Agent Pay Mcp
x402 payments in USDC on Base inside an owner-signed, on-chain budget the model can't change
- Transport
- Not stated
- Package
- —
- Registry id
- com.deepfirstsearch/agent-pay-mcp
No install snippet on purpose. A working MCP config is a command, its arguments and an environment block — the last two are where API keys live, so this catalogue never stores them and cannot publish them. Follow the link above for the authors' own instructions.
Safe rails for the agent economy. Search deep. Reveal only what you choose.
AI agents now pay for things over x402. Every one of those payments is public, and any agent can be talked into paying the wrong party. Deep First Search makes the model propose payments while the owner's signed policy decides.
Try it in 10 seconds
No keys, no wallet, no chain: a local x402 merchant plays honest and hostile, and you watch the agent pay for data and refuse four attacks.
npx @deepfirstsearch/agent-pay demo
Pick your path
| You use | Install | Guide |
|---|---|---|
| Claude Desktop, Claude Code, Cursor, any MCP client | npx @deepfirstsearch/agent-pay-mcp |
integrations/mcp |
| Vercel AI SDK | npm i @deepfirstsearch/agent-pay-ai-sdk |
integrations/ai-sdk |
| LangChain.js / LangGraph | npm i @deepfirstsearch/agent-pay-langchain |
integrations/langchain |
| Your own agent, any wallet | npm i @deepfirstsearch/agent-pay |
sdk |
| On-chain budgets on Base | npx @deepfirstsearch/agent-pay owner help |
owner CLI |
Full developer guide: deepfirstsearch.com/developers · building a wallet, framework or platform? Partners.
What's in this repository
| Component | What it does | Status |
|---|---|---|
MCP server (integrations/mcp/) |
Model Context Protocol server: Claude Desktop, Claude Code, Cursor and any MCP client get paid_fetch, list_merchants and budget_status tools that pay x402 APIs inside the owner's budget |
✅ npx @deepfirstsearch/agent-pay-mcp · tested with a real Claude session on Base Sepolia |
Agent Safe (contracts/) |
On-chain vault: owner-signed, timelocked, per-merchant budgets; the agent key can spend but never widen | ✅ 98 tests (fuzzing, invariants, properties, regressions, Base mainnet fork with real USDC), two internal reviews · live on Base mainnet (beta) |
agent-pay SDK (sdk/) |
x402 v2 client with a policy engine outside the model, prompt-injection guards, per-merchant payers, owner CLI | ✅ 162 tests incl. on-chain loops and the official x402 facilitator · npx @deepfirstsearch/agent-pay owner … |
Framework tools (integrations/) |
Vercel AI SDK paidFetchTool, LangChain/LangGraph createPaidFetchTool |
✅ on npm |
$DEPTH (contracts/) |
1B fixed supply, no mint function, no owner; fees burned through a fee jar + firepit | ✅ Implemented · not launched |
Website (web/) |
Site, whitepaper, tokenomics, partner kit, legal pages; strict CSP, zero third parties | ✅ |
MCP server: let Claude or Cursor pay x402 APIs safely
@deepfirstsearch/agent-pay-mcp is a stdio MCP server. The model gets three tools and nothing that can move money on its own terms:
| MCP tool | What it does |
|---|---|
paid_fetch(url, method?, body?, contentType?) |
Fetches a URL; if it answers 402 Payment Required, pays in USDC on Base only when the merchant, price and budget match your config |
list_merchants() |
Merchants the agent may pay, their prices and the remaining budget |
budget_status() |
Remaining budget per merchant, plan window, vault balance |
From the project's README.