Skip to main content
KERNEL runs the browser your agent shops in. There are two ways to connect it to the Vault. Pick one per checkout. Both need a user with a card in the Vault first. See Adding a card.

Option A: KERNEL’s native integration

KERNEL stores an Agentcard wallet in its vault and swaps the card in at checkout itself. Full reference: KERNEL docs. Set AGENTCARD_MODE to sandbox or live to match your credentials.
When the agent submits the checkout form, KERNEL pauses the processor request and the card item’s state.authorization fills in. Serve its action.url to the user through your own authenticated channel, never to the agent. The user approves with Face ID, the request resumes, and you confirm the order with the merchant before reporting success.

Option B: Agentcard SDK over CDP

Connect Playwright to the KERNEL browser and attach Agentcard the same way as any CDP browser.
Attach before the agent reaches the payment form. A KERNEL session bills until deleted, so call kernel.browsers.deleteByID(kernelBrowser.session_id) once the order is confirmed.

Next

The rest of the flow is identical to any Vault purchase: placeholder card, Face ID approval, real card swapped in, confirm with the merchant. Follow the Vault Quickstart from step 4, or read Completing a purchase.