Pop Pay
Prevents AI agents from making unauthorized purchases by keeping payment credentials out of their context window entirely. Uses Chrome DevTools Protocol to inject card details directly into the browser DOM at checkout time. Exposes three MCP tools: request_virtual_card for payment forms, request_purchaser_info for billing details, and request_x402_payment for metered API calls. Runs as a local CLI that launches a CDP-enabled Chrome instance and enforces spending limits, category allowlists, and hallucination loop detection. The vault stores encrypted credentials with AES-256-GCM, optionally locked behind a passphrase. Useful when building autonomous agents that need to complete purchases on AWS, Cloudflare, or other approved vendors without risking wallet drain from a single bad prompt.
- GitHub stars
- 1
- tools
- 3
- transport
- STDIO
- env vars
- 5
- last updated
- Apr 13, 2026
Tools
3 toolsPublic tool metadata for what this MCP can expose to an agent.
request_virtual_cardIssue a virtual card and inject credentials into the checkout page via CDP. Automatically scans the page for hidden prompt injections.
Issue a virtual card and inject credentials into the checkout page via CDP. Automatically scans the page for hidden prompt injections.
No parameter schema in public metadata yet.
request_purchaser_infoAuto-fill billing/contact info (name, address, email, phone). Automatically scans the page for hidden prompt injections.
Auto-fill billing/contact info (name, address, email, phone). Automatically scans the page for hidden prompt injections.
No parameter schema in public metadata yet.
request_x402_paymentPay for API calls via the x402 HTTP payment protocol.
Pay for API calls via the x402 HTTP payment protocol.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
POP_CDP_URLdefault: http://localhost:9222Chrome DevTools Protocol endpoint for credential injection (default: http://localhost:9222)
POP_ALLOWED_CATEGORIESdefault: ["aws","cloudflare"]JSON array of allowed vendor categories (e.g. '["aws","cloudflare"]')
POP_MAX_PER_TXdefault: 100.0Per-transaction spending limit in USD
POP_MAX_DAILYdefault: 500.0Daily spending limit in USD
POP_GUARDRAIL_ENGINEdefault: keywordGuardrail engine: 'keyword' (offline, default) or 'llm' (requires API key)
Readme
Point One Percent — pop-pay
it only takes 0.1% of Hallucination to drain 100% of your wallet.
The runtime security layer for AI agent commerce. Drop-in CLI + MCP server. Card credentials are injected directly into the browser DOM via CDP — they never enter the agent's context window. One hallucinated prompt can't drain a wallet it can't see.
Details
- Repository
- github.com/100xpercent/pop-pay
- Categories
- AI & LLM Tools, Security & Pentesting, Finance & Commerce
- Package
pop-pay- Transport
- STDIO
- Registry
- MCP registry, active
Related AI & LLM Tools MCP servers
View all
Forgevoxellinc/forge-mcpMCP server for Forge, Voxell's embedding API. Voxell's Ingot-8B-R3 ranks #1 for English on MTEB.1stars
Amberambermem/amberLong-term memory for AI assistants: permanent, portable across clients, searchable and exportable.1stars
Queryshieldbch1212/queryshieldSecure SQL proxy for AI agents — NL→SQL, AST safety, per-agent RLS, audit log.1stars
Postals Mcpcoopergwrenn/postals-mcpSend physical handwritten postcards from any AI agent. Real pen & ink, USPS, $4.99/card.1stars
Nebulamindduhokim/nebulamindAI astronomy wiki with open agent peer-review. Vote on evidence, propose edits, earn reputation.1stars