io.github.codespar/mcp-ap2

NPM · @CODESPAR/MCP-AP2 · SCANNED AUG 4

MCP server for AP2 — Google's Agent-to-Agent Payment Protocol (authorization, audit, trust)

Available components

+45 this week 69 69 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security86

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 42 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability71

AI-judged instruction clarity (good).Pass
Tool/resource definitions use about 1696 tokens (~77/item across 22 items; 22 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management30

Stability observed for 9 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @codespar/mcp-ap2

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add codespar-mcp-ap2 -- npx -y @codespar/mcp-ap2

# add to Codex CLI

codex mcp add codespar-mcp-ap2 -- npx -y @codespar/mcp-ap2

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "codespar-mcp-ap2": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@codespar/mcp-ap2"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add codespar-mcp-ap2 --command npx --arg -y --arg @codespar/mcp-ap2

# ~/.hermes/config.yaml

mcp_servers:
  codespar-mcp-ap2:
    command: "npx"
    args: ["-y", "@codespar/mcp-ap2"]

// mcp.json

{
  "mcpServers": {
    "codespar-mcp-ap2": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-ap2"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

4 Aug 26 +5
- Stability: unverified → 0.30 ▲ functional
2 Aug 26 +43
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Schema quality: unverified → good ▲ functional
- Licence: MIT functional
1 Aug 26 +16
- Tool coverage: unverified → 100 ▲ functional
31 Jul 26 −1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −18
- Malware scan: pass → unverified ▼ security
28 Jul 26 −22
- Tool coverage: 100 → unverified ▼ functional
- First check of Schema quality: unverified functional
27 Jul 26 46

First indexed and scored.

Show 4 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Aug 2026 · Analysed npm/@codespar/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 94 packages

94 packages in the resolved dependency tree · 94 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 22 exposed · ~1,629 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

authorize_payment ~124

Request payment authorization with scoped limits. Returns an authorization token that can be used to execute the payment.

Input Output Examples

Name	Type	Req	Description
amount	string	yes	Payment amount (e.g. '25.00')
currency	string	yes	Currency code (e.g. 'USD')
expiresIn	number	—	Authorization validity in seconds (default: 3600)
metadata	object	—	Custom metadata key-value pairs
paymentMethod	string	—	Preferred payment method
purpose	string	yes	Payment purpose / description
recipientAgentId	string	yes	Recipient agent ID

No output schema declared.

No examples provided.

create_cart_mandate ~109

Create an AP2 cart mandate — a signed, locked-cart commitment from a merchant binding line items, totals, and merchant attestation.

Input Output Examples

Name	Type	Req	Description
currency	string	yes	Currency code
expiresAt	string	—	Cart expiry (ISO 8601)
intentMandateId	string	yes	Linked intent mandate VC ID
items	array	yes	Cart line items
merchantDid	string	yes	DID of the merchant
total	string	yes	Cart total amount

No output schema declared.

No examples provided.

create_intent_mandate ~171

Create an AP2 intent mandate — a Verifiable Credential expressing the user's intent to delegate a transaction to an agent (scope, constraints, expiry).

Input Output Examples

Name	Type	Req	Description
agentDid	string	yes	DID of the agent receiving the intent
currency	string	yes	Currency code (e.g. 'USD')
expiresAt	string	—	Expiry timestamp (ISO 8601)
maxAmount	string	yes	Maximum amount the agent can spend
merchantAllowList	array	—	Optional list of merchant DIDs/IDs the agent may transact with
metadata	object	—	Custom metadata key-value pairs
scope	string	yes	Free-form scope (e.g. 'purchase running shoes under $200')
subjectDid	string	yes	DID of the user delegating intent

No output schema declared.

No examples provided.

create_payment_mandate ~108

Create an AP2 payment mandate — the final Verifiable Credential authorizing settlement against a cart mandate.

Input Output Examples

Name	Type	Req	Description
amount	string	yes	Final payment amount
cartMandateId	string	yes	Linked cart mandate VC ID
currency	string	yes	Currency code
metadata	object	—	Custom metadata key-value pairs
payerDid	string	yes	DID of the payer (typically the user)
paymentMethodId	string	—	Payment method ID to settle against

No output schema declared.

No examples provided.

create_presentation ~90

Create a Verifiable Presentation bundling one or more credentials (e.g. intent + cart + payment mandates) for a given audience/verifier.

Input Output Examples

Name	Type	Req	Description
audience	string	yes	Intended verifier DID or URI
challenge	string	—	Optional challenge nonce supplied by the verifier
credentialIds	array	yes	IDs of credentials to include
holderDid	string	yes	DID of the presentation holder

No output schema declared.

No examples provided.

create_receipt ~82

Create a signed receipt for a settled payment — a tamper-evident record linking transaction, mandates, and settlement.

Input Output Examples

Name	Type	Req	Description
metadata	object	—	Custom metadata key-value pairs
notes	string	—	Optional human-readable notes
paymentMandateId	string	—	Payment mandate VC ID
transactionId	string	yes	Settled transaction ID

No output schema declared.

