Pop Pay
Put guardrails on AI agents that can trigger real purchases so spend stays within policy and vendors stay allowlisted.
Overview
Pop Pay is a MCP server for the Ship phase that enforces spending limits and vendor allowlists so AI agents cannot complete hallucinated purchases.
What is this MCP server?
- MCP server plus CLI with stdio transport (npm package pop-pay, v0.5.7)
- Per-transaction and daily USD limits via POP_MAX_PER_TX and POP_MAX_DAILY
- Vendor category allowlist via POP_ALLOWED_CATEGORIES JSON
- Optional Chrome DevTools credential injection via POP_CDP_URL
- Blocks hallucinated or unauthorized agent purchases at runtime
- Server version 0.5.7
- stdio transport via npm registry
- Default POP_MAX_PER_TX 100.0 USD
Community signal: 1 GitHub stars.
What problem does it solve?
Autonomous agents can attempt real checkouts or cloud upgrades from a single bad reasoning step, with no per-tx or daily spend fence.
Who is it for?
Indie builders running agents against AWS, Cloudflare, or similar vendors who need default-deny commerce guardrails.
Skip if: Teams with no agent-initiated payments or who only need static secret scanning without transaction policy.
What do I get? / Deliverables
Purchase paths run through policy checks with category gates and USD caps before any charge is authorized.
- MCP-launched purchase policy layer via launch-mcp
- Configured per-tx and daily USD ceilings
- Category-restricted vendor surface for agent commerce
Recommended MCP Servers
Journey fit
How it compares
Runtime purchase policy MCP, not a generic code-audit skill or payment processor integration.
Common Questions / FAQ
Who is Pop Pay for?
Solo and small teams shipping AI agents that can spend money on vendor sites or APIs and need enforceable limits.
When should I use Pop Pay?
Before giving an agent checkout, upgrade, or marketplace tools in production or staging with real billing credentials.
How do I add Pop Pay to my agent?
Install the npm package pop-pay, run launch-mcp over stdio in your MCP config, and set POP_ALLOWED_CATEGORIES, POP_MAX_PER_TX, POP_MAX_DAILY, and optional POP_CDP_URL.