pop-pay 0.5.4 → 0.5.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +48 -18
- package/package.json +7 -2
package/README.md
CHANGED
|
@@ -2,33 +2,71 @@
|
|
|
2
2
|
|
|
3
3
|
<p align="center">
|
|
4
4
|
<picture>
|
|
5
|
-
<img src="https://raw.githubusercontent.com/
|
|
5
|
+
<img src="https://raw.githubusercontent.com/100xPercent/pop-pay-python/main/project_banner.png" alt="Point One Percent (AgentPay)" width="800">
|
|
6
6
|
</picture>
|
|
7
7
|
</p>
|
|
8
8
|
|
|
9
9
|
# Point One Percent — pop-pay
|
|
10
10
|
<p align="left"><i>it only takes <b>0.1%</b> of Hallucination to drain <b>100%</b> of your wallet.</i></p>
|
|
11
11
|
|
|
12
|
-
The runtime security layer for AI agent commerce. Card credentials are injected directly into the browser DOM via CDP — they never enter the agent's context window. One hallucinated prompt can't drain a wallet it can't see.
|
|
12
|
+
The runtime security layer for AI agent commerce. Drop-in CLI + MCP server. Card credentials are injected directly into the browser DOM via CDP — they never enter the agent's context window. One hallucinated prompt can't drain a wallet it can't see.
|
|
13
13
|
|
|
14
|
-
##
|
|
14
|
+
## Install
|
|
15
15
|
|
|
16
|
-
###
|
|
16
|
+
### Homebrew (macOS / Linux)
|
|
17
|
+
```bash
|
|
18
|
+
brew install 100xPercent/tap/pop-pay
|
|
19
|
+
```
|
|
17
20
|
|
|
21
|
+
### curl | sh (macOS / Linux)
|
|
18
22
|
```bash
|
|
19
|
-
|
|
23
|
+
curl -fsSL https://raw.githubusercontent.com/100xPercent/pop-pay/main/install.sh | sh
|
|
20
24
|
```
|
|
21
25
|
|
|
22
|
-
|
|
26
|
+
### npm (global)
|
|
27
|
+
```bash
|
|
28
|
+
npm install -g pop-pay
|
|
29
|
+
```
|
|
30
|
+
|
|
31
|
+
### npx (no install)
|
|
32
|
+
```bash
|
|
33
|
+
npx -y pop-pay <command>
|
|
34
|
+
```
|
|
23
35
|
|
|
24
|
-
|
|
36
|
+
All four install paths expose the same binaries: `pop-pay`, `pop-launch`, `pop-init-vault`, `pop-unlock`.
|
|
25
37
|
|
|
38
|
+
## Quick Start (CLI)
|
|
39
|
+
|
|
40
|
+
### 1. Initialize the encrypted credential vault
|
|
26
41
|
```bash
|
|
27
|
-
|
|
28
|
-
npx -y pop-pay pop-unlock # run once before each session
|
|
42
|
+
pop-pay init-vault
|
|
29
43
|
```
|
|
30
44
|
|
|
31
|
-
|
|
45
|
+
This encrypts your card credentials into `~/.config/pop-pay/vault.enc` (AES-256-GCM). For stronger protection (blocks agents with shell access):
|
|
46
|
+
|
|
47
|
+
```bash
|
|
48
|
+
pop-pay init-vault --passphrase # one-time setup
|
|
49
|
+
pop-pay unlock # run once per session
|
|
50
|
+
```
|
|
51
|
+
|
|
52
|
+
### 2. Launch Chrome with CDP remote debugging
|
|
53
|
+
```bash
|
|
54
|
+
pop-pay launch
|
|
55
|
+
```
|
|
56
|
+
|
|
57
|
+
This opens a Chromium instance on `http://localhost:9222` that pop-pay injects credentials into. Your agent (via MCP, browser automation, or x402) then drives the checkout flow — card details never leave the browser process.
|
|
58
|
+
|
|
59
|
+
### 3. Plug into your agent
|
|
60
|
+
The CLI launches infrastructure; the actual payment tool calls come from your agent. Two supported paths:
|
|
61
|
+
|
|
62
|
+
- **MCP server** — add pop-pay to any MCP-compatible client (Claude Code, Cursor, Windsurf, OpenClaw). See [MCP Server](#mcp-server-optional) below.
|
|
63
|
+
- **x402 HTTP** — pay for API calls via the [x402 payment protocol](docs/INTEGRATION_GUIDE.md#x402).
|
|
64
|
+
|
|
65
|
+
Full CLI reference: `pop-pay --help`.
|
|
66
|
+
|
|
67
|
+
## MCP Server (optional)
|
|
68
|
+
|
|
69
|
+
### Add to your MCP client
|
|
32
70
|
|
|
33
71
|
Standard config for any MCP-compatible client:
|
|
34
72
|
|
|
@@ -97,14 +135,6 @@ Runs the MCP server + headless Chromium with CDP. Mount your encrypted vault fro
|
|
|
97
135
|
|
|
98
136
|
</details>
|
|
99
137
|
|
|
100
|
-
### 3. Launch Chrome with CDP and start using
|
|
101
|
-
|
|
102
|
-
```bash
|
|
103
|
-
npx -y pop-pay launch
|
|
104
|
-
```
|
|
105
|
-
|
|
106
|
-
Restart your MCP client. The agent now has access to pop-pay's MCP tools.
|
|
107
|
-
|
|
108
138
|
## MCP Tools
|
|
109
139
|
|
|
110
140
|
| Tool | Description |
|
package/package.json
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "pop-pay",
|
|
3
|
-
"version": "0.5.
|
|
3
|
+
"version": "0.5.5",
|
|
4
4
|
"mcpName": "io.github.100xPercent/pop-pay",
|
|
5
|
-
"description": "
|
|
5
|
+
"description": "The runtime security layer for AI agent commerce. Drop-in CLI + MCP server — blocks hallucinated purchases and keeps card credentials out of agent context. It only takes 0.1% of hallucination to drain 100% of your wallet.",
|
|
6
6
|
"main": "dist/index.js",
|
|
7
7
|
"types": "dist/index.d.ts",
|
|
8
8
|
"bin": {
|
|
@@ -25,6 +25,11 @@
|
|
|
25
25
|
"payment",
|
|
26
26
|
"guardrail",
|
|
27
27
|
"security",
|
|
28
|
+
"cli",
|
|
29
|
+
"command-line",
|
|
30
|
+
"agent-tool",
|
|
31
|
+
"payment-cli",
|
|
32
|
+
"browser-agent",
|
|
28
33
|
"mcp",
|
|
29
34
|
"mcp-server",
|
|
30
35
|
"model-context-protocol",
|