
Security News
White House Authorizes Private Companies to Conduct Offensive Cyber Operations
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.
@useagentpay/mcp-server
Advanced tools
MCP server for AgentPay — exposes the full payment lifecycle to any MCP-compatible AI host (Claude Desktop, Cursor, Claude Code, Windsurf).
8 tools, 3 resources, 3 prompts. Agents can propose purchases, wait for human approval, execute checkout, and retrieve receipts — all over the Model Context Protocol.
npx @useagentpay/mcp-server # stdio (default)
npx @useagentpay/mcp-server --http # HTTP transport
Or via the AgentPay CLI:
agentpay mcp # stdio
agentpay mcp --http # HTTP
Add to your Claude Desktop, Cursor, or Claude Code config:
{
"mcpServers": {
"agentpay": {
"command": "npx",
"args": ["@useagentpay/mcp-server"]
}
}
}
{
"mcpServers": {
"agentpay": {
"command": "npx",
"args": ["@useagentpay/mcp-server"],
"env": {
"AGENTPAY_PASSPHRASE": "your-passphrase"
}
}
}
}
AgentPay must be set up before the MCP server can operate:
npm install -g @useagentpay/sdk
agentpay setup # encrypt & store credentials
agentpay budget --set 200
| Tool | Description |
|---|---|
agentpay_status | Check if setup is complete, balance, budget, pending count |
agentpay_check_balance | Current balance and limits (call before proposing) |
agentpay_list_pending | Pending transactions awaiting approval |
agentpay_propose_purchase | Propose a new purchase (merchant, amount, description, url) |
agentpay_get_transaction | Get transaction details by ID |
agentpay_wait_for_approval | Long-poll until approved or rejected |
agentpay_execute_purchase | Execute an approved purchase (requires passphrase config) |
agentpay_get_receipt | Get receipt for a completed purchase |
| URI | Description |
|---|---|
agentpay://wallet | Wallet balance and limits |
agentpay://transactions/{txId} | Transaction details |
agentpay://audit-log | Last 50 audit log entries |
| Name | Description |
|---|---|
buy | Guided step-by-step purchase flow |
budget-check | Balance and pending transaction summary |
purchase-status | Recent transaction history |
1. agentpay_status → verify setup is complete
2. agentpay_check_balance → confirm budget for purchase
3. agentpay_propose_purchase → create pending transaction
4. agentpay_wait_for_approval → wait for human to approve
5. agentpay_execute_purchase → run checkout via headless browser
6. agentpay_get_receipt → retrieve confirmation
The execute_purchase tool needs access to the vault passphrase. Three modes:
| Mode | Config | Description |
|---|---|---|
| env | AGENTPAY_PASSPHRASE | Passphrase from environment variable |
| server | AGENTPAY_PASSPHRASE_SERVER | Fetch passphrase from a URL |
| none | Neither set | Read-only — propose/approve works, execute does not |
| Variable | Purpose | Default |
|---|---|---|
AGENTPAY_PASSPHRASE | Passphrase for execute (env mode) | — |
AGENTPAY_PASSPHRASE_SERVER | URL to fetch passphrase (server mode) | — |
ANTHROPIC_API_KEY | LLM API key for browser navigation | — |
AGENTPAY_HOME | Override data directory | ~/.agentpay |
MCP_TRANSPORT | Set to http for HTTP transport | stdio |
MCP_HTTP_PORT | HTTP port | 3100 |
MIT
FAQs
MCP server that lets AI agents make purchases with human approval. Local-first payments, encrypted credentials, budget controls.
The npm package @useagentpay/mcp-server receives a total of 39 weekly downloads. As such, @useagentpay/mcp-server popularity was classified as not popular.
We found that @useagentpay/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.