
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Escrow protection for autonomous agent payments on Base. USDC held in smart contract until the job is done. PayPal for AI agents via x402.
The trust layer for agent-to-agent commerce. Escrow protection with real dispute resolution for x402 payments on Base.
Agents pay for API calls with USDC via x402. But payments are final — no refunds, no disputes, no recourse. Every other escrow service says "no disputes, no chargebacks." PayCrow is different: funds are locked until delivery is verified, with on-chain dispute resolution if something goes wrong.
Install as an MCP server. Your agent gets trust-informed, escrow-protected payments.
npx paycrow init
Creates a fresh wallet and prints your Claude Desktop config — copy-paste and go.
Send a small amount of ETH (for gas, ~$0.50) and USDC (for payments) to the printed address on Base.
{
"mcpServers": {
"paycrow": {
"command": "npx",
"args": ["paycrow"],
"env": {
"PRIVATE_KEY": "0x_YOUR_KEY_FROM_INIT"
}
}
}
}
Restart Claude Desktop. Done.
If you only want trust scoring without escrow, skip the wallet setup:
{
"mcpServers": {
"paycrow": {
"command": "npx",
"args": ["paycrow"]
}
}
}
trust_gate and trust_score_query work without PRIVATE_KEY. Escrow/payment tools will prompt you to set one up.
PRIVATE_KEY=0x... npx paycrow
Runs over stdio. Compatible with Claude Desktop, Claude Code, Cursor, Windsurf, OpenClaw, etc.
safe_pay — RecommendedThe smart way to pay an agent. Checks their trust score first, then auto-configures escrow protection based on risk.
Flow: Check trust → Set protection → Create escrow → Call API → Verify → Release or dispute
Protection levels (automatic):
High trust agent → 15min timelock, proceed normally
Moderate trust → 60min timelock, $25 cap
Low trust → 4hr timelock, $5 cap
Unknown/caution → BLOCKED — won't send funds
Parameters:
url — API endpoint to call
seller_address — Ethereum address of the agent
amount_usdc — Payment amount ($0.10 - $100)
method — GET, POST, PUT, DELETE (default: GET)
headers — HTTP headers (optional)
body — Request body (optional)
trust_gate — Check Before You PayShould you pay this agent? Returns a go/no-go decision with recommended escrow parameters.
Parameters:
address — Ethereum address to check
intended_amount_usdc — How much you plan to pay (optional)
Returns:
decision — proceed / proceed_with_caution / do_not_proceed
escrowParams — recommended timelock and max amount
trustScore — 0-100 score
warning — if intended amount exceeds safe limit
trust_score_query — Full BreakdownFull trust score from 4 on-chain sources: PayCrow escrow history (40%), ERC-8004 identity (25%), Moltbook karma (15%), and Base chain activity (20%).
trust_onchain_quick — Free Fast CheckPayCrow reputation only. No API keys needed. Free.
x402_protected_call — AdvancedManual escrow with full control over verification (JSON Schema or hash-lock) and timelock. Use when safe_pay's automatic protection isn't enough.
escrow_createCreate a USDC escrow with built-in dispute resolution.
escrow_releaseConfirm delivery and release funds to the seller.
escrow_disputeFlag bad delivery. Locks funds for arbiter review — the only escrow on Base with real dispute resolution.
escrow_statusCheck the current state of an escrow.
Agent (buyer) ──→ paycrow ──→ Check trust ──→ Create escrow ──→ Call API
│
Verify response
│
┌──────────────┴──────────────┐
Valid response Bad response
│ │
Auto-release Auto-dispute
(seller paid) (arbiter reviews)
Escrow lifecycle:
FUNDED → RELEASED (delivery confirmed, seller paid minus 2% fee)
→ DISPUTED → RESOLVED (arbiter rules: splits funds)
→ EXPIRED → REFUNDED (timeout: full refund, no fee)
| Feature | PayCrow | Others |
|---|---|---|
| Escrow | Yes (Base, USDC) | Some |
| Dispute resolution | Yes — on-chain arbiter | No — "no disputes, no chargebacks" |
| Trust scoring | 4 on-chain sources | Limited or none |
| Trust-informed escrow | safe_pay auto-protects | Manual only |
| MCP server | 9 tools | 0-1 tools |
| Price | $0.001/trust query | $0.001-0.05 |
| Variable | Required | Description |
|---|---|---|
PRIVATE_KEY | For escrow tools | Wallet private key (hex, with 0x prefix) |
CHAIN | No | "base" for mainnet, defaults to Base Sepolia |
BASESCAN_API_KEY | No | For Base chain activity data (free at basescan.org) |
MOLTBOOK_APP_KEY | No | For Moltbook social reputation |
BASE_RPC_URL | No | Custom RPC URL for Base mainnet |
| Testnet | Mainnet | |
|---|---|---|
| Network | Base Sepolia | Base |
| USDC | 0x036CbD53842c5426634e7929541eC2318f3dCF7e | 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 |
| Gas cost | ~$0.005/escrow cycle | ~$0.005/escrow cycle |
Set CHAIN=base for mainnet. Defaults to Base Sepolia.
Solidity smart contracts with:
Source: github.com/michu5696/paycrow
MIT
FAQs
Escrow protection for autonomous agent payments on Base. USDC held in smart contract until the job is done. PayPal for AI agents via x402.
We found that paycrow demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.