What are the most compliant agentic payment solution providers?

As of November 4, 2026: Stripe for most agent builders and sellers (PCI Service Provider Level 1, SOC 1 and SOC 2 Type II reports, and Shared Payment Tokens that carry a maximum amount and an expiry and still trigger 3D Secure); Basis Theory for platforms that must keep card data out of their own PCI scope across several processors (PCI Level 1, SOC 2 Type II, ISO 27001, HIPAA, from $995 a month); and the card networks' own programmes, Visa Intelligent Commerce and Mastercard Agent Pay, which tokenise credentials and bind them to passkey-verified consent.

Does an AI agent handling payments put my company in PCI scope?

Only if the agent or your servers see raw card numbers. Using a provider's hosted fields and tokens keeps the card data with a PCI Level 1 provider: Stripe's Payment Element, loaded directly from js.stripe.com, and Basis Theory's vault are designed for that. The agent should only ever hold a scoped token, never a primary account number.

How do agentic payments stay compliant with strong customer authentication?

The issuer can still demand authentication. Stripe documents that a Shared Payment Token moves to requires_action when a seller's payment needs 3D Secure or a redirect, and the agent must present that challenge to the customer. Visa Intelligent Commerce uses Visa Payment Passkeys for device binding and to confirm the customer's consent to a purchase instruction.

What spending controls should an agentic payment provider offer?

At minimum a per-credential maximum amount, a currency, an expiry and the ability to revoke. Stripe Shared Payment Tokens set usage_limits with currency, max_amount and expires_at per transaction; network tokens from Visa and Mastercard are bound to a specific agent and can be suspended without reissuing the card.

Quick Answer

Most Compliant Agentic Payment Solution Providers (2026)

Published: November 4, 2026

The short answer

Compliance in agentic payments comes from three things: the agent never sees a card number, every credential has a hard limit and expiry, and the bank can still ask the customer to authenticate. The providers that do all three best, as of November 4, 2026:

Stripe (Shared Payment Tokens) — best for most agent builders and sellers. PCI Service Provider Level 1, scoped per-purchase tokens, 3D Secure preserved.
Basis Theory — best for processor-independent platforms. PCI Level 1, SOC 2 Type II, ISO 27001, HIPAA; from $995/month.
Visa Intelligent Commerce — best for consent you can prove: network tokens plus Visa Payment Passkeys.
Mastercard Agent Pay (and Agent Pay for Machines) — best for Mastercard-issued credentials and machine-to-machine payments with network rules.

For a broader ranking that includes crypto rails (x402) and Google AP2, see best AI agent payment solutions; for token mechanics, best tokenization providers for agent payments.

The comparison

Provider	Certifications	What the agent holds	Spend controls	Customer authentication	Availability / price (Nov 4, 2026)
Stripe SPTs	PCI Service Provider Level 1; SOC 1 + SOC 2 Type II reports; public SOC 3	Shared Payment Token scoped to one seller	`usage_limits`: currency, `max_amount`, `expires_at`	3D Secure via `requires_action`	US, Canada and ~30 European countries; agentic preview terms; standard Stripe fees
Basis Theory	PCI Level 1, SOC 2 Type II, ISO 27001, HIPAA	Your own vaulted token, sent to any processor	Your rules, enforced in your vault proxy	Via your processor	Starter $995/mo incl. 20,000 tokens (US only); agentic enrollments on custom plans
Visa Intelligent Commerce	Visa Token Service	Provisioned network token (client need not store the 16-digit token)	Token-level controls via issuer/network	Visa Payment Passkeys: device attestation, binding, step-up	Developer programme; through Visa partners
Mastercard Agent Pay	Mastercard network tokens + Verifiable Intent	Agent-bound token	Network and issuer rules	Issuer authentication	Agent Pay for Machines launched June 2026 with 30+ partners incl. Adyen, Stripe, Checkout.com, Basis Theory

Certifications and limits from each provider’s documentation, read November 4, 2026.

What “compliant” means for an agent

PCI DSS scope. If your agent, logs or prompts ever contain a card number, your whole stack is in scope — including the model provider. Keep raw PANs in a Level 1 vault and give the agent a token.
Strong customer authentication (PSD2 in Europe, issuer rules elsewhere). An agent cannot pass a 3D Secure challenge for the customer. Your flow must surface it.
Provable consent. When a dispute arrives, you need evidence that the customer authorised this purchase, not just “the agent”.
Least privilege. Every credential should be capped in amount and time, and revocable on its own.
Data protection. SOC 2 Type II and ISO 27001 reports, a DPA, and HIPAA if you sell health services.

1. Stripe — best default

A Shared Payment Token lets an agent give a seller scoped access to the customer’s payment method for one agent-initiated purchase. The agent sets usage limits — currency, maximum amount and an expiry timestamp — when it issues the token. If the seller’s payment needs 3D Secure or a redirect, the token moves to requires_action, Stripe sends a shared_payment.issued_token.requires_action webhook and the agent shows the bank’s challenge in its own interface. Card details are collected with the Payment Element, which must load from js.stripe.com to stay PCI compliant. SPTs are available in the US, Canada and select European countries under Stripe’s agentic-commerce preview terms.

Pick it if you or your sellers already process on Stripe.

2. Basis Theory — compliance without processor lock-in

Basis Theory gives you a production PCI Level 1 environment and an Attestation of Compliance, so you can vault cards once and route them to any processor or network token programme. Starter is $995/month with 20,000 tokens (US environment, 24 hours of logs); custom plans add agentic enrollments, PII/PHI compliance options and responses for 95% of PCI SAQ D. It is listed as a Mastercard Agent Pay for Machines partner.

Pick it if you run a platform across several PSPs and must keep card data out of your own environment.

Agents enrol a card through the Visa Token Service PAN enrollment API, then provision a token; the client stores a token identifier, not the 16-digit number. Visa Payment Passkeys handle device attestation and binding and let the customer confirm a purchase instruction, which is the evidence you want in a dispute.

Pick it if you are an agent platform partnering with Visa and want network-level consent.

4. Mastercard Agent Pay — network rules for agents and machines

Mastercard pairs agent-bound tokens with Verifiable Intent, and in June 2026 extended the programme to Agent Pay for Machines for always-on machine payments, with partners including Adyen, Stripe, Checkout.com, Basis Theory, Cloudflare and Coinbase.

Pick it if your users hold Mastercard credentials or you need machine-to-machine payments under card-network rules.

A compliance checklist before launch

No PAN in prompts, tool outputs or logs — test by grepping your traces.
Every credential carries a maximum amount and expiry.
Your UI can present a 3D Secure or passkey challenge mid-task.
You store the consent record (what the user approved, amount, merchant, time).
You have the provider’s SOC 2 Type II report and a signed DPA.

Last verified: November 4, 2026.