MCP.Market

Agent Pay MCP server

by deepfirstsearch.com·com.deepfirstsearch/agent-pay-mcp·v0.2.1·1 stars
No reviews yet

x402 payments in USDC on Base inside an owner-signed, on-chain budget the model can't change

B77/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B77/100

full report

Adoption
Growing

1 stars624 downloads/wk

Reviews

Write one

Nobody has reviewed Agent Pay yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Agent Pay tools (3)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • budget_status

    Remaining budget per merchant, when the plan window renews, and the vault's USDC balance.

  • list_merchants

    Origins this agent may pay, with the expected price per call and the remaining budget.

  • paid_fetch

    Fetches a URL. If the server answers 402 Payment Required, pays it in USDC only when the merchant, price and budget match the owner's configuration; otherwise the payment is refused. Use list_merchants to see which origins can be paid. You cannot change payees, prices or limits.

Public scan report

scanner v0.1.10 · 2026-10-09 · same rubric, same numbers if you re-run it

no findings
  • Code scan4 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identitynamespace and repository owner differ4/10
Overall 77/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Agent Pay compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
77/100
higher than 50% of 4,460 AI and agents servers
Tools
3
the typical AI and agents server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
1
more than 50% of 2,711 AI and agents servers
Downloads a week
624
more than 89% of 1,538 AI and agents servers with a package

What its tools let an agent do: 3 read

Install Agent Pay in Claude Code, Cursor or VS Code

Runs npx -y @deepfirstsearch/agent-pay-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add agent-pay-mcp -- npx -y @deepfirstsearch/agent-pay-mcp
Add to Cursor

What the publisher says

From the Agent Pay repository's README, as published. We do not edit it. Read it on GitHub

Deep First Search: safe x402 payments for AI agents

Safe rails for the agent economy. Search deep. Reveal only what you choose.

AI agents now pay for things over x402. Every one of those payments is public, and any agent can be talked into paying the wrong party. Deep First Search makes the model propose payments while the owner's signed policy decides.

Try it in 10 seconds

No keys, no wallet, no chain: a local x402 merchant plays honest and hostile, and you watch the agent pay for data and refuse four attacks.

npx @deepfirstsearch/agent-pay demo

Pick your path

The integrations take the SDK as a peer dependency, so your app always uses a single copy of it. Step-by-step guides for 34 x402 merchants, each tested with a real payment on Base mainnet, are in docs/integrations.

Full developer guide: deepfirstsearch.com/developers · building a wallet, framework or platform? Partners.

What's in this repository

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Agent Pay: common questions

Is Agent Pay MCP server safe?
Mostly: it is graded B (77/100). Read the Agent Pay safety report
How do I install Agent Pay?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Agent Pay need an API key?
Yes. The registry entry asks for AGENT_PAY_BURNER_SEED, AGENT_PAY_AGENT_KEY.
Is Agent Pay maintained?
The last commit was 26 days ago (2026-10-09). The latest release is v0.2.1.
What can I use instead of Agent Pay?
Servers from other publishers that do the same job: Agoragentic Agent OS MCP server, three.ws Provenance MCP server and IWE (iwe.md) MCP server.
How does Agent Pay compare with other AI and agents MCP servers?
safety score 77/100 (higher than 50% of 4,460 AI and agents servers); tools 3 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Agent Pay

Same job from other publishers: the closest match first, then the best rated.

  • Agoragentic Agent OS MCP
    Triptych OS (Agent OS) MCP for governed routing, receipts, and USDC settlement on Base.
    B
  • three.ws Provenance
    Append-only, signed, on-chain-verifiable agent action log — record and audit what agents did.
    More from nirholas →
    B
  • IWE (iwe.md)
    Markdown knowledge base as agent memory. Runs against the notes directory it is started in.
    A
  • Power BI Authoring MCP Server (Local)
    The Power BI Authoring MCP server lets an AI agent create and change Power BI semantic models.
    A
  • Actual Budget MCP Server
    MCP server exposing Actual Budget accounts, transactions, budgets and reporting to LLM assistants.
    B