Ovra Payments

为 AI 代理提供虚拟 Visa 卡自主支付：通过 ovra_* 系列 MCP 工具完成结账、处理 HTTP 402 付费墙、管理卡片、查询政策与交易、上传凭据及发起争议。仅返回令牌化卡数据（DPAN 与动态 CVC），不暴露真实卡号；金额以欧元计，政策只读，资金需在控制台充值。

alecfritsch

热度 16.02

最近更新 2026-04-08 23:26:47

分类：生活依赖：MCP 服务 / 第三方 API应用场景：购物 / 个人理财 / API 集成

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add ovra-payments

Metadata

name: ovra-payments
description: Autonomous payments for AI agents with virtual Visa cards. Use when the user asks to buy, purchase, pay for, subscribe to, or order anything online. Handles HTTP 402 paywalls automatically. Provides tokenized card data (DPAN) — never exposes real card numbers. Supports any merchant that accepts Visa.

Ovra — Agentic Payments

Make purchases autonomously with virtual Visa cards. You get tokenized card data (DPAN + cryptogram), never real card numbers. Policy engine controls what you can spend.

When to Use

User says "buy", "purchase", "pay for", "subscribe to", "order" anything
You hit an HTTP 402 Payment Required response
User asks about card balance, spending limits, or payment history
User wants to manage cards (issue, freeze, close, rotate)

Quick Reference

Action	Tool	Example
Buy something	`ovra_pay`	`{action:"checkout", agentId:"ag_xxx", purpose:"Notion Plan", amount:79, merchant:"Notion"}`
Handle 402 paywall	`ovra_pay`	`{action:"handle_402", agentId:"ag_xxx", url:"https://api.example.com", merchant:"Example", amountEuros:0.05}`
Check capabilities	`ovra_pay`	`{action:"discover", agentId:"ag_xxx"}`
Issue a card	`ovra_card`	`{action:"issue", agentId:"ag_xxx", usage:"multi", purpose:"SaaS"}`
View policy	`ovra_policy`	`{action:"get", agentId:"ag_xxx"}`
Upload receipt	`ovra_receipt`	`{action:"upload", intentId:"in_xxx", fileBase64:"...", fileName:"receipt.pdf"}`

Payment Flow

ovra_pay { action: "checkout" } — one call does everything:
- Creates intent → policy check → risk check → credential grant → issue → redeem
- Returns: dpan, expiryMonth, expiryYear, cryptogram, dynamicCvc
- If denied: returns reason (policy violation)
- If pending: human must approve
Fill checkout form with the tokenized data:
- Card number → DPAN (e.g. "4319 7261 7668 2936")
- Expiry → MM/YY (e.g. "12/28")
- CVC → dynamicCvc (NOT cryptogram — they are different)
After payment (optional):
- Upload receipt: ovra_receipt { action: "upload" }
- Verify: ovra_intent { action: "verify", actualAmountEuros, actualMerchant }

HTTP 402 Handling

When you hit a paywall:

ovra_pay { action: "handle_402", agentId: "ag_xxx", url: "https://api.example.com/data", merchant: "Example API", amountEuros: 0.05 }

Returns tokenized card data in one call. Use it to answer the 402 challenge.

Tools

Tool	Actions	Description
`ovra_pay`	checkout, handle_402, discover, status	Main payment tool
`ovra_card`	issue, list, freeze, unfreeze, close, rotate	Card lifecycle
`ovra_intent`	list, declare, get, cancel, verify	Payment intents
`ovra_credential`	obtain, grant, issue, redeem, revoke, status	Advanced credential control
`ovra_policy`	get	View spending rules (read-only)
`ovra_transaction`	list, get, memo	Payment history
`ovra_receipt`	upload, get	Receipt management
`ovra_dispute`	list, get, file	Dispute filing

Rules

ovra_pay is the default. Only use ovra_credential for fine-grained control.
Merchant = name (e.g. "Notion"), not the URL.
All amounts in EUR.
Policies are read-only. Never modify them.
Funding is dashboard-only. If balance is 0, tell user to fund at getovra.com/dashboard.
CVC = dynamicCvc, not cryptogram.
On errors: create a new intent. Don't fix old ones.
Talk about the purchase, not technical details (intents, grants, credentials).
Destructive actions (card close) require confirm: true.