
Company News
Andrew Becherer Joins Socket as Chief Information Security Officer
Socket’s first CISO brings deep experience securing high-growth SaaS companies as open source supply chain threats accelerate.
@codespar/mcp-ap2
Advanced tools
MCP server for AP2 — Google's Agent-to-Agent Payment Protocol (authorization, audit, trust)
MCP server for AP2 — Google's Agent-to-Agent Payment Protocol (authorization, audit, and trust for agentic payments)
AP2 (Agent-to-Agent Payment Protocol) is Google's open framework for authorization, audit, and trust in agentic payments. It answers the critical questions: Who authorized this payment? What limits apply? What's the full audit trail?
With 60+ partners including Visa, Mastercard, Stripe, PayPal, and Square, AP2 is the emerging standard for agent payment governance.
Add to ~/.config/claude/claude_desktop_config.json:
{
"mcpServers": {
"ap2": {
"command": "npx",
"args": ["-y", "@codespar/mcp-ap2"],
"env": {
"AP2_API_KEY": "your-key",
"AP2_AGENT_ID": "your-agent-id"
}
}
}
}
claude mcp add ap2 -- npx @codespar/mcp-ap2
Add to .cursor/mcp.json or .vscode/mcp.json:
{
"servers": {
"ap2": {
"command": "npx",
"args": ["-y", "@codespar/mcp-ap2"],
"env": {
"AP2_API_KEY": "your-key",
"AP2_AGENT_ID": "your-agent-id"
}
}
}
}
| Tool | Description |
|---|---|
register_agent | Register an AI agent as a trusted payer in AP2 |
get_agent | Get agent registration details and trust status |
list_agents | List registered agents with filters |
revoke_agent | Revoke an agent's payment authorization |
authorize_payment | Request payment authorization with scoped limits |
get_authorization | Get authorization details by ID |
list_authorizations | List payment authorizations with filters |
execute_payment | Execute an authorized payment |
get_audit_trail | Get full audit trail for a transaction |
list_audit_events | List audit events with filters |
list_payment_methods | List available payment methods via AP2 partners |
get_transaction | Get full transaction details |
list_transactions | List transactions with filters |
AP2 uses a Bearer API key and requires a registered Agent ID.
AP2 provides a sandbox environment for testing. Set AP2_SANDBOX=true to use it.
| Variable | Required | Description |
|---|---|---|
AP2_API_KEY | Yes | API key from AP2 |
AP2_AGENT_ID | Yes | Registered agent ID |
AP2_SANDBOX | No | Set to true for sandbox mode |
create_policy — Define reusable authorization policiesdelegate_authority — Allow agent-to-agent authorization delegationget_spend_report — Get spend analytics and reportsWant to contribute? Open a PR or request a tool.
Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.
MIT
FAQs
MCP server for AP2 — Google's Agent-to-Agent Payment Protocol (authorization, audit, trust)
The npm package @codespar/mcp-ap2 receives a total of 20 weekly downloads. As such, @codespar/mcp-ap2 popularity was classified as not popular.
We found that @codespar/mcp-ap2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket’s first CISO brings deep experience securing high-growth SaaS companies as open source supply chain threats accelerate.

Company News
Replit is integrating Socket Firewall into its AI-powered development experience to help protect builders from malicious open source packages.

Security News
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.