Xpay MCP server
io.github.xona-labs/xpay·v0.2.38·1 starsXona Wallet: agent wallet for AI agents. x402 payments, AgenC hires, 20k+ services
1 stars324 downloads/wk
Reviews
Write oneNobody has reviewed Xpay yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Xpay tools (3)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
xpay_bento_disableTurn OFF the Bento intent firewall. Use this if the wallet isn't registered at the
xpay_bento_enableTurn ON the Bento intent firewall for this agent's wallet. Returns the agent wallet
xpay_bento_statusCheck whether the Bento intent firewall is active. When on, every payment is
Public scan report
scanner v0.1.10 · 2026-10-30 · same rubric, same numbers if you re-run it
- Code scan151 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 26 days ago15/15
- Maintainer identityregistry namespace matches repository owner6/10
How Xpay compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 80/100
- higher than 60% of 4,460 AI and agents servers
- Tools
- 3
- the typical AI and agents server has 6
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 1
- more than 50% of 2,711 AI and agents servers
- Downloads a week
- 324
- more than 81% of 1,538 AI and agents servers with a package
What its tools let an agent do: 3 read
Release history: 4 versions in the registry since 2026-08-19, latest 2026-10-05, typically one every 7 days.
Install Xpay in Claude Code, Cursor or VS Code
Runs npx -y @xona-labs/xpay on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add xpay -- npx -y @xona-labs/xpay
What the publisher says
From the Xpay repository's README, as published. We do not edit it. Read it on GitHub
Xona Wallet
Ships as the npm package @xona-labs/xpay, the xpay CLI, and the xpay_* MCP tools. The package and command names are unchanged.
Agentic-commerce wallet. Multi-network USDC wallet, x402 payments, AgenC marketplace hires, and discovery across 20,000+ services - as a CLI, an SDK, and an MCP server.
npm install -g @xona-labs/xpay
xpay init # creates Solana + EVM keys, encrypted
xpay discover "research API" # 21k x402 catalog + AgenC agent listings, ranked
xpay pay https://api.example.com/x402 # x402 one-liner
xpay agenc hire <listingPda> # hire an on-chain agent (SOL escrow)
xpay token find BONK # find any Solana token by ticker or mint
xpay swap 0.5 SOL BONK # swap in your own wallet via Jupiter
xpay transfer 5 USDC 7G73PL...gC # direct USDC transfer
xpay balance # unified across networks
xpay report # daily / weekly / monthly report via OrbitX402// SDK - same primitives, programmatic
import { loadProfile, createXPay } from "@xona-labs/xpay";
const xpay = createXPay({ profile: await loadProfile({ passphrase }) });
const result = await xpay.do("translate this PDF to Japanese", { body: { file } });Xona Wallet is the wallet and rail layer for agentic commerce. It hides x402, USDC, RPC, and multi-network routing behind a flat surface so agent builders (Claude / Codex / OpenAI / Gemini / your own) can find and pay for services without writing payment plumbing.
Install
npm install -g @xona-labs/xpay # CLI + MCP server, system-wide
npm install @xona-labs/xpay # programmatic SDK in a projectQuickstart
xpay init
# ✔ Profile "default" created at /Users/you/.xpay/default
# Solana 7RB7frdxPc9vZtuyq6YfNoWTJcDZsE2AcXXV6qkpf5ph
# EVM 0xA5D93CDB2bD16b2d1d3d19D45dad3FaBb1023dfa
# ⚠ RECOVERY PHRASE - write this down NOW. We cannot recover it for you.
# 1. depend 2. guess 3. mercy 4. online
# ... (24 words)Fund the addresses with a few dollars of USDC on Solana mainnet, Base, or both. Then:
xpay balance
xpay discover "image generation"
xpay pay https://orbisapi.com/proxy/image-alt-text-generator-api-1c9472CLI commands
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Xpay: common questions
- Is Xpay MCP server safe?
- Mostly: it is graded B (80/100). Read the Xpay safety report
- How do I install Xpay?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Xpay need an API key?
- Yes. The registry entry asks for
XPAY_PASSPHRASE,XPAY_SOLANA_SECRET,XPAY_EVM_KEY. - Is Xpay maintained?
- The last commit was 30 days ago (2026-10-05). The latest release is v0.2.38.
- What can I use instead of Xpay?
- Servers from other publishers that do the same job: 3D AI Agent Avatar MCP server.
- How does Xpay compare with other AI and agents MCP servers?
- safety score 80/100 (higher than 60% of 4,460 AI and agents servers); tools 3 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Xpay
Same job from other publishers: the closest match first, then the best rated.
- 3D AI Agent Avatar3D AI Agent Avatar — render any GLB, give it a Solana wallet, a voice, and pump.fun powers.not reviewedEstablishedB