pop-pay 0.5.4 → 0.5.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +74 -18
  2. package/package.json +7 -2
package/README.md CHANGED
@@ -2,33 +2,97 @@
2
2
 
3
3
  <p align="center">
4
4
  <picture>
5
- <img src="https://raw.githubusercontent.com/TPEmist/Point-One-Percent/main/project_banner.png" alt="Point One Percent (AgentPay)" width="800">
5
+ <img src="https://raw.githubusercontent.com/100xPercent/pop-pay-python/main/project_banner.png" alt="Point One Percent (AgentPay)" width="800">
6
6
  </picture>
7
7
  </p>
8
8
 
9
9
  # Point One Percent — pop-pay
10
10
  <p align="left"><i>it only takes <b>0.1%</b> of Hallucination to drain <b>100%</b> of your wallet.</i></p>
11
11
 
12
- The runtime security layer for AI agent commerce. Card credentials are injected directly into the browser DOM via CDP — they never enter the agent's context window. One hallucinated prompt can't drain a wallet it can't see.
12
+ The runtime security layer for AI agent commerce. Drop-in CLI + MCP server. Card credentials are injected directly into the browser DOM via CDP — they never enter the agent's context window. One hallucinated prompt can't drain a wallet it can't see.
13
13
 
14
- ## Getting Started
14
+ <p align="center">
15
+ <img src="https://raw.githubusercontent.com/100xPercent/pop-pay-python/main/assets/runtime_demo.gif" alt="Point One Percent — live CDP injection demo" width="800">
16
+ </p>
17
+
18
+ ## Install
19
+
20
+ Choose your preferred method:
21
+
22
+ <details>
23
+ <summary>Homebrew (macOS)</summary>
24
+
25
+ ```bash
26
+ brew install 100xPercent/tap/pop-pay
27
+ ```
28
+
29
+ </details>
30
+
31
+ <details>
32
+ <summary>curl (Linux / macOS) — bootstraps via npm; requires Node.js 18+</summary>
33
+
34
+ ```bash
35
+ curl -fsSL https://raw.githubusercontent.com/100xPercent/pop-pay/main/install.sh | sh
36
+ ```
37
+
38
+ </details>
15
39
 
16
- ### 1. Initialize the credential vault
40
+ <details>
41
+ <summary>npm (global)</summary>
17
42
 
18
43
  ```bash
19
- npx -y pop-pay pop-init-vault
44
+ npm install -g pop-pay
20
45
  ```
21
46
 
22
- This encrypts your card credentials into `~/.config/pop-pay/vault.enc` (AES-256-GCM). The MCP server decrypts automatically at startup.
47
+ </details>
23
48
 
24
- For stronger protection (recommended — blocks agents with shell access):
49
+ <details>
50
+ <summary>npx (no install — one-off runs)</summary>
25
51
 
26
52
  ```bash
27
- npx -y pop-pay pop-init-vault --passphrase # one-time setup
28
- npx -y pop-pay pop-unlock # run once before each session
53
+ npx -y pop-pay <command>
29
54
  ```
30
55
 
31
- ### 2. Add to your MCP client
56
+ </details>
57
+
58
+ All install paths expose the same binaries: `pop-pay`, `pop-launch`, `pop-init-vault`, `pop-unlock`.
59
+
60
+ > Also available as `@100xpercent/mcp-server-pop-pay` — identical package under the MCP `@scope/mcp-server-<name>` convention. Tracks the same version on every release.
61
+
62
+ > **Using Python?** Check out [pop-pay-python](https://github.com/100xPercent/pop-pay-python) — `pip install pop-pay`. Same security model, same vault format, independent release cycle — safe to switch between runtimes.
63
+
64
+ ## Quick Start (CLI)
65
+
66
+ ### 1. Initialize the encrypted credential vault
67
+ ```bash
68
+ pop-pay init-vault
69
+ ```
70
+
71
+ This encrypts your card credentials into `~/.config/pop-pay/vault.enc` (AES-256-GCM). For stronger protection (blocks agents with shell access):
72
+
73
+ ```bash
74
+ pop-pay init-vault --passphrase # one-time setup
75
+ pop-pay unlock # run once per session
76
+ ```
77
+
78
+ ### 2. Launch Chrome with CDP remote debugging
79
+ ```bash
80
+ pop-pay launch
81
+ ```
82
+
83
+ This opens a Chromium instance on `http://localhost:9222` that pop-pay injects credentials into. Your agent (via MCP, browser automation, or x402) then drives the checkout flow — card details never leave the browser process.
84
+
85
+ ### 3. Plug into your agent
86
+ The CLI launches infrastructure; the actual payment tool calls come from your agent. Two supported paths:
87
+
88
+ - **MCP server** — add pop-pay to any MCP-compatible client (Claude Code, Cursor, Windsurf, OpenClaw). See [MCP Server](#mcp-server-optional) below.
89
+ - **x402 HTTP** — pay for API calls via the [x402 payment protocol](docs/INTEGRATION_GUIDE.md#x402).
90
+
91
+ Full CLI reference: `pop-pay --help`.
92
+
93
+ ## MCP Server (optional)
94
+
95
+ ### Add to your MCP client
32
96
 
33
97
  Standard config for any MCP-compatible client:
34
98
 
@@ -97,14 +161,6 @@ Runs the MCP server + headless Chromium with CDP. Mount your encrypted vault fro
97
161
 
98
162
  </details>
99
163
 
100
- ### 3. Launch Chrome with CDP and start using
101
-
102
- ```bash
103
- npx -y pop-pay launch
104
- ```
105
-
106
- Restart your MCP client. The agent now has access to pop-pay's MCP tools.
107
-
108
164
  ## MCP Tools
109
165
 
110
166
  | Tool | Description |
package/package.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "name": "pop-pay",
3
- "version": "0.5.4",
3
+ "version": "0.5.7",
4
4
  "mcpName": "io.github.100xPercent/pop-pay",
5
- "description": "Point One Percent - Semantic Payment Guardrail for AI Agents. It only takes 0.1% of hallucination to drain 100% of your wallet.",
5
+ "description": "The runtime security layer for AI agent commerce. Drop-in CLI + MCP server — blocks hallucinated purchases and keeps card credentials out of agent context. It only takes 0.1% of hallucination to drain 100% of your wallet.",
6
6
  "main": "dist/index.js",
7
7
  "types": "dist/index.d.ts",
8
8
  "bin": {
@@ -25,6 +25,11 @@
25
25
  "payment",
26
26
  "guardrail",
27
27
  "security",
28
+ "cli",
29
+ "command-line",
30
+ "agent-tool",
31
+ "payment-cli",
32
+ "browser-agent",
28
33
  "mcp",
29
34
  "mcp-server",
30
35
  "model-context-protocol",