Add the Vault to a web app

curl -X POST https://api.agentcard.sh/api/v2/vault_sessions \
  -H "Authorization: Bearer $ORG_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'

<button id="add-card">Add a card</button>
<script>
  document.getElementById("add-card").addEventListener("click", async () => {
    const tab = window.open("", "_blank");   // open on the click itself, before any await
    const session = await fetch("/api/agentcard/vault-session", { method: "POST" }).then((r) => r.json());
    tab.location = session.url;
  });
</script>

curl -X PUT https://api.agentcard.sh/api/v2/embed_origins \
  -H "Authorization: Bearer $ORG_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"origins": ["https://app.example.com", "http://localhost:3000"]}'

{ "object": "embed_origins", "origins": ["https://app.example.com", "http://localhost:3000"] }

curl -X POST https://api.agentcard.sh/api/v2/connect/start \
  -H "Authorization: Bearer $ORG_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"email": "user@example.com"}'

curl -X POST https://api.agentcard.sh/api/v2/wallet_links \
  -H "Authorization: Bearer $ORG_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"user_id": "usr_8f3k2m"}'

{
  "object": "wallet_link",
  "id": "wl_7h2k9m",
  "user_id": "usr_8f3k2m",
  "status": "active",
  "url": "https://app.agentcard.sh/w/wl_7h2k9m.4f8s…",
  "expires_at": "2026-09-15T18:15:00Z",
  "test_mode": false
}

<script src="https://app.agentcard.sh/js/v1/agentcard.js"></script>
<script>
  async function openWallet() {
    const link = await fetch("/api/agentcard/wallet-link", { method: "POST" }).then((r) => r.json());

    const wallet = AgentCard.create({
      token: link.url,
      onSuccess: (data) => {
        // data.type is "card_attached" (with data.cards) or "payment_completed"
      },
      onTokenExpired: async () => {
        const fresh = await fetch("/api/agentcard/wallet-link", { method: "POST" }).then((r) => r.json());
        wallet.update({ token: fresh.url });
      },
    });

    wallet.open();               // a sheet over your page
    // or: wallet.mount("#wallet");   render it inline instead
  }
</script>