Evervault Browser Tokens Secure Agentic Payments
The new tool enables developers to process payments through automated browsers without exposing raw sensitive card data.
Updated on Oct. 20, 2026 in Cybersecurity
Live Poll
Would you trust an AI agent to securely manage your payment cards and passwords online?
Evervault has released Browser Tokens, a new tool that replaces sensitive payment data with format-preserving tokens for use in automated browser environments. The product is now available to Evervault customers and is currently in use by companies such as Ramp and Natural.
Why it matters
This development addresses current limitations in agentic payment methods, which are often hindered by restrictive requirements from card networks, issuers, and merchants. By enabling secure handling of sensitive data within autonomous browser sessions, it aims to streamline automated checkout processes.
Browser Tokens support Playwright-based environments and hosted browser providers, allowing tokens to be restricted to specific developer-approved hostnames. The mechanism uses a browser proxy to restore original payment values only when reaching approved merchant destinations.
The players
Evervault
A data security infrastructure company that provides encryption and tokenization tools for developers to handle sensitive information.
Ramp
A corporate card and spend management platform that uses automated workflows for financial operations.
Natural
A platform utilizing agentic workflows that has integrated Evervault's tokenization product.
The details
Browser Tokens function by replacing sensitive card data with format-preserving tokens, which allow agents—autonomous software programs that perform tasks on a user's behalf—to navigate payment flows without exposing the real underlying data. Requests submitted through an Evervault proxy ensure that the original values are only restored at the merchant checkout point. This architecture allows developers to maintain control over where sensitive data is transmitted by restricting tokens to specific hostnames.
Timeline
October 20, 2026: Evervault launched Browser Tokens for customers.
The Tech Race
Evervault is positioning its tokenization infrastructure to resolve the security gaps inherent in using browser automation tools like Playwright for financial transactions. By embedding these protections directly into the browser workflow, the company aims to move beyond traditional, fragmented payment integration methods.
Developers building autonomous checkout agents can now implement these tokens within Playwright-based workflows immediately. The integration requires configuring approved hostnames to ensure sensitive data is only restored during the final merchant transaction.
The takeaway
This launch represents a shift toward more secure, automated financial agents that can navigate complex merchant constraints without risking card data exposure. Developers should watch for future updates regarding token expiration limits and compatibility with additional automation frameworks.
Further reading
For more on evolving data protection standards, visit Cybersecurity.
More information
Find complete technical specifications in the Browser Tokens product information.
Live Poll
Would you trust an AI agent to securely manage your payment cards and passwords online?
