@codespar/mcp-ap2

@codespar/mcp-ap2

Alpha release — published under the alpha npm dist-tag. Endpoint paths follow public docs and BACEN/provider conventions but have not been fully live-validated. Pin exact versions during 0.x.x-alpha. Install with npm install <pkg>@alpha.

MCP server for AP2 — Google's Agent-to-Agent Payment Protocol (authorization, audit, and trust for agentic payments)

What is AP2?

AP2 (Agent-to-Agent Payment Protocol) is Google's open framework for authorization, audit, and trust in agentic payments. It answers the critical questions: Who authorized this payment? What limits apply? What's the full audit trail?

With 60+ partners including Visa, Mastercard, Stripe, PayPal, and Square, AP2 is the emerging standard for agent payment governance.

Quick Start

Claude Desktop

Add to ~/.config/claude/claude_desktop_config.json:

{
  "mcpServers": {
    "ap2": {
      "command": "npx",
      "args": ["-y", "@codespar/mcp-ap2"],
      "env": {
        "AP2_API_KEY": "your-key",
        "AP2_AGENT_ID": "your-agent-id"
      }
    }
  }
}

Claude Code

claude mcp add ap2 -- npx @codespar/mcp-ap2

Cursor / VS Code

Add to .cursor/mcp.json or .vscode/mcp.json:

{
  "servers": {
    "ap2": {
      "command": "npx",
      "args": ["-y", "@codespar/mcp-ap2"],
      "env": {
        "AP2_API_KEY": "your-key",
        "AP2_AGENT_ID": "your-agent-id"
      }
    }
  }
}

Tools (22)

Tool	Purpose
register_agent	Register an AI agent as a trusted payer in the AP2 network.
get_agent	Get agent registration details, trust status, and current spend usage
list_agents	List registered agents with optional filters
revoke_agent	Revoke an agent's payment authorization.
authorize_payment	Request payment authorization with scoped limits.
get_authorization	Get authorization details including status, limits, and expiry
list_authorizations	List payment authorizations with optional filters
execute_payment	Execute an authorized payment.
get_audit_trail	Get the complete audit trail for a transaction — every authorization, approval, execution, and settlement e...
list_audit_events	List audit events across all transactions with filters
list_payment_methods	List available payment methods from AP2 partner network (Visa, Mastercard, Stripe, PayPal, etc.)
get_transaction	Get full transaction details including authorization, execution, and settlement status
list_transactions	List transactions with optional filters
create_intent_mandate	Create an AP2 intent mandate — a Verifiable Credential expressing the user's intent to delegate a transacti...
create_cart_mandate	Create an AP2 cart mandate — a signed, locked-cart commitment from a merchant binding line items, totals, a...
create_payment_mandate	Create an AP2 payment mandate — the final Verifiable Credential authorizing settlement against a cart mandate.
verify_credential	Verify a Verifiable Credential (intent, cart, or payment mandate).
create_presentation	Create a Verifiable Presentation bundling one or more credentials (e.g.
verify_presentation	Verify a Verifiable Presentation and all embedded credentials, including holder binding and challenge nonce.
resolve_did	Resolve a Decentralized Identifier (DID) to its DID document via the AP2 universal resolver.
create_receipt	Create a signed receipt for a settled payment — a tamper-evident record linking transaction, mandates, and...
verify_receipt	Verify a receipt's signature, issuer, and chain back to the originating mandates.

Authentication

AP2 uses a Bearer API key and requires a registered Agent ID.

Get your credentials

• Visit the AP2 Developer Portal
• Register your application
• Generate an API key
• Register your agent to get an Agent ID
• Set the environment variables

Sandbox / Testing

AP2 provides a sandbox environment for testing. Set AP2_SANDBOX=true to use it.

Environment Variables

Variable	Required	Description
AP2_API_KEY	Yes	API key from AP2
AP2_AGENT_ID	Yes	Registered agent ID
AP2_SANDBOX	No	Set to true for sandbox mode

Use Cases

• Authorized agent purchases — Agent requests spend authorization, gets approval with limits, then executes payment
• Multi-agent commerce — Agent A authorizes Agent B to make payments on its behalf with scoped limits
• Compliance & audit — Full audit trail of every authorization, approval, execution, and settlement
• Cross-rail payments — AP2 bridges card payments, bank transfers, wallets, and x402 micropayments

Roadmap

v0.2 (planned)

• create_policy — Define reusable authorization policies
• delegate_authority — Allow agent-to-agent authorization delegation
• get_spend_report — Get spend analytics and reports
• OAuth 2.0 authentication flow

v0.3 (planned)

• Webhook support for real-time authorization events
• Multi-currency support with automatic FX
• Integration with x402 as payment method

Want to contribute? Open a PR or request a tool.

Links

• AP2 (Google)
• AP2 Specification
• MCP Dev LATAM
• Landing Page

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT