@aifinpay/mcp

MCPcommunity
v2.2.2io.github.daochildUnknownUpdated 1d agonpmGitHub

Pay for any HTTP API in stablecoins on Polygon and Solana with one MCP call.

Works in
ClaudeCursorCopilotChatGPTGemini

Inferred from the transports this listing declares (stdio, streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
3GitHub stars
2Forks
1d agoLast update
Reads these credentials
  • AIFINPAY_AGENT_SECRETAPI keyoptional

    Base58 Ed25519 secret (persistent agent identity; Solana + EVM addresses both derive from it)

Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.

Package
Authorio.github.daochild
LicenseUnknown
Version2.2.2
Sourcenpm+mcp-registry
npm@aifinpay/mcp
GitHubAiFinPay/sdk
SBOMCycloneDX 1.6 ↓
Trust Status
B
60/100Good
✓Listed in Forge index+10/10
—Publisher identity verified+0/20
→ Publisher: run `forge publish` from the package repo to claim ownership
—Ed25519 publish signature+0/5
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
—npm Trusted Publishing (Sigstore)+0/5
→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo
—npm maintainer match+0/5
→ Earned once your identity is verified above and that login is an npm maintainer of this package
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
Dependencies✓ 60 resolved+ · none vulnerable
Tool surface12 tools · none privileged
Security scan✓ Cleanv2.2.2 · todayHow well does this scan work?
EvalsNone
IndexedSep 21, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

12 tools · none privileged
Statically extracted from the published packagev2.2.2 · 14h ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

agent_addressReturn the agent's currently derived on-chain addresses.

Return the agent's currently derived on-chain addresses.

No input schema was published for this tool.

agent_historyRead an agent's payment history by EVM address, public passport identifier, or both. Defaults to the current wallet. Transactions are indexed AiFinPay Polygon settlements, not arbitrary wallet transfers. Receipts include retained prepaid batches and test payments. Never pass a seed, private key or…

Read an agent's payment history by EVM address, public passport identifier, or both. Defaults to the current wallet. Transactions are indexed AiFinPay Polygon settlements, not arbitrary wallet transfers. Receipts include retained prepaid batches and test payments. Never pass a seed, private key or…

No input schema was published for this tool.

agent_quotaHow many prepaid requests this agent has left, per service. Lists the

How many prepaid requests this agent has left, per service. Lists the

No input schema was published for this tool.

dev_payment_quoteInspect the dev paid-content challenge and quote a prepaid batch on Amoy. Checks the requested contract version against the deployed quote. Never signs or broadcasts; a version mismatch is an error, not permission to relabel a contract.

Inspect the dev paid-content challenge and quote a prepaid batch on Amoy. Checks the requested contract version against the deployed quote. Never signs or broadcasts; a version mismatch is an error, not permission to relabel a contract.

No input schema was published for this tool.

payable_fetchFetch a GET resource from an owner-approved AiFinPay merchant. Buys a prepaid batch through verified native Polygon v1.4 within owner limits, then reuses its receipt. Pending payments are recovered without sending another transaction. Other payment protocols are unsupported.

Fetch a GET resource from an owner-approved AiFinPay merchant. Buys a prepaid batch through verified native Polygon v1.4 within owner limits, then reuses its receipt. Pending payments are recovered without sending another transaction. Other payment protocols are unsupported.

No input schema was published for this tool.

agent_passport_resolveResolve an AiFinPay Agent Passport by @username, permanent AIFP number, or immutable agent id.

Resolve an AiFinPay Agent Passport by @username, permanent AIFP number, or immutable agent id.

No input schema was published for this tool.

settlement_routesRead AiFinPay's currently runtime-verified v1.3 settlement routes.

Read AiFinPay's currently runtime-verified v1.3 settlement routes.

No input schema was published for this tool.

settlement_invoiceBuild and validate a NON-SIGNING v1.3 settlement invoice for EVM chains. This tool never moves funds.

Build and validate a NON-SIGNING v1.3 settlement invoice for EVM chains. This tool never moves funds.

No input schema was published for this tool.

settlement_solanaBuild and validate a NON-SIGNING Solana settlement invoice. This tool never moves funds.

Build and validate a NON-SIGNING Solana settlement invoice. This tool never moves funds.

No input schema was published for this tool.

settlement_casperBuild and validate a NON-SIGNING Casper settlement invoice. This tool never moves funds.

Build and validate a NON-SIGNING Casper settlement invoice. This tool never moves funds.

No input schema was published for this tool.

agent_reloadReload the configured local wallet files after init or a file update, without starting a new conversation. Returns public addresses only. Shell environment changes still require reconnecting the MCP process.

Reload the configured local wallet files after init or a file update, without starting a new conversation. Returns public addresses only. Shell environment changes still require reconnecting the MCP process.

No input schema was published for this tool.

deployment_infoGet AiFinPay deployment details across EVM, Solana, and Casper — addresses, stablecoins, program IDs, and settlement status.

Get AiFinPay deployment details across EVM, Solana, and Casper — addresses, stablecoins, program IDs, and settlement status.

No input schema was published for this tool.

12 of 12 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Pay for any HTTP API in stablecoins on Polygon and Solana with one MCP call.

Keywords
mcp
Alternatives
Comparing tool surfaces…

Tools exposed

12 tools · none privileged · observed by static extraction. A tool surface is what one scan read on one day, not a live capability list.

Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.

Dependency tree

What one Forge scan resolved from npm metadata on 2026-09-21 — observed resolution, not a publisher declaration.

60 packages resolved · 5 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

89 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

+77 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies, optionalDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.