73
/ 100
22 days ago
glama
pop-pay
Project Point One Percent - Agent Pay \[pop-pay] is a payment guardrail and one-time flow protocol specifically designed for Agentic AI (e.g., Claude Code, OpenClaw). It enables agents to handle financial transactions safely without risking unlimited exposure of human-controlled credit cards.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 3 credentials: POP_LLM_API_KEY, POP_STRIPE_KEY, POP_X402_WALLET_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
POP_VAULT_COMPILED_SALTconfig
POP_CHROME_PATHconfig
POP_CDP_URL— "": "http://localhost:9222"config
POP_VAULT_PATH🔐 secret
POP_LLM_API_KEYconfig
POP_LLM_BASE_URLconfig
POP_LLM_MODELconfig
POP_ACCEPT_OSS_SALTconfig
POP_EXTRA_BLOCK_KEYWORDSconfig
POP_ALLOWED_PAYMENT_PROCESSORSconfig
POP_BILLING_FIRST_NAMEconfig
POP_BILLING_LAST_NAMEconfig
POP_BILLING_STREETconfig
POP_BILLING_CITYconfig
POP_BILLING_STATEconfig
POP_BILLING_COUNTRYconfig
POP_BILLING_ZIPconfig
POP_BILLING_EMAILconfig
POP_BILLING_PHONEconfig
POP_BILLING_PHONE_COUNTRY_CODEconfig
POP_BLACKOUT_MODEconfig
POP_ALLOWED_CATEGORIES— e ='["aws","cloudflare"]' \config
POP_MAX_PER_TX— e =100.0 \config
POP_MAX_DAILY— e =500.0 \config
POP_BLOCK_LOOPS— true Block hallucination/retry loops🔐 secret
POP_STRIPE_KEY— Stripe Issuing Real virtual cards via Stripe API. Requires .config
POP_AUTO_INJECT— true Enable CDP card injectionconfig
POP_GUARDRAIL_ENGINE— e =keyword \config
POP_WEBHOOK_URLconfig
POP_APPROVAL_WEBHOOKconfig
POP_BYOC_NUMBERconfig
POP_REQUIRE_HUMAN_APPROVALconfig
POP_PURCHASER_INFO_BLOCKING🔐 secret
POP_X402_WALLET_KEYconfig
POP_BYOC_EXP_MONTHconfig
POP_BYOC_EXP_YEARconfig
POP_BYOC_CVV// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/100xpercent-pop-pay-python-1pft8x)commit: 5ffc27c1adca3041f6a3d25e41b87738bffc153e
code hash: 453dc2174ebbf2a9747c236115c1cac6154762c3c6c0be58eb4e844385e81b47
verified: 6/15/2026, 3:11:46 PM