Portable payment, identity, approval, and execution control plane for AI agents.
MCPpedia last refreshed this data
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"agentpay": {
"env": {
"AGENTPAY_API_KEY": "apk_your_key_here",
"AGENTPAY_MERCHANT_ID": "your_merchant_id"
},
"args": [
"-y",
"@agentpayxyz/mcp-server"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
AgentPay is the authority layer between an AI agent and the real world. It handles provider access, funding authority, human approval, exact-call resume, and proof so agents can finish work end to end without raw secrets in chat or repeated dashboard setup.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@agentpayxyz/mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
Checked @agentpayxyz/mcp-server against OSV.dev.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in ai-ml / finance
Dynamic problem-solving through sequential thought chains
An open-source AI agent that brings the power of Gemini directly into your terminal.
Workspace template + MCP server for Claude Code, Codex CLI, Cursor & Windsurf. Multi-agent knowledge engine (ag-refresh / ag-ask) that turns any codebase into a queryable AI assistant.
Use any LLMs (Large Language Models) for Deep Research. Support SSE API and MCP server.
MCP Security Weekly
Get CVE alerts and security updates for io.github.Rumblingb/agentpay and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Trust + capability vault + governed paid execution for agents.
AgentPay is the authority layer between an AI agent and the real world. It handles provider access, funding authority, human approval, exact-call resume, and proof so agents can finish work end to end without raw secrets in chat or repeated dashboard setup.
It is not a generic "agent platform." It is the trust seam that makes autonomous execution usable.
npx -y @agentpayxyz/mcp-server
That one command gives any MCP-compatible host the ability to:
Bee + Clickey: Founder-in-a-Box with Casper-Verifiable Agent Payments
Bee is the operator brain. Clickey is the desktop companion. Together they route work across a real local AI fleet, discover tools through the AgentPay Feed MCP, and stage payment receipts through founder-approved rails. For the Casper Agentic Buildathon, the project adds a Casper-native receipt path: Bee can stage x402-casper payment payloads and bind a Bee mandate/receipt id to a Casper Testnet transfer.
Start here:
Judges can verify the local proof path:
node --test ops/mac-mini/bee/bee.test.mjs
ops/mac-mini/bin/bee doctor
ops/mac-mini/bin/bee caps
ops/mac-mini/bin/bee feed
npm --prefix ops/mac-mini/bee/casper run proof
npm --prefix ops/mac-mini/bee/casper run video
Broadcasting a real testnet proof requires a dedicated funded Casper testnet key:
CASPER_PRIVATE_KEY_HEX=<testnet-private-key-hex> \
CASPER_RECIPIENT_PUBLIC_KEY_HEX=<recipient-public-key-hex> \
BEE_CASPER_RECEIPT_ID=<bee-mandate-id-or-demo-receipt-id> \
npm --prefix ops/mac-mini/bee/casper run receipt
Bee can prepare and stage high-impact actions, but it does not autonomously publish, upload, change OAuth/account settings, move money, or bypass founder approval. Live settlement remains founder-triggered.
Agents fail at the same place every time:
AgentPay fixes that seam.
Capability Vault Users connect a provider once through AgentPay. The raw credential is vaulted server-side. The agent receives only governed capability access.
Governed paid execution Humans set guardrails once: funding rail, auto-approve limit, OTP policy, and spend limits. AgentPay enforces those rules when the agent acts.
Exact-call resume When a paid step needs a human, AgentPay pauses, collects the minimum approval, and resumes the exact blocked call without asking the agent to reconstruct it.
Same-workbench reuse Local projects never need raw provider keys. AgentPay can issue opaque, revocable workben