Overview
Credit-card numbers should not be handled or stored directly by the agentic workflow. Reading them into conversation history or files creates unnecessary exposure. A dedicated payment service should handle the sensitive data so the agent interacts with the transaction result rather than the card number itself.