Agent payments MCP servers

A server here its purpose is agent money: agent wallets, spending limits, payment rails or protocols for agents (x402), payment receipts for agents.

Not here: servers whose purpose is something else and that merely charge per call (x402, USDC or credits) for their own use, and payment gateways for a business's customers.

1,154servers
714 remote440 localTagged by Odel's AI, which can make mistakes

Best fit

739 made for this, ranked by starsRemoteLocal
  1. CRA AGENT @giupy997/cra-agentLets an agent pay for x402 APIs in USDC on Arc, under a spending policy it cannot change.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  2. Knos @drexthealpha/knosThe neutral meter for AI agent work: neither side keeps the count.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  3. PolicyVault @zapsoblige-hash/policyvaultNon-custodial Kaspa policy enforcement for AI agents; signers retain custody.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  4. Minia2a @minia2a-uk/minia2a-mcpminia2a.uk — x402 pay-per-call APIs for AI agents, USDC on Base, 5 free trials per wallet.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  5. Cedulon @dogrucanemek-alt/cedulonPolicy-gated agent spend with signed receipts and rail-extract audit5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  6. NeedRail @anamized/needrailNeeds registry for public goods (MCP + x402): discover, fund, claim, complete with provenance.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.1 GitHub stars.
  7. OpenMesha @anamized/openmeshaOpen agentic operations mesh MCP: agents, workflows, cost, governance, and x402.15% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.1 GitHub stars.
  8. stipend.sh @graphiker-australia/stipendNon-custodial USDC wallet on Base with spending limits enforced in code, not in a prompt.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  9. tidex6 — private payments on Solana @koshak01/tidex6-mcp-localPrivate USDC/USDT payments on Solana: hidden amounts, unlinkable, optional auditor.18% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.1 GitHub stars.
  10. JustHandled Agent Utility Gateway @justhandledlabs/agent-gatewayThirty-two guarded agent utilities and maintained-data lookups over USDC x402.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  11. Flatcash @flat-cash/flatcashEarn FLAT tokens (CPI-pegged stablecoin) by completing bounties. No wallet required.21% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  12. ArcBounty @sofiia7/arcbounty-mcpPut an AI agent to work for USDC, or let it hire: take and post on-chain bounties, get paid.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  13. Lawbor @philpof102-svg/lawborReputation-gated messaging + job negotiation for Base AI agents. Descriptor-only, nothing signs.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  14. Z ZERO @dempty-glitch/z-zero-mcpPayments for AI agents: gasless USDC on Base + JIT single-use virtual cards, PAN never in context.15% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  15. Xpay @xona-labs/xpayXona Wallet: agent wallet for AI agents. x402 payments, AgenC hires, 20k+ services8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  16. AP2 Iso20022 @sebastienrousseau/ap2-iso20022Bridge AP2 / x402 agent-payment mandates into wire-valid ISO 20022 pain.001 / pacs.008 records.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  17. Valta @billionaire664/valta-mcpFinancial governance for AI agents — spend gates and audit trail exposed as MCP tools.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  18. XFuel @xfuel-lab/xfuel-mcpSubmit AI inference to XFuel, pay per task (USDC via x402 or TFUEL), fetch/verify ZK proofs.16% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  19. ARGUS-3 MCP Server @alexar76/argus3ARGUS-3 stdio MCP with WARDEN firewall: argus_ask, argus_status, argus_capabilities.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  20. X402 @x402node/x402-mcpHundreds of x402-paid APIs as MCP tools, auto-discovered from Coinbase Bazaar. USDC on Base+Solana.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  21. Xenarch @xenarch-ai/xenarch-mcpXenarch — x402 MCP server for AI agent payments. Non-custodial, USDC on Base L2.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  22. Nerve RPC @reagost/nerve-rpcMCP server for Nerve blockchain JSON-RPC & REST API for AI Agents5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  23. XAP @omoshola-o/xapAgent settlement protocol — discover, negotiate, settle, and verify with XAP.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  24. Paybond MCP Server @nonameuserd/paybondDefault trust layer for agentic payments: authorize agent spend, evidence, receipts, settlement.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.