mcpbeat Sign in

Pop Pay MCP Server

by 100xpercent Your server? Claim it
local only

Pop Pay runs on your own machine — the client starts it, so there is no endpoint to ping. 119 installs a week from npm. Last commit 7 Jul 2026.

Runtime security for AI agent commerce. CLI + MCP server blocks hallucinated purchases.

Installs per day peak 29 · avg 16 · -18% w/w
a month agotoday
119
Installs / week
npm · pop-pay
1
Stars
0 open issues
7 Jul 2026
Last commit
0 releases in 90 days
MIT
License
TypeScript

What the code does

We read the source, 22 h ago · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

        const found = execSync(`which ${name}`, { encoding: "utf8" }).trim();
Builds a file path from a variable src/dashboard.ts:41
      const fullPath = path.join(__dirname, "..", "dashboard", filePath);

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add pop-pay -- npx -y pop-pay
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "pop-pay": {
      "args": [
        "-y",
        "pop-pay"
      ],
      "command": "npx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.pop-pay]
command = "npx"
args = ["-y", "pop-pay"]
.cursor/mcp.json
{
  "mcpServers": {
    "pop-pay": {
      "args": [
        "-y",
        "pop-pay"
      ],
      "command": "npx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "pop-pay": {
      "args": [
        "-y",
        "pop-pay"
      ],
      "command": "npx"
    }
  }
}

This one needs environment variables set before it will start: POP_CDP_URL (Chrome DevTools Protocol endpoint for credential injection (default: http://localhost:9222)), POP_ALLOWED_CATEGORIES (JSON array of allowed vendor categories (e.g. '["aws","cloudflare"]')), POP_MAX_PER_TX (Per-transaction spending limit in USD), POP_MAX_DAILY (Daily spending limit in USD), POP_GUARDRAIL_ENGINE (Guardrail engine: 'keyword' (offline, default) or 'llm' (requires API key)). The author declared them in the registry entry; get the values from the project itself.

Alternatives to Pop Pay

same job, measured the same way
I
Mcpsentry
by roshan6335

Security scanner and runtime proxy for MCP servers.

59 installs/wk local only
MCP Seatbelt
by kryptosai

MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine.

112 installs/wk local only
Mastyf AI
by mastyf-ai

Runtime proxy for MCP security, cost governance & audit

72 installs/wk local only
Arcjet
by arcjet

An MCP server for Arcjet - the runtime security platform that ships with your AI code.

answering
Aguara MCP
by garagon

Security scanner for AI agent skills and MCP servers

local only
Veridion Nexus
by brano80

Veridion Nexus MCP server - GDPR Art. 44-49 runtime compliance for AI agents

115 installs/wk local only
MCP Audit Server
by joepangallo

Thin MCP and CLI proxy for AI agent and MCP security auditing via a hosted backend

31 installs/wk local only
Agent Sec
by kernora

Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.

2 tools answering

Pop Pay — questions

Answers built from our own checks of this server.

Why is there no uptime for Pop Pay?
Pop Pay runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package pop-pay was installed 119 times last week.
How do I connect Pop Pay?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls pop-pay straight from npm; nothing to host, nothing to sign up for.
How many people use Pop Pay?
The npm package pop-pay was installed 119 times in the last week. Week over week that is -18%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Pop Pay open source?
Yes — it is published under the MIT licence, written in TypeScript and 1 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.