Pay MCP server

by vauban.tech·tech.vauban/pay-mcp·v0.7.1

x402 tools for MCP clients: pay exact/Starknet or STARK-receipt 402s, verify, JCS-hash. No account.

C55/100grade C

What users say

No reviews yet

Safety scan

C55/100

Adoption

Not measured yet

Usage numbers are collected on the next scan

Reviews

Nobody has reviewed Pay yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

check_merchant
Check a merchant's proven service history (an x402 STARK-receipt history document,
jcs_hash
JCS (RFC 8785) canonicalize a JSON object then compute its SHA-256 hash.
make_payment
Make a payment on Starknet Sepolia testnet. Call it with no arguments to
pay_for_resourcewrite action
Fetch a resource gated behind x402 and complete the payment flow to obtain it -- the x402 CLIENT walk, which none of the other tools here perform. GET url: if it answers 200 directly, the resource was free (outcome no_payment_required -- not a failure, x402 gates specific endpoints, not the whole internet). If it answers 402, parses the PAYMENT-REQUIRED manifest, downloads a STARK proof from proof
request_delegation_grantwrite action
Create a DelegationGrant authorization object. Builds the grant with
verify_receipt
Verify a SettlementReceipt. Two modes:

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

1 low

Code scan15 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenanceno repository listed3/15
Maintainer identityno repository or website to verify2/10

Overall 55/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y @vauban-pay/mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add pay-mcp -- npx -y @vauban-pay/mcp

Is Pay MCP server safe?: With care: it is graded C, so read the findings first (55/100). Read the Pay safety report
How do I install Pay?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Pay need an API key?: Yes. The registry entry asks for PAY_MCP_SEPOLIA_PRIVATE_KEY, PAY_MCP_STANDARD_X402_PRIVATE_KEY.
Is Pay maintained?: The latest release is v0.7.1.

Local package. It runs on your machine, not through the gateway.

STARKNET_RPC_URLStarknet Sepolia RPC endpoint for the two chain-reading tools. Optional; defaults to a public node not operated by Vauban.
PAY_MCP_SEPOLIA_ACCOUNT_ADDRESSStarknet Sepolia account address enabling make_payment chain mode. Optional; without it make_payment returns a hash-only pending result with no network call.
PAY_MCP_SEPOLIA_PRIVATE_KEYsecretPrivate key for that account. Optional; never required to try the tools.
PAY_MCP_STANDARD_X402_PAYEESStandard x402 path: comma-separated payTo addresses pay_for_resource may pay, or * for any. Empty pays nobody (fail closed).
PAY_MCP_STANDARD_X402_MAX_WEIStandard x402 path: cap on one payment in atomic units (default 0.1 STRK).
PAY_MCP_STANDARD_X402_ACCOUNT_ADDRESSStandard x402 path: a signer of its own (falls back to PAY_MCP_SEPOLIA_*).
PAY_MCP_STANDARD_X402_PRIVATE_KEYsecretPrivate key for that account. Optional.

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/vauban-pay-mcp.svg)](https://mcp.market/server/vauban-pay-mcp)