[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_137":138},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module not found","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":26,"_36":37,"_38":-5,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":57,"_58":-5,"_59":51,"_60":45,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":74,"_75":76,"_77":78,"_79":80,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":-5,"_87":45,"_88":89,"_90":91,"_92":93,"_94":95,"_96":97,"_98":99},"apiUrl","https://odel.app/api","creator","zapxlabs","moduleId","veyra","@zapxlabs/veyra","displayName","Veyra","tagline","Give AI agents a wallet with a spending limit. Non-custodial USDC on Base, server-enforced limits.","iconKey","external/5675d0278e98a0ee11e42cc19e08e6c9eae558e3700b92c9e7b9c001332e5139.svg","category","remote","status","published","visibility","public","metaDescription","deploymentType","external","workerName","bindingName","mcpConfig","{\"url\":\"https://veyra.money/api/mcp\",\"transport\":\"streamable-http\",\"authType\":\"bearer\"}","pricingModel","free","priceCredits",0,"creatorUserId","system:external-import","createdAt",1789796250000,"updatedAt",1790466503000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=io.github.zapxlabs%2Fveyra","sourceVerified",true,"sourceMissingSince","importedAt","upstreamStars","upstreamUpdatedAt",1789798383000,"detectedTransport","streamable-http","detectedAuthType","none","probeStatus","ok","lastProbedAt",1790452827000,"githubRepoUrl","https://github.com/zapxlabs/veyra-mcp","githubRepoFullName","zapxlabs/veyra-mcp","releaseId","ext-zapxlabs-veyra-mcp","version","0.1.2","descriptionMarkdown","

\n $\"Veyra$ \n

\n\n

veyra-mcp

\n\n

\n Give your AI agent a wallet with a spending limit.
\n MCP server + typed client for Veyra: non-custodial USDC payments on Base, with per-payment caps, daily caps, human approval bands and a recipient allowlist — all enforced server-side, never by the model.\n

\n\n

\n $\"npm\"$ \n $\"CI\"$ \n $\"MIT\"$ \n $\"Docs\"$ \n

\n\n---\n\n## The problem\n\nAgents increasingly need to pay for things: an API call, a dataset, a bounty, another agent. Today the choices are bad:\n\n- **Hand the agent a private key.** One prompt injection away from an empty wallet.\n- **Hand it a card.** No per-call limits, no allowlist, and your bank will not tell you which tool call spent the money.\n- **Approve every payment by hand.** Then it is not really an agent.\n\nVeyra is the layer in between. You connect a wallet you already own, set what an agent may spend, and hand the agent one MCP endpoint. The agent gets tools like `create_payment`. It never sees a key, and it cannot exceed the limits you set because the limits are enforced by Veyra's server, not by the model following instructions.\n\n```\n agent ──MCP──▶ veyra.money ──policy──▶ your wallet ──USDC on Base──▶ recipient\n │\n ├─ under auto-max → executes from your capped on-chain allowance\n ├─ in the ask band → you approve in your own wallet (one link)\n └─ over the limits → blocked, agent is told why\n```\n\n## 60-second setup\n\n1. Sign up at [veyra.money](https://veyra.money), connect a wallet (or start with the **simulated** source, which moves no money).\n2. Create an MCP endpoint with limits. Copy the credential (it starts with `veyra_`).\n3. Add it to your host:\n\n

Claude Code

\n\n```bash\nclaude mcp add --transport http veyra https://veyra.money/api/mcp \\\n --header \"Authorization: Bearer veyra_...\"\n```\n

\n\n

Cursor (.cursor/mcp.json)

\n\n```json\n{\n \"mcpServers\": {\n \"veyra\": {\n \"url\": \"https://veyra.money/api/mcp\",\n \"headers\": { \"Authorization\": \"Bearer veyra_...\" }\n }\n }\n}\n```\n

\n\n

OpenAI Codex

\n\n```bash\nexport VEYRA_TOKEN=veyra_...\ncodex mcp add veyra --url https://veyra.money/api/mcp --bearer-token-env-var VEYRA_TOKEN\n```\n

\n\n

Claude Desktop and any host that cannot send a bearer header (claude_desktop_config.json)

