
Product
Socket MCP Adds Org Alerts, Threat Feed Review, and Package Inspection
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.
@powforge/paymcp-l402-provider
Advanced tools
Lightning L402 payment provider for paymcp — drop-in LNBits backend for @price() and @subscription() decorators
LNBits Lightning payment provider for paymcp — drop-in backend for @price() and @subscription() decorators.
npm install @powforge/paymcp-l402-provider
const { LnbitsPaymentProvider } = require('@powforge/paymcp-l402-provider');
const provider = new LnbitsPaymentProvider({
lnbitsUrl: process.env.LNBITS_URL,
lnbitsApiKey: process.env.LNBITS_INVOICE_KEY,
satsAmount: 21,
});
Wire it into paymcp:
const { PayMCP } = require('paymcp');
PayMCP(mcp, { providers: [provider] });
The satsAmount config controls how many sats are charged per call. The amount and currency arguments from paymcp are accepted but ignored — Lightning invoices are denominated in sats, not fiat.
new LnbitsPaymentProvider(config)lnbitsUrl (string, required) — LNBits instance URL (e.g. https://lnbits.example)lnbitsApiKey (string, required) — Invoice/read key (NOT admin key)satsAmount (number, default 10) — Sats charged per paymentfetchImpl (function, optional) — Inject for tests; defaults to globalThis.fetchcreatePayment(amount, currency, description) => Promise<{ payment_id, payment_url }>Mints a Lightning invoice. The amount and currency arguments are ignored; sats come from config.
getPaymentStatus(payment_id) => Promise<'paid'|'pending'>Returns 'paid' when LNBits reports the invoice settled, 'pending' otherwise.
MIT
FAQs
Lightning L402 payment provider for paymcp — drop-in LNBits backend for @price() and @subscription() decorators
We found that @powforge/paymcp-l402-provider demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.