supported models
Sensitive prompts stay inside the PCI boundary
Works with PCI Agent Runtimes
Model choice without rewriting your agent architecture
Agentic commerce will not run on one checkout flow or one credential format.
Payment networks, merchant platforms, browsers, cloud runtimes, and AI agents are all defining how autonomous commerce works. Basis Theory is the credential and policy layer that lets them interoperate without exposing what’s underneath.
Agentic Commerce Consortium
Founded by Basis Theory in 2025 to bring researchers, solution providers and payment networks into one working group on agentic commerce infrastructure. Its white paper set out the first shared standards for agent-led commerce.
The Consortium →
Agentic Payments Alliance
A founding member alongside Rain, Mastercard, and others defining how agent-driven payments get authorized, secured, and rewarded. Launched August 18, 2026.
The announcement →
In The News
Agents will need credentials. They should not need the secrets behind them.
Build agents that can pay, sign in, use APIs, and work with sensitive data while you keep control of where, when, and how they act.
