ART-24 · Branch A · Agentic Rail Chain · OpenChainGraph

Mastercard Agent Pay — Agentic Token Scope & Consent-Policy Builder

Mastercard Agent Pay lets a verified AI agent transact on a consumer's behalf using an Agentic Token — a tokenised card credential (via MDES) bound to a specific agent, merchant scope, and consent policy, so the model never holds the raw PAN. Build a scope from a form or lint an existing scope descriptor. Produces a §4 compliance_control OpenChainGraph artifact.

⚠ Mastercard Agent Pay announced Apr 2025; MDES Agentic Token schema not fully public. Field names here are illustrative — verify against Mastercard developer resources. The agent never receives the raw PAN.

§4 OpenChainGraph · ART-24 Mastercard Agent Pay · MDES Zero PII Client-Side · No Network

▸ Build an Agentic Token scope

Agent ID

Allowed merchants (comma-separated, or * = any)

Per-transaction limit (minor units)

Total / period limit (minor units)

Currency

Expiry (ISO date-time)

Velocity (max txns / period)

MCC allow-list (optional, comma-separated)

▸ Lint an Agentic Token scope

Paste a token scope descriptor (synthetic). Checks agent binding, merchant scope, spend limits, expiry, and velocity. Field aliases accepted.