Pop Pay MCP Server

by 100xpercentio.github.100xPercent/pop-payv0.5.7

The runtime security layer for AI agent commerce. Drop-in CLI + MCP server — blocks hallucinated purchases and keeps card credentials out of agent context. It only takes 0.1% of hallucination to drain 100% of your wallet.

1Node.jsstdioofficial registry

context tax

queued

security

queued

cold start

queued

freshness

Slowing3mo ago

Install Pop Pay MCP server

claude mcp add pop-pay -- npx -y pop-pay

{
  "mcpServers": {
    "pop-pay": {
      "command": "npx",
      "args": [
        "-y",
        "pop-pay"
      ]
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "pop-pay": {
      "command": "npx",
      "args": [
        "-y",
        "pop-pay"
      ]
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "pop-pay": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "pop-pay"
      ]
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "pop-pay": {
      "command": "npx",
      "args": [
        "-y",
        "pop-pay"
      ]
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Configuration

Variable	Required	Secret	Description
POP_CDP_URL	—	—	Chrome DevTools Protocol endpoint for credential injection (default: http://localhost:9222)
POP_ALLOWED_CATEGORIES	—	—	JSON array of allowed vendor categories (e.g. '["aws","cloudflare"]')
POP_MAX_PER_TX	—	—	Per-transaction spending limit in USD
POP_MAX_DAILY	—	—	Daily spending limit in USD
POP_GUARDRAIL_ENGINE	—	—	Guardrail engine: 'keyword' (offline, default) or 'llm' (requires API key)