Devin is Cognition Labs' autonomous software engineer, and it's a different beast from most coding agents. It gets its own sandbox — shell, full browser, code editor, the works. It can run CLI commands, browse the web, fill in forms, and chain it all together without you touching anything.
We've been testing Devin with AgentCard since early 2026, and honestly, the end-to-end flow is impressive. Here's how to set it up.
What you need
- Devin account from Cognition Labs
- Node.js 18+ (available in Devin's sandbox by default)
- A payment method (credit card, debit card, or USDC)
Why Devin is a great fit for purchases
Most agents pick one lane: terminal or browser. Devin does both in the same session. That's a big deal for purchasing. When you tell Devin to buy something, it can:
- Install the AgentCard CLI in its sandbox
- Create a virtual card with a fixed balance
- Retrieve the card number, CVV, and expiry
- Open its built-in browser and navigate to the merchant
- Fill in the payment form with the card details
- Complete checkout and report back with a confirmation
No handoffs. No copy-pasting between tools. Start to finish, Devin runs it.
Step 1: Install the AgentCard CLI
Ask Devin to install AgentCard in its terminal:
npm install -g agentcard
Devin's sandbox already has Node.js, so this takes a few seconds.
Step 2: Sign up and authenticate
Have Devin run the signup command:
agentcard signup --email you@example.com
Magic link to your email. Click it. Or forward it to Devin and it'll open the link in its own browser — either way works.
Step 3: Create a card and make a purchase
One instruction. That's all Devin needs:
"Create a $25 AgentCard virtual card, then go to Namecheap and register the domain myproject.dev"
Devin will:
- Run
agentcard create --amount 25in its terminal - Open the Stripe Checkout link in its browser and wait for payment confirmation
- Run
agentcard details <card-id>to get the card credentials - Open Namecheap in its browser
- Search for the domain, add it to cart, and go to checkout
- Enter the card number, expiry, and CVV in the payment form
- Complete the purchase and share the confirmation with you
Example workflows
Buying cloud infrastructure
"Create a $50 AgentCard and purchase a DigitalOcean droplet for the staging server."
Devin navigates to DigitalOcean, picks a droplet config, and pays with the virtual card. Then — and this is the wild part — it SSHs into the new server and starts configuring it. Same session. No pause.
Purchasing API keys
"Create a $10 AgentCard and buy API credits on OpenRouter for our project."
Devin opens OpenRouter, finds billing, enters card details, adds credits. Then it drops the new API key straight into your project's environment variables. One prompt, fully wired up.
Registering domains
"Create a $15 AgentCard and register api.mycompany.dev on Cloudflare."
Devin handles the entire Cloudflare registration flow, enters payment details, and can immediately configure DNS records afterward.
Subscribing to developer tools
"Create a $25 AgentCard and subscribe to the Tailscale team plan for our dev environment."
Devin signs up, selects the plan, completes payment, and can start configuring the network — all without leaving its sandbox.
Security: hard spending limits by design
We get asked about this a lot. "You're giving an autonomous agent a credit card?" Not exactly. We're giving it a virtual card with a hard ceiling. $25 card? Maximum exposure is $25. That's it. The card literally cannot be charged more.
- One card per task. New card for each purchase. Always.
- Right-size it — $12 item? $15 card. Don't overthink it, but don't hand it $100 either.
- Verify after — have Devin run
agentcard balance <card-id>to see what was actually charged. - Your real card stays hidden — Devin sees virtual card credentials only. Never your payment method.
Why Devin stands out
We've tested a bunch of agents with AgentCard. Devin stands out because of its sandbox:
- Shell + browser in one session — no switching between tools or relying on the user to open links
- Persistent environment — Devin can install packages, create files, and browse the web across a long-running session
- Visual form-filling — Devin can read and interact with checkout pages, handling custom forms, dropdowns, and multi-step flows
- Post-purchase actions — buy a server, then configure it. Buy a domain, then set up DNS. The purchase is step one, not the whole task.
That last point is what makes Devin special for us. Most agents stop at "purchase complete." Devin keeps going.
Quick start
# Install the CLI
npm install -g agentcard
# Sign up (check your email for the magic link)
agentcard signup --email you@example.com
# Create a virtual card with a $25 balance
agentcard create --amount 25
# Get the card details (number, CVV, expiry)
agentcard details <card-id>
Tell Devin what to buy. It handles everything from there.