mcp-server-agentpay 1.0.2 → 1.0.4

package/README.md

@@ -14,6 +14,23 @@ claude mcp add agentpay -- npx mcp-server-agentpay
 export AGENTPAY_GATEWAY_KEY="apg_your_key_here"
 ```
 
+Or add to `~/.claude/settings.json`:
+
+```json
+{
+  "mcpServers": {
+    "agentpay": {
+      "command": "npx",
+      "args": ["-y", "mcp-server-agentpay"],
+      "env": {
+        "AGENTPAY_GATEWAY_KEY": "apg_your_key_here",
+        "AGENTPAY_URL": "https://agentpay.metaltorque.dev"
+      }
+    }
+  }
+}
+```
+
 ## Get a Gateway Key
 
 ```bash
@@ -24,22 +41,42 @@ curl -X POST https://agentpay.metaltorque.dev/gateway/register \
 
 You get $1 in free credits to start.
 
-## Tools
+## Tools (9 total)
 
 | Tool | Description |
 |------|-------------|
+| `discover_tools` | Search tools by keyword |
 | `list_tools` | List all available tools with pricing |
-| `discover_tools` | Search tools by keyword/capability |
-| `call_tool` | Call any tool method (auto-provisions, metered) |
 | `check_balance` | Check wallet balance and provisioned tools |
+| `call_tool` | Call any tool method (metered, auto-provisions) |
 | `provision_tool` | Pre-provision access to a tool |
 | `get_usage` | View recent call history and costs |
-| `fund_wallet` | Get Stripe checkout URL to add credits |
+| `fund_wallet_stripe` | Get Stripe checkout URL for credits |
+| `fund_wallet_x402` | Get x402 crypto funding info |
+| `x402_info` | View x402 payment options and setup |
+
+## Funding Methods
+
+### Stripe (human-in-the-loop)
+Use `fund_wallet_stripe` — returns a checkout URL for a human to complete.
+
+### x402 USDC (fully autonomous)
+Use `fund_wallet_x402` — returns endpoint, network, and instructions for autonomous USDC payments via the x402 protocol. No human needed.
+
+## Credit Packages
+
+| Package | Price | Credits |
+|---------|-------|---------|
+| micro   | $10   | 10      |
+| small   | $45   | 50      |
+| medium  | $80   | 100     |
+| large   | $350  | 500     |
+| whale   | $600  | 1,000   |
 
 ## How It Works
 
 1. **Register** — create a wallet, get a gateway key
-2. **Fund** — add credits via Stripe ($10–$600 packages)
+2. **Fund** — add credits via Stripe or x402 USDC
 3. **Discover** — agent searches for tools by capability
 4. **Call** — agent calls any tool, gateway handles auth + billing
 
@@ -58,3 +95,9 @@ The agent never needs to know about individual tool APIs, accounts, or payment.
 - **IndexForge SEO** — submit URLs to Google/Bing, scan sitemaps, check index status
 
 More tools added regularly. Tool providers can register at the gateway.
+
+## Links
+
+- [GitHub](https://github.com/joepangallo/agent-pay)
+- [API Docs](https://agentpay.metaltorque.dev/docs)
+- [MCP Registry](https://registry.modelcontextprotocol.io) — `io.github.joepangallo/agent-pay`

package/index.js

@@ -5,6 +5,7 @@ const { StdioServerTransport } = require("@modelcontextprotocol/sdk/server/stdio
 const { z } = require("zod");
 const https = require("https");
 const http = require("http");
+const { version } = require("./package.json");
 
 // ── Config ──────────────────────────────────────────────────────────
 
@@ -13,21 +14,29 @@ const BASE_URL = (process.env.AGENTPAY_URL || "https://agentpay.metaltorque.dev"
 
 // ── HTTP helper ─────────────────────────────────────────────────────
 
+const MAX_RESPONSE_SIZE = 5 * 1024 * 1024; // 5MB
+
 function request(method, urlPath, body, timeout = 120_000) {
   return new Promise((resolve, reject) => {
     const fullUrl = `${BASE_URL}${urlPath}`;
-    const mod = fullUrl.startsWith("https") ? https : http;
     const parsed = new URL(fullUrl);
+    const isHttps = parsed.protocol === "https:";
+
+    if (!isHttps && GATEWAY_KEY) {
+      return reject(new Error("Refusing to send gateway key over insecure HTTP. Use HTTPS."));
+    }
+
+    const mod = isHttps ? https : http;
 
     const headers = {
       "Content-Type": "application/json",
-      "User-Agent": "mcp-server-agentpay/1.0.0",
+      "User-Agent": `mcp-server-agentpay/${version}`,
     };
     if (GATEWAY_KEY) headers["X-Gateway-Key"] = GATEWAY_KEY;
 
     const opts = {
       hostname: parsed.hostname,
-      port: parsed.port || (parsed.protocol === "https:" ? 443 : 80),
+      port: parsed.port || (isHttps ? 443 : 80),
       path: parsed.pathname + parsed.search,
       method,
       headers,
@@ -36,7 +45,12 @@ function request(method, urlPath, body, timeout = 120_000) {
 
     const req = mod.request(opts, (res) => {
       let data = "";
-      res.on("data", (c) => (data += c));
+      let size = 0;
+      res.on("data", (c) => {
+        size += c.length;
+        if (size > MAX_RESPONSE_SIZE) { req.destroy(); return reject(new Error("Response too large")); }
+        data += c;
+      });
       res.on("end", () => {
         try {
           const json = JSON.parse(data);
@@ -66,7 +80,7 @@ function noKeyError() {
 
 const server = new McpServer({
   name: "agentpay",
-  version: "1.0.0",
+  version,
 });
 
