# @aifinpay/mcp Pay for any HTTP API in stablecoins on Polygon and Solana with one MCP call. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the package rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 2.2.2 - **Author:** io.github.daochild - **License:** Unknown - **npm:** @aifinpay/mcp - **Endpoints:** streamable-http https://mcp.aifinpay.io/mcp - **Source:** https://github.com/AiFinPay/sdk - **Endpoint health:** reachable (last checked 2026-09-21T10:39:49.771Z, 1 sample) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 60/100 (B), scored on the package rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 1 day ## Security scan - **Status:** clean - **Scanned:** 2026-09-21T10:39:37.131Z - **Version scanned:** 2.2.2 - **CVEs:** none found by OSV at scan time ## Tools 12 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `agent_address` — Return the agent's currently derived on-chain addresses. - `agent_history` — Read an agent's payment history by EVM address, public passport identifier, or both. Defaults to the current wallet. Transactions are indexed AiFinPay Polygon s - `agent_quota` — How many prepaid requests this agent has left, per service. Lists the - `dev_payment_quote` — Inspect the dev paid-content challenge and quote a prepaid batch on Amoy. Checks the requested contract version against the deployed quote. Never signs or broad - `payable_fetch` — Fetch a GET resource from an owner-approved AiFinPay merchant. Buys a prepaid batch through verified native Polygon v1.4 within owner limits, then reuses its re - `agent_passport_resolve` — Resolve an AiFinPay Agent Passport by @username, permanent AIFP number, or immutable agent id. - `settlement_routes` — Read AiFinPay's currently runtime-verified v1.3 settlement routes. - `settlement_invoice` — Build and validate a NON-SIGNING v1.3 settlement invoice for EVM chains. This tool never moves funds. - `settlement_solana` — Build and validate a NON-SIGNING Solana settlement invoice. This tool never moves funds. - `settlement_casper` — Build and validate a NON-SIGNING Casper settlement invoice. This tool never moves funds. - `agent_reload` — Reload the configured local wallet files after init or a file update, without starting a new conversation. Returns public addresses only. Shell environment chan - `deployment_info` — Get AiFinPay deployment details across EVM, Solana, and Casper — addresses, stablecoins, program IDs, and settlement status. ## Install **Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for. **Cautions** (coverage gaps and advisories — never blocking) - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"mcp\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"@aifinpay/mcp\"\n ],\n \"env\": {\n \"AIFINPAY_AGENT_SECRET\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `AIFINPAY_AGENT_SECRET` — Aifinpay Agent Secret (optional) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 1 credential (0 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Moderate blast radius — runs locally and hosted; holds an api key. - Floor 27, ceiling 27 (tier: moderate) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/%40aifinpay%2Fmcp - Install plan: https://forgeregistry.com/api/v1/packages/%40aifinpay%2Fmcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/%40aifinpay%2Fmcp - HTML page: https://forgeregistry.com/registry/%40aifinpay%2Fmcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.