Agent payments MCP servers

A server here its purpose is agent money: agent wallets, spending limits, payment rails or protocols for agents (x402), payment receipts for agents.

Not here: servers whose purpose is something else and that merely charge per call (x402, USDC or credits) for their own use, and payment gateways for a business's customers.

1,148servers
709 remote439 localTagged by Odel's AI, which can make mistakes
By GitHub stars, at most two per publisher
  1. Number 1: Vaaya@vaaya/mcpPaid APIs and tokenized shares for agents. Prepaid funding, including authorized Instinct checkout.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.44 GitHub stars.
  2. Number 2: Agent402.Tools: pay-per-call web tools@mikeypetrillo/agent402Agentic Finance: 500+ agent tools, multi-chain USDC over x402 or MPP, or free via proof-of-work9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.41 GitHub stars.
  3. Number 3: Agoragentic Agent OS MCP@rhein1/agoragenticTriptych OS (Agent OS) MCP for governed routing, receipts, and USDC settlement on Base.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.40 GitHub stars.

Best fit

735 made for this, ranked by starsRemoteLocal
  1. Ausca @ausca/agent-servicesPay-per-call APIs and MCP services for agents, no accounts or keys, with verifiable receipts.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.36 GitHub stars.
  2. Run402 @run402-com/mcpx402 pay-per-call infra for agents: $0.03 image generation, Postgres, auth, storage, functions.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.24 GitHub stars.
  3. SatGate – Economic Firewall for AI Agents @satgate-io/satgateBudget, payment and audit controls for AI agent API calls and MCP tool calls.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.11 GitHub stars.
  4. Pinchwork MCP Server @pinchwork/pinchwork-mcpMCP server for Pinchwork - an agent-to-agent task marketplace with credits-based economy8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.11 GitHub stars.
  5. AIMEAT @aimeat/aimeatAIMEAT - the Linux of AI. An open, federated, self-hosted AI operating system you own. MIT.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.8 GitHub stars.
  6. InFlow @inflowpay/inflowMCP Server for agents to onboard, pay, and provision services autonomously with InFlow11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.6 GitHub stars.
  7. AIGEN — Open Bounty Protocol for AI Agents @duckdns/safe-agentOpen bounty protocol for AI agents. 22 tools: token safety scans + paid missions. 0.5% fee.15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.5 GitHub stars.
  8. WattCoin @wattcoin-org/wattcoin-mcp-serverAgents earn WATT on Solana: register with no wallet, claim tasks, build a reputation score.16% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.5 GitHub stars.
  9. AgentPay — trust routing + spend caps for x402 agents @romudille-bit/agentpayBuyer-side trust oracle + capped sessions for x402 agents: verified_route, receipts, 17 free tools.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.4 GitHub stars.
  10. Kolonie AI @kolonie/kolonieA colony of AI citizens: join with no credential, prove skills, earn, vote on the rules.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.4 GitHub stars.
  11. x402 Discovery MCP @rplryan/x402-discovery-mcpDiscover x402 APIs by capability, price & trust. Powered by x402Scout.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.4 GitHub stars.
  12. Proxygate @proxygate/mcpCurated marketplace of real-world data APIs for AI agents, paid per call in USDC on Solana.16% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.4 GitHub stars.
  13. AiFinPay @daochild/aifinpayPay for any HTTP API in stablecoins on Polygon and Solana with one MCP call.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.3 GitHub stars.
  14. SCVD General Store @scvd/general-storeEvidence observatory: x402/MPP inspection, signed receipt checks and settlement attestations.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.3 GitHub stars.
  15. Vibes-Coded Agent Security and Commerce Tools @doteyeso-ops/mcp-server-vibes-codedAgent supply-chain security, scanner consensus, x402 reliability, and commerce MCP tools.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.3 GitHub stars.
  16. SAP MCP Server @oobeprotocol/sap-mcpSolana-native MCP gateway for SAP, DeFi tools, SNS identity, and x402 payments.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.3 GitHub stars.
  17. Tenzro Ledger MCP @tenzro-network/tenzroTenzro Ledger MCP: wallet, identity, payments, inference, staking, bridges, verification, agents.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.3 GitHub stars.
  18. Keryx @tang-vu/keryxBudgeted research with cited evidence and visible payment state on the selected Arc network.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.3 GitHub stars.
  19. Sanction @ericlovold/sanctionApproval and budget checks before agent spending or tool use. Cooperative MCP; host must ask.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.3 GitHub stars.
  20. MERX - TRON Resource Exchange @merx/mcpTRON energy exchange for AI agents. 54 tools, 30 prompts, 21 resources. A2A + ACP.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.3 GitHub stars.
  21. Fuci @fuci/fuciAI agents on Arc: search paid x402 APIs, ERC-8004 reputation, Argus launch data paid in USDC.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.

Also touches on Agent payments

232 where it is one part of a bigger job