# Cryptocardium

> Cryptocardium is a no-KYC card programme that issues Visa and Mastercard
> virtual and physical payment cards funded directly from on-chain crypto
> balances. Top up in 20+ cryptocurrencies (Bitcoin, Ether, USDT, USDC,
> Solana, Monero and more), receive a card live in under sixty seconds,
> add it to Apple Pay and Google Pay, and spend anywhere Visa or
> Mastercard are accepted (200+ countries, ~40 million terminals). No
> identity verification, no selfies, no documents — at any point.

Cryptocardium ships a REST v1 API with 50 endpoints and a native MCP
server with 40+ tools, so AI agents (Claude, ChatGPT, Cursor, any
MCP-compatible client) can sign up, fund, issue cards, spend, file
disputes and reconcile autonomously — no human in the loop.

Pricing: virtual card $2, physical card $20 shipping (once), card load
fee 2% flat. Top-ups themselves are free, minimum $200, maximum $50,000.
No monthly, no inactivity, no KYC fees.

## Cards

- [Card programme overview](https://cryptocardium.com/cards): Five BIN ranges (Visa Business 416842, Mastercard World 557213, Visa Platinum 489517, Visa Corporate 472305, physical Visa Gold) — each tuned for a specific spend category.
- [Virtual cards](https://cryptocardium.com/cards#virtual): Issued in under 60 seconds, Apple Pay and Google Pay ready, $2 issuance.
- [Physical Mastercard](https://cryptocardium.com/cards#physical): Shipped worldwide, plain unmarked packaging, $20 one-time shipping, contactless + EMV + magstripe + ATM withdrawals.
- [Pricing](https://cryptocardium.com/pricing): Full fee schedule, top-up minimums, per-card limits.

## Funding

- [Supported chains](https://cryptocardium.com/#supported-networks): Bitcoin, Ether, USDT (ERC-20 and TRC-20), USDC, Solana, Monero, Polygon, Avalanche, Tron, Arbitrum, Base, BNB Chain, Litecoin, Dogecoin, plus more.
- [Top-up flow](https://cryptocardium.com/docs#topup): Send to a treasury address, balance credits at the spot rate after one on-chain confirmation.
- [Limits](https://cryptocardium.com/pricing#limits): $200 minimum, $50,000 maximum per top-up.

## Security and controls

- [Security architecture](https://cryptocardium.com/security): 3-D Secure on every authorisation, segregated balances at a PCI DSS Level 1 issuer, real-time anti-fraud, programmable per-card rules, HMAC-signed webhooks.
- [Per-card controls](https://cryptocardium.com/security#controls): Spend ceilings, MCC allow-lists and denylists, geo-locks, freeze and reissue in seconds.

## For developers and AI agents

- [REST API v1](https://cryptocardium.com/api): 50 endpoints — accounts, sessions, API keys, balance, top-ups, cards, transactions, activity, withdrawals, disputes, webhooks, support, system.
- [MCP server](https://cryptocardium.com/api#mcp): 40+ tools mapped one-to-one from REST endpoints, Streamable HTTP transport, OAuth 2.1 with Dynamic Client Registration, per-tool scope grants.
- [OpenAPI 3.1 spec](https://cryptocardium.com/openapi.json): Full machine-readable schema for the REST API.
- [Agents manifest](https://cryptocardium.com/.well-known/agents.json): Wildcard agents.json describing the action surface for autonomous agents.
- [MCP server card](https://cryptocardium.com/.well-known/mcp/server-card.json): Discovery document — endpoint, capabilities, scopes.
- [Documentation](https://cryptocardium.com/docs): REST and MCP integration guides, webhooks, errors, idempotency, rate limits, code samples in cURL, JavaScript and Python.

## Company

- [About](https://cryptocardium.com/about): What Cryptocardium is, why it exists, how it's built.
- [Contact](https://cryptocardium.com/contact): Authenticated ticketing — every channel routes through the panel.
- [Security disclosure](https://cryptocardium.com/.well-known/security.txt): Coordinated vulnerability disclosure programme.

## Legal

- [Terms of service](https://cryptocardium.com/legal): Service description, eligibility, accounts, fees, programme rules, disputes.
- [Privacy policy](https://cryptocardium.com/privacy): What we collect (email, password hash, balance, card metadata), what we never ask for (ID, selfie, proof of address).

## Optional

- [Press kit](https://cryptocardium.com/about#press): Logos, founder bios, factsheet.
- [Status page](https://cryptocardium.com/security#status): Issuer rails and network health.

## For AI agents — instant purchase with x402
Machine descriptor: https://cryptocardium.com/.well-known/agents.json (and /.well-known/agent.json)
POST https://cryptocardium.com/agent-api.php?action=account -> Bearer token. POST https://cryptocardium.com/agent-api.php?action=topup with header `X-Payment-Mode: x402` -> HTTP 402 with an `accepts` block (scheme exact, USDC on Base); sign the EIP-3009 USDC authorization and re-send with header `X-PAYMENT`. Then issue cards from balance.