MCP.Market

Xpay MCP server

by xona-labs·io.github.xona-labs/xpay·v0.2.38·1 stars

Xona Wallet: agent wallet for AI agents. x402 payments, AgenC hires, 20k+ services

B80/100grade B
What users say
No reviews yet
Be the first
Safety scan
B80/100

full report

Adoption
Growing

1 stars324 downloads/wk

Reviews

Write one

Nobody has reviewed Xpay yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Xpay tools (3)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • xpay_bento_disable

    Turn OFF the Bento intent firewall. Use this if the wallet isn't registered at the

  • xpay_bento_enable

    Turn ON the Bento intent firewall for this agent's wallet. Returns the agent wallet

  • xpay_bento_status

    Check whether the Bento intent firewall is active. When on, every payment is

Public scan report

scanner v0.1.10 · 2026-10-30 · same rubric, same numbers if you re-run it

no findings
  • Code scan151 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 26 days ago15/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 80/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Xpay compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
80/100
higher than 60% of 4,460 AI and agents servers
Tools
3
the typical AI and agents server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
1
more than 50% of 2,711 AI and agents servers
Downloads a week
324
more than 81% of 1,538 AI and agents servers with a package

What its tools let an agent do: 3 read

Release history: 4 versions in the registry since 2026-08-19, latest 2026-10-05, typically one every 7 days.

Install Xpay in Claude Code, Cursor or VS Code

Runs npx -y @xona-labs/xpay on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add xpay -- npx -y @xona-labs/xpay
Add to Cursor

What the publisher says

From the Xpay repository's README, as published. We do not edit it. Read it on GitHub

Xona Wallet

Ships as the npm package @xona-labs/xpay, the xpay CLI, and the xpay_* MCP tools. The package and command names are unchanged.

Agentic-commerce wallet. Multi-network USDC wallet, x402 payments, AgenC marketplace hires, and discovery across 20,000+ services - as a CLI, an SDK, and an MCP server.

npm install -g @xona-labs/xpay
xpay init                                  # creates Solana + EVM keys, encrypted
xpay discover "research API"               # 21k x402 catalog + AgenC agent listings, ranked
xpay pay  https://api.example.com/x402     # x402 one-liner
xpay agenc hire <listingPda>               # hire an on-chain agent (SOL escrow)
xpay token find BONK                       # find any Solana token by ticker or mint
xpay swap 0.5 SOL BONK                     # swap in your own wallet via Jupiter
xpay transfer 5 USDC 7G73PL...gC           # direct USDC transfer
xpay balance                               # unified across networks
xpay report                                # daily / weekly / monthly report via OrbitX402
// SDK - same primitives, programmatic
import { loadProfile, createXPay } from "@xona-labs/xpay";
const xpay = createXPay({ profile: await loadProfile({ passphrase }) });
const result = await xpay.do("translate this PDF to Japanese", { body: { file } });

Xona Wallet is the wallet and rail layer for agentic commerce. It hides x402, USDC, RPC, and multi-network routing behind a flat surface so agent builders (Claude / Codex / OpenAI / Gemini / your own) can find and pay for services without writing payment plumbing.

Install

npm install -g @xona-labs/xpay      # CLI + MCP server, system-wide
npm install     @xona-labs/xpay      # programmatic SDK in a project

Quickstart

xpay init
# ✔ Profile "default" created at /Users/you/.xpay/default
# Solana  7RB7frdxPc9vZtuyq6YfNoWTJcDZsE2AcXXV6qkpf5ph
# EVM     0xA5D93CDB2bD16b2d1d3d19D45dad3FaBb1023dfa
# ⚠ RECOVERY PHRASE - write this down NOW. We cannot recover it for you.
#   1. depend   2. guess    3. mercy    4. online
#   ... (24 words)

Fund the addresses with a few dollars of USDC on Solana mainnet, Base, or both. Then:

xpay balance
xpay discover "image generation"
xpay pay https://orbisapi.com/proxy/image-alt-text-generator-api-1c9472

CLI commands

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Xpay: common questions

Is Xpay MCP server safe?
Mostly: it is graded B (80/100). Read the Xpay safety report
How do I install Xpay?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Xpay need an API key?
Yes. The registry entry asks for XPAY_PASSPHRASE, XPAY_SOLANA_SECRET, XPAY_EVM_KEY.
Is Xpay maintained?
The last commit was 30 days ago (2026-10-05). The latest release is v0.2.38.
What can I use instead of Xpay?
Servers from other publishers that do the same job: 3D AI Agent Avatar MCP server.
How does Xpay compare with other AI and agents MCP servers?
safety score 80/100 (higher than 60% of 4,460 AI and agents servers); tools 3 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Xpay

Same job from other publishers: the closest match first, then the best rated.

  • 3D AI Agent Avatar
    3D AI Agent Avatar — render any GLB, give it a Solana wallet, a voice, and pump.fun powers.
    B