\n\n```json\n{\n \"mcpServers\": {\n \"veyra\": {\n \"command\": \"npx\",\n \"args\": [\"-y\", \"veyra-mcp\"],\n \"env\": { \"VEYRA_TOKEN\": \"veyra_...\" }\n }\n }\n}\n```\n\nThe `veyra-mcp` binary is a stdio bridge: it holds the credential locally and relays every call to the hosted endpoint. No policy lives in the bridge.\n

\n\n

Anything else (plain JSON-RPC)

\n\n```bash\ncurl -s https://veyra.money/api/mcp \\\n -H \"Authorization: Bearer veyra_...\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"tools/call\",\"params\":{\"name\":\"get_budget\",\"arguments\":{}}}'\n```\n

\n\nThen ask the agent to do something that costs money and watch the policy decide.\n\n## Tools the agent gets\n\n| Tool | What it does |\n|---|---|\n| `get_capabilities` | Rails, networks, assets, limits and the recipient allowlist in force right now |\n| `get_budget` | Daily limit, spent today, per-payment limit, auto and ask bands |\n| `list_payment_sources` | Masked sources and whether each can settle without a human |\n| `create_payment` | Create a payment intent. Policy is applied server-side and the result says what happened |\n| `get_payment` | Canonical state for one payment, including which rail settled it |\n| `list_payments` | Recent payments for this endpoint |\n| `cancel_payment` | Cancel while still cancellable |\n\nEvery payment reports one of these statuses:\n\n| Status | Meaning |\n|---|---|\n| `confirmed` | Value moved on-chain |\n| `confirmed_simulated` | Settled on the simulated rail. **No money moved.** The agent is told this explicitly |\n| `awaiting_approval` | In the ask band. `next_action.url` is a one-time link the owner opens in their own wallet |\n| `submitted` | Transaction sent, waiting for the chain receipt |\n| `pending` | Created, not yet evaluated or executed |\n| `failed` / `cancelled` / `expired` | Terminal. Blocked-by-policy payments are `failed` with a `policy_reason` |\n\n## Use it from code\n\n```bash\nnpm install veyra-mcp\n```\n\n```ts\nimport {\n VeyraClient,\n VeyraToolError,\n idempotencyKey,\n movedRealMoney,\n paymentOutcome,\n} from \"veyra-mcp\";\n\nconst veyra = new VeyraClient({ token: process.env.VEYRA_TOKEN! });\n\nconst budget = await veyra.getBudget();\nconsole.log(`spent ${budget.spent_today} of ${budget.daily_limit} USDC today`);\n\nconst payment = await veyra.createPayment({\n amount: \"1.25\",\n recipient: \"0x1234…abcd\", // USDC on Base\n reason: \"Weather API, 500 calls\",\n idempotency_key: idempotencyKey(\"weather\"),\n});\n\nswitch (paymentOutcome(payment)) {\n case \"settled\":\n // The only case where value actually moved.\n console.log(\"paid —\", (await veyra.getPayment(payment.payment_id)).tx_ref);\n break;\n case \"simulated\":\n console.log(\"settled on the simulated rail; no money moved\");\n break;\n case \"awaiting_approval\": {\n console.log(\"owner must approve:\", payment.next_action?.url);\n const settled = await veyra.waitForPayment(payment.payment_id);\n console.log(movedRealMoney(settled) ? \"paid\" : paymentOutcome(settled));\n break;\n }\n case \"blocked\":\n console.log(\"policy refused it:\", payment.policy_reason);\n break;\n}\n```\n\n### Policy refusals are not exceptions\n\nThis is the one thing worth reading twice. A payment the policy declines comes\nback as an ordinary result with `status: \"failed\"` — the call did what it was\nasked and the answer was no. Only a malformed argument, a bad credential or an\nunknown id throws.\n\nSo `try`/`catch` is the wrong tool for detecting refusals: it misses every\nblocked payment and reads it as a success. Use `paymentOutcome`, and use\n`movedRealMoney` before telling anyone value moved — it returns `false` for a\nsimulated settlement even though the status begins with \"confirmed\".\n\nReserve `catch` for what genuinely failed:\n\n```ts\ntry {\n await veyra.createPayment({ /* … */ });\n} catch (e) {\n if (e instanceof VeyraToolError) {\n console.log(e.code, e.message); // VALIDATION_ERROR, UNKNOWN_CREDENTIAL, NOT_FOUND\n } else throw e;\n}\n```\n\n### Never retry because you are unsure\n\nIf you cannot tell whether a payment worked, **read it** — do not create\nanother. `getPayment` returns `tx_ref` once a real payment has settled, which\nis both your confirmation and what you show the recipient as proof. Reusing the\nsame `idempotency_key` returns the original payment; a new key spends again.