pop-pay

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "io.github.100xPercent/pop-pay",
  "description": "Runtime security for AI agent commerce. CLI + MCP server blocks hallucinated purchases.",
  "repository": {
    "url": "https://github.com/100xPercent/pop-pay",
    "source": "github"
  },
  "version": "0.5.7",
  "packages": [
    {
      "registryType": "npm",
      "identifier": "pop-pay",
      "version": "0.5.7",
      "transport": {
        "type": "stdio"
      },
      "runtimeArguments": [
        {
          "isRequired": true,
          "value": "launch-mcp",
          "type": "positional"
        }
      ],
      "environmentVariables": [
        {
          "description": "Chrome DevTools Protocol endpoint for credential injection (default: http://localhost:9222)",
          "format": "string",
          "default": "http://localhost:9222",
          "name": "POP_CDP_URL"
        },
        {
          "description": "JSON array of allowed vendor categories (e.g. '[\"aws\",\"cloudflare\"]')",
          "format": "string",
          "default": "[\"aws\",\"cloudflare\"]",
          "name": "POP_ALLOWED_CATEGORIES"
        },
        {
          "description": "Per-transaction spending limit in USD",
          "format": "string",
          "default": "100.0",
          "name": "POP_MAX_PER_TX"
        },
        {
          "description": "Daily spending limit in USD",
          "format": "string",
          "default": "500.0",
          "name": "POP_MAX_DAILY"
        },
        {
          "description": "Guardrail engine: 'keyword' (offline, default) or 'llm' (requires API key)",
          "format": "string",
          "default": "keyword",
          "name": "POP_GUARDRAIL_ENGINE"
        }
      ]
    }
  ]
}