Agentic Tokens — Sample App

Reference app demonstrating the full VGS Agentic Tokens API integration flow.

Prerequisites

You need a VGS Client ID and Client Secret to run this app. Follow the Authentication guide to generate your credentials.

Quick Start

cp .env.example .env
# Set VGS_CLIENT_ID and VGS_CLIENT_SECRET (see Prerequisites)

docker compose up --build

Open https://localhost:4200 (accept the self-signed certificate warning).

Architecture

• Caddy (port 4200) — serves the static frontend over HTTPS
• Server (port 3000) — Node.js API proxy that authenticates with VGS and forwards requests

Flow

1. Create Card — creates a Visa test card (sandbox only)
2. Enroll Token — provisions the card for agentic payments
3. Device Binding — FIDO/OTP authentication via VgsAgenticAuth SDK
4. Create Intent — creates a spending authorization with mandates
5. Get Cryptogram — retrieves DPAN + cryptogram for payment

Each step auto-populates IDs into the next step.

Sandbox tip: When prompted for an OTP code during Device Binding (step 3), use 456789 — it is always accepted in sandbox.

Environment Variables

Variable	Default	Description
VGS_CLIENT_ID	(required)	OAuth client ID (how to get one)
VGS_CLIENT_SECRET	(required)	OAuth client secret
VGS_API_URL	https://gw-01-sandbox.vgsapi.com	Agentic Tokens API base URL
VGS_CMP_API_URL	https://sandbox.vgsapi.com	Card Management Platform (CMP) API base URL
PORT	3000	Server port

API URLs by environment

	Sandbox	Live
VGS_API_URL	https://gw-01-sandbox.vgsapi.com	https://gw-01-live.vgsapi.com
VGS_CMP_API_URL	https://sandbox.vgsapi.com	https://vgsapi.com