io.github.100xPercent/pop-payfinance

pop-pay

Verified · yesterday

Runtime security for AI agent commerce. CLI + MCP server blocks hallucinated purchases.

Install

claude mcp add pop-pay -- npx -y [email protected]

Requires: POP_CDP_URL, POP_ALLOWED_CATEGORIES, POP_MAX_PER_TX, POP_MAX_DAILY, POP_GUARDRAIL_ENGINE

Our take

Pop-pay is a local payment-safety layer for agents: it keeps card details in an encrypted local vault and injects them into a browser over CDP rather than passing them through the model context. The MCP surface is real and the package has no install-time self-registration, but the threat model is high stakes because agents can still initiate checkout flows through a browser. Best fit is users already experimenting with agent commerce who are willing to review the vault and spending-limit setup carefully.

reviewed by hand · 2026-07-06

Something wrong or dead here? Report it

Verification record

last verified: yesterday
github stars: 1
last commit: 2 mo ago
archived: no
license: MIT
npm: pop-pay
latest version: 0.5.10
in registry since: 2026-04-13

github.com/100xPercent/pop-pay