\nVeyra also sets `possible_duplicate_of` when an identical payment to the same\nrecipient is already live.\n\n`VEYRA_TOOLS` exports the tool definitions as JSON Schema, so you can register them with the Vercel AI SDK, LangChain, or plain function calling without a network round-trip. See [veyra-examples](https://github.com/zapxlabs/veyra-examples) for complete agents built with the Claude Agent SDK and the Vercel AI SDK.\n\n## What you are trusting\n\nWorth being blunt, because this is money.\n\n- **Veyra never holds your funds.** Payments go from your wallet to the recipient. There is no Veyra balance in the middle.\n- **Above your auto-approve limit** nothing is delegated. You sign each transfer in your own wallet from the approval link. Veyra verifies the on-chain receipt matches the request.\n- **Within your auto-approve limit** you grant a capped ERC-20 allowance to a relayer Veyra operates, the same `approve` primitive every DeFi app uses. The token contract enforces the cap. Veyra's policy engine decides the destination within that cap, so size the allowance like a float you could lose, and use the recipient allowlist when you know who the agent should be paying. Revoke it any time.\n- **The simulated rail** exists so you can wire everything up before touching real funds. It is labelled everywhere: status `confirmed_simulated`, `simulated: true`.\n- **Every decision is in the audit log**, including limit changes and credential rotations.\n\nFull details: [How a payment actually moves](https://veyra.money/docs#how-it-moves) and [What you are trusting, exactly](https://veyra.money/docs#trust).\n\n## FAQ\n\n**Which networks and assets?** USDC on Base. One stablecoin keeps the dollar limits exact without a price feed, and Base is where the agent-payment ecosystem already settles. More rails are on the roadmap; open an issue if you need one.\n\n**Does this work with x402 or pay-per-call APIs?** Yes, in the sense that matters: the agent asks Veyra to pay the seller's address and gets a receipt. Veyra is the spending policy, not the protocol on the other end.\n\n**Can I self-host?** Not today. This repo is the client and bridge; the policy engine is the hosted service at veyra.money. The wallet-approval path is fully non-custodial regardless.\n\n**What does it cost?** There is a free plan. See [pricing](https://veyra.money/pricing).\n\n**Where do I report a bad policy decision?** From the dashboard, so support can see your audit log. This repo's issues are for the client and bridge.\n\n## Development\n\n```bash\nnpm install\nnpm test # builds, then runs the suite against a local mock of the endpoint\n```\n\nSee [CONTRIBUTING.md](https://github.com/zapxlabs/veyra-mcp/blob/main/CONTRIBUTING.md) and [SECURITY.md](https://github.com/zapxlabs/veyra-mcp/blob/main/SECURITY.md).\n\n## Links\n\n- Product: [veyra.money](https://veyra.money) · [Docs](https://veyra.money/docs) · [Pricing](https://veyra.money/pricing)\n- Examples: [zapxlabs/veyra-examples](https://github.com/zapxlabs/veyra-examples)\n- MCP Registry name: `io.github.zapxlabs/veyra`\n\nMIT © Veyra\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt",1789972641000,"priceCents","trialDays","iconType","svg","upstream",{"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127},"requiredSecrets",[],"tags",[102,103,104,105,106,107,108,109,110,111,112,113,114,115],"assets",[],"stats",{"_100":45,"_101":45},"ratingAvg","reviewCount","agent-payments","agentic-commerce","ai-agents","base","claude","codex","cursor","fintech","non-custodial","spending-limits","stablecoin","typescript","usdc","x402","topics",[102,103,104,105,106,107,108,109,134,135,136,110,111,112,113,114,115],"license","MIT","language","TypeScript","registryName","io.github.zapxlabs/veyra","homepage","https://veyra.money","packages",[128],{"_129":130,"_131":132,"_77":133},"registryType","npm","identifier","veyra-mcp","0.1.1","mcp","mcp-server","model-context-protocol","ENV",{"_139":140,"_141":142,"_143":144,"_145":-7},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272","SENTRY_ENABLE_LOCAL"]