
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
@codespar/mcp-ap2
Advanced tools
MCP server for AP2 — Google's Agent-to-Agent Payment Protocol (authorization, audit, trust)
MCP server for AP2 — Google's Agent-to-Agent Payment Protocol (authorization, audit, and trust for agentic payments)
AP2 (Agent-to-Agent Payment Protocol) is Google's open framework for authorization, audit, and trust in agentic payments. It answers the critical questions: Who authorized this payment? What limits apply? What's the full audit trail?
With 60+ partners including Visa, Mastercard, Stripe, PayPal, and Square, AP2 is the emerging standard for agent payment governance.
Add to ~/.config/claude/claude_desktop_config.json:
{
"mcpServers": {
"ap2": {
"command": "npx",
"args": ["-y", "@codespar/mcp-ap2"],
"env": {
"AP2_API_KEY": "your-key",
"AP2_AGENT_ID": "your-agent-id"
}
}
}
}
claude mcp add ap2 -- npx @codespar/mcp-ap2
Add to .cursor/mcp.json or .vscode/mcp.json:
{
"servers": {
"ap2": {
"command": "npx",
"args": ["-y", "@codespar/mcp-ap2"],
"env": {
"AP2_API_KEY": "your-key",
"AP2_AGENT_ID": "your-agent-id"
}
}
}
}
| Tool | Description |
|---|---|
register_agent | Register an AI agent as a trusted payer in AP2 |
get_agent | Get agent registration details and trust status |
list_agents | List registered agents with filters |
revoke_agent | Revoke an agent's payment authorization |
authorize_payment | Request payment authorization with scoped limits |
get_authorization | Get authorization details by ID |
list_authorizations | List payment authorizations with filters |
execute_payment | Execute an authorized payment |
get_audit_trail | Get full audit trail for a transaction |
list_audit_events | List audit events with filters |
list_payment_methods | List available payment methods via AP2 partners |
get_transaction | Get full transaction details |
list_transactions | List transactions with filters |
AP2 uses a Bearer API key and requires a registered Agent ID.
AP2 provides a sandbox environment for testing. Set AP2_SANDBOX=true to use it.
| Variable | Required | Description |
|---|---|---|
AP2_API_KEY | Yes | API key from AP2 |
AP2_AGENT_ID | Yes | Registered agent ID |
AP2_SANDBOX | No | Set to true for sandbox mode |
create_policy — Define reusable authorization policiesdelegate_authority — Allow agent-to-agent authorization delegationget_spend_report — Get spend analytics and reportsWant to contribute? Open a PR or request a tool.
Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.
MIT
FAQs
MCP server for AP2 — Google's Agent-to-Agent Payment Protocol (authorization, audit, trust)
The npm package @codespar/mcp-ap2 receives a total of 64 weekly downloads. As such, @codespar/mcp-ap2 popularity was classified as not popular.
We found that @codespar/mcp-ap2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.