What your agent can never do
See your card
You enter card details only on Prava’s secure page. The agent receives a one-time credential
for a single approved purchase, never your real card number.
Spend without you
Every purchase needs your explicit approval: a passkey (Touch ID / Face ID) and/or an in-chat
confirmation before any money moves.
Change the deal
The credential is locked to the merchant and amount you approved. It can’t be reused, resized, or
pointed at another store.
Outlive your trust
Revoke an agent any time from the wallet; its access ends immediately.
Setting up (once, ~2 minutes)
1
Approve your agent
Your agent asks to link by showing you a URL (it ran
prava setup). Open it, sign in at
pay.prava.space, check the agent’s name, and click Approve. The link
expires after 15 minutes, so approve promptly.2
Add your card
When the agent makes its first payment, you’ll get a secure Prava page to enter your card;
it’s saved to your account for future purchases. Your card details go to Prava, never to the agent.
3
Add a delivery address (for shopping)
If your agent shops for physical goods, add a delivery address and contact phone in the dashboard
once. The agent only ever sees a masked summary.
Every purchase, from your side
- The agent finds or is told what to buy, and shows you the merchant, items, and total.
- You confirm — in the conversation, and with a passkey for card actions.
- Prava issues the one-time credential and the checkout runs.
- The result shows up in your dashboard’s transaction history.
Your controls
More detail on how these are enforced: Guardrails ·
Accounts & Agents.