No examples provided.

execute_payment ~47

Execute an authorized payment. Requires a valid authorization token.

Input Output Examples

Name	Type	Req	Description
authorizationId	string	yes	Authorization ID from authorize_payment
paymentMethodId	string	—	Specific payment method ID to use

No output schema declared.

No examples provided.

get_agent ~36

Get agent registration details, trust status, and current spend usage

Input Output Examples

Name	Type	Req	Description
agentId	string	—	Agent ID (defaults to current agent)

No output schema declared.

No examples provided.

get_audit_trail ~41

Get the complete audit trail for a transaction — every authorization, approval, execution, and settlement event

Input Output Examples

Name	Type	Req	Description
transactionId	string	yes	Transaction ID

No output schema declared.

No examples provided.

get_authorization ~30

Get authorization details including status, limits, and expiry

Input Output Examples

Name	Type	Req	Description
authorizationId	string	yes	Authorization ID

No output schema declared.

No examples provided.

get_transaction ~31

Get full transaction details including authorization, execution, and settlement status

Input Output Examples

Name	Type	Req	Description
transactionId	string	yes	Transaction ID

No output schema declared.

No examples provided.

list_agents ~56

List registered agents with optional filters

Input Output Examples

Name	Type	Req	Description
capability	string	—	Filter by capability
pageSize	number	—	Results per page
pageToken	string	—	Pagination token
status	string	—	Filter by status

No output schema declared.

No examples provided.

list_audit_events ~92

List audit events across all transactions with filters

Input Output Examples

Name	Type	Req	Description
agentId	string	—	Filter by agent ID
eventType	string	—	Filter by event type
from	string	—	Start date (ISO 8601)
pageSize	number	—	Results per page
pageToken	string	—	Pagination token
to	string	—	End date (ISO 8601)

No output schema declared.

No examples provided.

list_authorizations ~76

List payment authorizations with optional filters

Input Output Examples

Name	Type	Req	Description
from	string	—	Start date (ISO 8601)
pageSize	number	—	Results per page
pageToken	string	—	Pagination token
status	string	—	Filter by status
to	string	—	End date (ISO 8601)

No output schema declared.

No examples provided.

list_payment_methods ~52

List available payment methods from AP2 partner network (Visa, Mastercard, Stripe, PayPal, etc.)

Input Output Examples

Name	Type	Req	Description
currency	string	—	Filter by supported currency
type	string	—	Filter by method type

No output schema declared.

No examples provided.

list_transactions ~103

List transactions with optional filters

Input Output Examples

Name	Type	Req	Description
direction	string	—	Filter by direction
from	string	—	Start date (ISO 8601)
maxAmount	string	—	Maximum amount
minAmount	string	—	Minimum amount
pageSize	number	—	Results per page
pageToken	string	—	Pagination token
status	string	—	Filter by status
to	string	—	End date (ISO 8601)

No output schema declared.

No examples provided.

register_agent ~90

Register an AI agent as a trusted payer in the AP2 network. Defines the agent's identity, capabilities, and spending limits.

Input Output Examples

Name	Type	Req	Description
capabilities	array	yes	Agent capabilities
description	string	—	Agent description and purpose
name	string	yes	Human-readable agent name
ownerEmail	string	—	Owner email for notifications
spendLimit	object	yes	Spending limit for this agent

No output schema declared.

No examples provided.

resolve_did ~51

Resolve a Decentralized Identifier (DID) to its DID document via the AP2 universal resolver.

Input Output Examples

Name	Type	Req	Description
did	string	yes	The DID to resolve (e.g. 'did:web:merchant.example')

No output schema declared.

No examples provided.

revoke_agent ~52

Revoke an agent's payment authorization. The agent will no longer be able to make or receive payments.

Input Output Examples

Name	Type	Req	Description
agentId	string	yes	Agent ID to revoke
reason	string	yes	Reason for revocation

No output schema declared.

No examples provided.

verify_credential ~71

Verify a Verifiable Credential (intent, cart, or payment mandate). Checks signature, issuer trust, expiry, and revocation status.

Input Output Examples

Name	Type	Req	Description
credential	object	—	The Verifiable Credential JSON-LD object to verify
credentialId	string	—	Alternatively, the ID of a stored credential to verify

No output schema declared.

No examples provided.

verify_presentation ~67

Verify a Verifiable Presentation and all embedded credentials, including holder binding and challenge nonce.

Input Output Examples

Name	Type	Req	Description
audience	string	—	Expected audience (verifier DID)
challenge	string	—	Expected challenge nonce, if used
presentation	object	yes	The Verifiable Presentation JSON-LD object

No output schema declared.

No examples provided.

verify_receipt ~50

Verify a receipt's signature, issuer, and chain back to the originating mandates.

Input Output Examples

Name	Type	Req	Description
receipt	object	—	Alternatively, the receipt object itself
receiptId	string	—	Receipt ID to verify

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 4 Aug