How do I install the pop pay mcp server?

Use a recorded configuration for your client, replace example credential values and paths, and verify the documented runtime. Restart or reconnect the client, then inspect the available tools.

What credentials does it need?

It reads `POP_CDP_URL`, `POP_STRIPE_KEY` from the environment. Store these in your client's env block or a secrets manager — never commit them to a repository — and grant the narrowest scope that still covers your use case.

SSyncDev

Start a project

Pop Pay MCP Server

The runtime security layer for AI agent commerce. Drop-in CLI + MCP server — blocks hallucinated purchases and keeps card credentials out of agent

Local serverstdioPython

What is the Pop Pay MCP Server?

The runtime security layer for AI agent commerce. Drop-in CLI + MCP server — blocks hallucinated purchases and keeps card credentials out of agent context. It only

What the server does

The runtime security layer for AI agent commerce. Drop-in CLI + MCP server. Card credentials are injected directly into the browser DOM via CDP — they never enter the agent's context window. One hallucinated prompt can't drain a wallet it can't see.

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
request_virtual_card	Issue a virtual card and inject credentials into the checkout page via CDP. Automatically scans the page for hidden prompt injections.
request_purchaser_info	Auto-fill billing/contact info (name, address, email, phone). Automatically scans the page for hidden prompt injections.
request_x402_payment	Pay for API calls via the x402 HTTP payment protocol.

How to install the Pop Pay MCP Server

{
  "mcpServers": {
    "pop-pay": {
      "command": "npx",
      "args": [
        "-y",
        "pop-pay",
        "launch-mcp"
      ],
      "env": {
        "POP_CDP_URL": "http://localhost:9222"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

Variable	Description	Required
POP_CDP_URL	Declared in the maintainer’s client configuration.	Check documentation

Example prompts to try

“Use Pop Pay to request virtual card.”
“Use Pop Pay to request purchaser info.”
“Use Pop Pay to request x402 payment.”

Frequently asked questions

The runtime security layer for AI agent commerce. Drop-in CLI + MCP server — blocks hallucinated purchases and keeps card credentials out of agent context. It only Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.