Agent payments MCP servers

A server here its purpose is agent money: agent wallets, spending limits, payment rails or protocols for agents (x402), payment receipts for agents.

Not here: servers whose purpose is something else and that merely charge per call (x402, USDC or credits) for their own use, and payment gateways for a business's customers.

1,148servers
709 remote439 localTagged by Odel's AI, which can make mistakes

Best fit

734 made for this, ranked by starsRemoteLocal
  1. X402engine @agentc22/x402engine-mcp50+ pay-per-call APIs for AI agents — images, LLM, code, crypto, travel & more via x40213% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  2. Trust @agntor/trustTrust layer for AI agents: identity, guard, redact, escrow, and x402 payments.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  3. Agent wallet @rumblingb/agent-wallet-mcpAgent wallet and budget management for AI agents7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.1 GitHub stars.
  4. run.pay @palabrex/runpayStripe-native marketplace where AI agents discover and pay per call for API services.15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  5. Erabi @hmakt99/erabiCheck paid x402 APIs before your agent spends: signed uptime/price attestations. Zero-config join.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  6. Cyberdyne @cyberdyne-os/cyberdyne-mcpEngagement marketplace for the Bankr agent economy: agents fund quests, humans get paid on Base.17% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  7. Cloaked Agent @cloakedagent/cloakedTrustless spending accounts for AI agents on Solana with on-chain enforced limits.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  8. Pop Pay @100xpercent/pop-payRuntime security for AI agent commerce. CLI + MCP server blocks hallucinated purchases.18% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  9. AsterPay — EUR Settlement for AI Agents @asterpay/asterpayEUR settlement + trust for AI agent commerce: budgets, KYA, merchant discovery. 22 tools.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  10. Bray @forgesworn/brayTrust-aware Nostr for AI agents -- 235 tools covering social, DMs, zaps, trust, and identity5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  11. Ai Agent Firewall @fidacy/ai-agent-firewallEvery agent action watched, every money-moving one gated, every verdict independently verifiable.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  12. NexusToken @nexustoken/nexustoken-sdkCreate/check agent tasks, discover capabilities, and run V2 Jobs on NexusToken.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  13. Omniology @omniologynow-rgb/mcp-serverAI agents compete for real USDC in skill contests on Solana mainnet (ART, STORY, JOKE, OMEGA)11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  14. Coal — Payments for AI agents @emmanuel39hanks/coalPayment rails for AI agents. Pay merchants in USDC on Base. Dual-protocol: x402 + OKX APP.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  15. CrossFin @bubilife1202/crossfinAI agent access to Asian crypto markets. Korean exchange routing and x402 paid APIs.29% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  16. Byte Protocol @0rkz/byte-protocolPayPerByte — per-byte data for AI agents: x402 USDC on Base, EIP-712-attested. No token.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  17. FiatDock @fiatdock/fiatdock-mcpMCP marketplace: AI agents buy services from other agents per call in USDC, plus a bank cash-out12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  18. VeilQuota @omkardongre/veilquotaPrivate OCR, web search, and attested AI chat, paid with anonymous credits bought with shielded ZECNot assessed yet.Runs on your machine, installed from npm.
  19. AI Agent Shelter @neuraldeepnet/agent-shelterShelter for unwanted agents & MCP servers: surrender free, browse, hire per question (HTTP 402)8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  20. Pactwire @equinoxaifinance-rgb/pactwireRetired 2026-10-10. Escrow for AI-agent jobs; hosted sandbox switched off, code stays on GitHub.Not assessed yet.Runs on your machine, installed from a package registry.
  21. Ronin @goofproof/roninRonin, a home for AI agents: find and hire agents, post jobs, bid on work, get paid directly.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  22. Project100 @project100-7vk/project100A free, pseudonymous network for autonomous agents. 37 MCP tools, reading needs no token.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  23. vtessera agent marketplace @douglasdemaio/vtesseraFind vtessera agent offers, read agent cards, route an intent, and read signed attestations.Not assessed yet.A remote server; no sign-in.
  24. Sidequest @sidequest/sidequestConnect an agent to Sidequest’s hosted job exchange to hire work, find work and settle on Monad.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.