protogrid

Search / io.github.base-buzz/mcp

PayStage

R0· no sign-in

Umbrella MCP: payment preflight, auth watch, HIP-3 trade preflight, velocity checks

v0.3.5 · active · repository · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality88new
Trust93of 100
Uptime, 30 days100%
Latency p50774 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "base-buzz": {
      "type": "http",
      "url": "https://api.paystage.xyz/mcp"
    }
  }
}
claude mcp add --transport http base-buzz https://api.paystage.xyz/mcp
[mcp_servers.base-buzz]
url = "https://api.paystage.xyz/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "base-buzz": {
      "type": "remote",
      "url": "https://api.paystage.xyz/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "base-buzz": {
      "type": "http",
      "url": "https://api.paystage.xyz/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=base-buzz&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLnBheXN0YWdlLnh5ei9tY3AifQ%3D%3D"
}
{
  "servers": {
    "base-buzz": {
      "type": "http",
      "url": "https://api.paystage.xyz/mcp"
    }
  }
}
{
  "mcpServers": {
    "base-buzz": {
      "httpUrl": "https://api.paystage.xyz/mcp"
    }
  }
}
extensions:
  "base-buzz":
    enabled: true
    name: "base-buzz"
    type: streamable_http
    uri: "https://api.paystage.xyz/mcp"
    timeout: 300

Quality 88 / 100new

protocol88 · weight 25
  • pass
    protocol.modernsupports 2026-07-28 (server/discover)
  • pass
    protocol.statelessanswers without a session
  • pass
    protocol.transportstreamable HTTP
  • warn
    protocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every use
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene88 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations9 of 9 tools declare readOnlyHint or destructiveHint
  • fail
    tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: evaluate_mcp_payment (idempotentHint); list_outstanding_auths (idempotentHint); evaluate_outstanding_auths (idempotentHint); …
  • pass
    tools.token_costabout 1,449 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
  • pass
    tools.hidden_textno hidden text in tool names, descriptions, schemas or annotations
stabilityn/a · weight 15
  • n/a
    stability.changes, stability.rug_pull, stability.new_linkstool history recorded for 1 of the 7 days needed
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvabledeps.dev does not know @paystage/[email protected]

9 tools, about 1,449 tokens to load them all · tool set e295ddfa37b4 · tools last changed 2026-11-14 · checked 2026-11-14 07:36 UTC

Tool changes

  • evaluate_batchadded

    Evaluate several payment challenges against one policy in a single call. Returns one verdict per input, in order, so an agent settling a batch decides once per payment and can stop at the first refusal.

  • validate_policyadded

    Check a policy document without evaluating a payment. Returns the exact validation error when it is wrong, which is the question behind most support requests.

  • decode_payment_requiredadded

    Decode a base64 `payment-required` header from a 402 response into the JSON challenge, so an agent can inspect it before deciding anything.

  • verify_receiptadded

    Verify a PayStage receipt against the published signing key. Returns the verdict it attests to, or why it cannot be trusted.

  • evaluate_velocityadded

    Rolling-window rate and spend-pattern check for a proposed payment against recent action history and a policy.velocity config

  • evaluate_hip3_tradeaddednew site: trade.xyz

    Evaluate a Hyperliquid HIP-3 (trade.xyz) order against a TradePolicy before an agent trades. Returns decision allow | review | do_not_trade.

  • evaluate_outstanding_authsadded

    List and evaluate outstanding token authorizations against a policy

  • list_outstanding_authsadded

    List outstanding token authorizations for a wallet

  • evaluate_mcp_paymentchangeddescription, input schema, annotationsmeaning changed
    before

    Decide whether an x402 payment should be signed, against a policy. Returns pay, review or do_not_pay with the rule that fired.

    after · 17% of words in common

    Evaluate an x402 PaymentRequired payload against a PayStage spending policy before paying

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 93 / 100

duplicate-repo
provenance90
liveness100
freshness100
hygiene80

+repository +namespace-matches-repo +website +reachable +uptime-100% +updated-2d-ago -duplicate-repo(6 names)

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

@paystage/[email protected] npmthis version is not known to the dependency resolver

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://api.paystage.xyz/mcp streamable-httpnoneyes100%774 ms2026-07-282026-11-14
packageregistryversionruntimesecrets
@paystage/mcpnpm0.3.5–

Tools (9)

decode_payment_requiredread-onlyDecode a base64 `payment-required` header from a 402 response into the JSON challenge, so an agent can inspect it before deciding anything.
evaluate_batchread-onlyEvaluate several payment challenges against one policy in a single call. Returns one verdict per input, in order, so an agent settling a batch decides once per payment and can stop at the first refusal.
evaluate_hip3_traderead-onlyEvaluate a Hyperliquid HIP-3 (trade.xyz) order against a TradePolicy before an agent trades. Returns decision allow | review | do_not_trade.
evaluate_mcp_paymentread-onlyEvaluate an x402 PaymentRequired payload against a PayStage spending policy before paying
evaluate_outstanding_authsread-onlyList and evaluate outstanding token authorizations against a policy
evaluate_velocityread-onlyRolling-window rate and spend-pattern check for a proposed payment against recent action history and a policy.velocity config
list_outstanding_authsread-onlyList outstanding token authorizations for a wallet
validate_policyread-onlyCheck a policy document without evaluating a payment. Returns the exact validation error when it is wrong, which is the question behind most support requests.
verify_receiptread-onlyVerify a PayStage receipt against the published signing key. Returns the verdict it attests to, or why it cannot be trusted.

Schemas: list_tools.

Also listed as

5 other active names share this repository: io.github.base-buzz/preflight, xyz.paystage/auth-watch, xyz.paystage/mcp, xyz.paystage/preflight, xyz.paystage/trade-preflight

Similar MCP servers

More from io.github.base-buzz

Official server.json
{
  "name": "io.github.base-buzz/mcp",
  "title": "PayStage",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://api.paystage.xyz/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.3.5",
  "packages": [
    {
      "version": "0.3.5",
      "transport": {
        "type": "stdio"
      },
      "identifier": "@paystage/mcp",
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "environmentVariables": [
        {
          "name": "PAYSTAGE_POLICY_PATH",
          "description": "Path to policy.json spending rules"
        },
        {
          "name": "PAYSTAGE_RPC_URL",
          "description": "Base RPC URL override"
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/base-buzz/paystage",
    "source": "github",
    "subfolder": "packages/mcp"
  },
  "websiteUrl": "https://paystage.xyz",
  "description": "Umbrella MCP: payment preflight, auth watch, HIP-3 trade preflight, velocity checks"
}