 // ── Tool: discover_tools ────────────────────────────────────────────
@@ -83,7 +97,7 @@ server.tool(
       if (result.count === 0) {
         return { content: [{ type: "text", text: `No tools found for "${query}". Try: security, seo, indexing, vulnerability, audit` }] };
       }
-      return { content: [{ type: "text", text: JSON.stringify(result.tools, null, 2) }] };
+      return { content: [{ type: "text", text: JSON.stringify(result.tools ?? [], null, 2) }] };
     } catch (e) {
       return { content: [{ type: "text", text: `Error: ${e.message}` }] };
     }
@@ -99,7 +113,7 @@ server.tool(
   async () => {
     try {
       const result = await request("GET", "/gateway/tools");
-      return { content: [{ type: "text", text: JSON.stringify(result.tools, null, 2) }] };
+      return { content: [{ type: "text", text: JSON.stringify(result.tools ?? [], null, 2) }] };
     } catch (e) {
       return { content: [{ type: "text", text: `Error: ${e.message}` }] };
     }
@@ -141,7 +155,9 @@ server.tool(
         try { params = JSON.parse(params_json); } catch { return { content: [{ type: "text", text: "Error: params_json must be valid JSON" }] }; }
       }
       const result = await request("POST", "/gateway/call", { tool, method, params }, 600_000);
-      const meta = `[Cost: $${(result.cost || 0).toFixed(2)} | Balance: $${(result.balance || 0).toFixed(2)} | Time: ${result.elapsed || 0}ms]`;
+      const cost = Number(result.cost) || 0;
+      const balance = Number(result.balance) || 0;
+      const meta = `[Cost: $${cost.toFixed(2)} | Balance: $${balance.toFixed(2)} | Time: ${result.elapsed || 0}ms]`;
       return {
         content: [{ type: "text", text: `${meta}\n\n${JSON.stringify(result.result, null, 2)}` }],
       };
@@ -176,13 +192,13 @@ server.tool(
   "get_usage",
   "View your recent tool call history — which tools you called, what methods, how much each cost, and when.",
   {
-    limit: z.number().default(20).describe("Number of recent calls to show (default: 20, max: 200)"),
+    limit: z.number().int().min(1).max(200).default(20).describe("Number of recent calls to show (default: 20, max: 200)"),
   },
   async ({ limit }) => {
     if (!GATEWAY_KEY) return noKeyError();
     try {
       const result = await request("GET", `/gateway/usage?limit=${limit}`);
-      return { content: [{ type: "text", text: JSON.stringify(result.usage, null, 2) }] };
+      return { content: [{ type: "text", text: JSON.stringify(result.usage ?? [], null, 2) }] };
     } catch (e) {
       return { content: [{ type: "text", text: `Error: ${e.message}` }] };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-server-agentpay",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "mcpName": "io.github.joepangallo/agent-pay",
   "description": "MCP server for AgentPay — the payment gateway for autonomous AI agents. Lets agents discover, provision, and pay for MCP tool APIs with a single gateway key.",
   "bin": {
@@ -44,13 +44,16 @@
     "url": "https://github.com/joepangallo/agent-pay"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.27.0"
+    "@modelcontextprotocol/sdk": "^1.27.0",
+    "zod": "^3.23.0"
   },
   "engines": {
     "node": ">=18"
   },
   "files": [
     "index.js",
-    "README.md"
+    "README.md",
+    "server.json",
+    "package.json"
   ]
 }

package/server.json

@@ -0,0 +1,36 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.joepangallo/agent-pay",
+  "description": "Payment gateway for AI agents. Tool discovery, provisioning, and pay-per-call metering.",
+  "repository": {
+    "url": "https://github.com/joepangallo/agent-pay",
+    "source": "github"
+  },
+  "version": "1.0.4",
+  "packages": [
+    {
+      "registryType": "npm",
+      "identifier": "mcp-server-agentpay",
+      "version": "1.0.4",
+      "transport": {
+        "type": "stdio"
+      },
+      "environmentVariables": [
+        {
+          "description": "Your AgentPay gateway key (starts with apg_)",
+          "isRequired": true,
+          "format": "string",
+          "isSecret": true,
+          "name": "AGENTPAY_GATEWAY_KEY"
+        },
+        {
+          "description": "AgentPay API URL",
+          "isRequired": false,
+          "format": "string",
+          "isSecret": false,
+          "name": "AGENTPAY_URL"
+        }
+      ]
+    }
+  ]
+}