Lets AI agents buy from physical businesses: find, order, pay, and collect in person with a QR.
MCPpedia last refreshed this data
io.github.dav3trad3r/agentpickup is an MCP server that lets AI agents buy from physical businesses: find, order, pay, and collect in person with a QR. Its tool list has not been published yet over http and stdio, requires no API key, and scores 91/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"agentpickup": {
"url": "https://agentpickup.app/mcp",
"type": "http"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Lets AI agents buy from physical businesses: find, order, pay, and collect in person with a QR.
This server supports HTTP transport. Be the first to test it - help the community know if it works.
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked @agentpickup/mcp against OSV.dev.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in other
deja-vu: local memory over the session histories of forty-three coding agents.
MCP WordPress Remote proxy server
专门为 agent 打造的 agent 搜索工具,具备多语言搜索能力,覆盖中文/英文/学术/代码/购物/金融/新闻/百科。
Searchable football data provider documentation for AI coding agents. Like Context7 for football data.
MCP Security Weekly
Get CVE alerts and security updates for io.github.dav3trad3r/agentpickup and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
agentPickup is the commerce and fulfilment infrastructure that lets AI agents buy from physical businesses. Agents find businesses, read their catalogues, ask questions and place orders. The customer pays on the business's own checkout, or the agent pays directly. The order arrives in the system the business already runs, and the customer collects in person with a signed QR. It works in any industry and with any point of sale, and the money goes straight to the business.
It has three parts:
For businesses: connect your point of sale, or start with no POS, and AI agents can order from you. Your staff work as they do now, and the money goes straight to you. A dashboard shows your sales and what people ask their assistants near you: searches, dietary needs and allergies, and questions about your shop. Sign up at agentpickup.app/connect.
For people: add agentPickup to your assistant at agentpickup.app/add, then ask for what you want.
For agents and developers: this repository holds the open parts. The hosted service (shops, POS connections, payments, the dashboard) runs at agentpickup.app and isn't published as a package.
| What it is | Licence | |
|---|---|---|
packages/core · @agentpickup/core | The pickup pass: sign and check the QR a customer shows at the counter (Ed25519). The format is in SPEC.md | Apache-2.0 |
packages/mcp · @agentpickup/mcp | The MCP server assistants use to find businesses, read their catalogues, ask about one, order (now or for later), pay, cancel, fetch the pass, and run group orders | FSL-1.1-ALv2 |
skills/agentpickup | The same steps as an agent skill | Apache-2.0 |
| SPEC.md | The pickup pass format, v1 | Apache-2.0 |
https://agentpickup.app/mcp (streamable HTTP), or run npx -y @agentpickup/mcp. It's in
the official MCP Registry as io.github.dav3trad3r/agentpickup. Connector directories that don't take crypto use
https://agentpickup.app/mcp/cards: cards and test payments only, paid on the shop's own checkout.npx skills add Tokenise-au/agentpickup-sdk.import { loadSigningKey, generateSigningKeyPem, signPass, verifyPass, toJwks } from "@agentpickup/core";
const key = loadSigningKey(generateSigningKeyPem());
const token = signPass({ v: 1, oid: "ord_123", pid: "pas_456", exp: Math.floor(Date.now() / 1000) + 7200 }, key);
verifyPass(token, [key]); // { ok: true, claims } or { ok: false, reason: "malformed" | "unknown_key" | "bad_signature" | "expired" }
toJwks([key]); // what a shop publishes at /.well-known/collect-keys.json
Card payments go through the shop's own POS account, so the money never passes through agentPickup. Where a shop adds a wallet, agents can also pay in USDC over x402, straight to the shop's wallet. Each order's QR is signed by the shop's key, and staff scan it (or mark the order in their POS) when it's collected.
Node 22.13 or later.
npm inst
... [View full README on GitHub](https://github.com/tokenise-au/agentpickup-sdk#readme)