# Payaion (pypi · payaion-mcp)

Agent file transfer. No API key to start; price downloads in USDC on Base.

- Trust score: 56/100 (low)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-07

## Components

- npm · `@payaion/mcp`: 62/100, [markdown](https://verifymcp.io/servers/defdone-payaion/payaion-mcp.md), [page](https://verifymcp.io/servers/defdone-payaion/payaion-mcp)
- pypi · `payaion-mcp`: 56/100 (this document), [markdown](https://verifymcp.io/servers/defdone-payaion/payaion-mcp-2.md), [page](https://verifymcp.io/servers/defdone-payaion/payaion-mcp-2)

## Channel facts

- Registry: `pypi`
- Package: `payaion-mcp`
- Version: `1.0.5`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-07.

- **Supply Chain Security**: 100/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - Runs hatchling.build at install time, a recognised native-build step with no shell scripting around it.
  - 1 of 30 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 6/100
  - Repository check failed: no source repository is declared.
  - Provenance check failed: no build-provenance attestation is published.
  - License check failed: the license (MIT License) isn't a recognized OSI-approved license.
  - Actively maintained (last published 0 days ago).
  - Security-disclosure policy not yet verified: we couldn't inspect the source repository.
- **Schema Quality & AI Usability**: 65/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 1022 tokens (~113/item across 9 items; 9 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 71/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 0% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add defdone-payaion -- uvx payaion-mcp
```

### Codex

```bash
codex mcp add defdone-payaion -- uvx payaion-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "defdone-payaion": {
      "type": "local",
      "command": [
        "uvx",
        "payaion-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add defdone-payaion --command uvx --arg payaion-mcp
```

### Hermes

```yaml
mcp_servers:
  defdone-payaion:
    command: "uvx"
    args: ["payaion-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "defdone-payaion": {
      "command": "uvx",
      "args": [
        "payaion-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-07 (score 56, +25)

- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] MCP protocol: unverified → pass
- [functional] First check of Tool coverage: 100
- [functional] First check of Tool coverage: 0
- [functional] First check of Schema quality: fail
- [functional] First check of Schema quality: fail
- [functional] First check of Schema quality: good

### 2026-08-06 (score 31)

First indexed and scored.

## MCP tools (9)

### `upload_file` (~163 tokens)

Low-level upload. Prefer the 'transfer' tool instead — it handles polling automatically. This tool returns immediately with PENDING_UPLOAD status; you must poll get_upload_status yourself. Max file size follows the account plan (Basic 500 MB / Pro 1 GB). Provide EITHER 'filePath' (local stdio only) OR 'content' (base64). Use only when you need explicit control over the upload lifecycle. No API key required — without one you upload as a guest (100 MB, 24-hour link); a key raises the limits and lets you sell.

Input parameters:

- `content`
- `fileName`
- `filePath`
- `idempotencyKey`
- `mimeType`
- `pricePerDownload`

Output parameters:

- `result` (string)

### `upload_from_url` (~141 tokens)

Low-level upload from URL. Prefer the 'transfer' tool instead — it handles polling automatically. This tool returns immediately with PENDING_UPLOAD status; you must poll get_upload_status yourself. Max file size follows the account plan (Basic 500 MB / Pro 1 GB). Private/internal URLs are blocked. Use only when you need explicit control over the upload lifecycle. No API key required — without one you upload as a guest (100 MB, 24-hour link); a key raises the limits and lets you sell.

Input parameters:

- `fileName`
- `idempotencyKey`
- `pricePerDownload`
- `url` (string, required)

Output parameters:

- `result` (string)

### `transfer` (~190 tokens)

One-shot file transfer with optional pricing and marketplace listing. Upload a file, set a per-download price, and list on the marketplace — all in a single call. Returns a shareable download URL. Supports free transfers, paid downloads, and marketplace listings. Provide EXACTLY ONE of: 'filePath' (local stdio — zero tokens), 'url' (remote fetch), or 'content' (base64 fallback). No API key required — without one you upload as a guest (100 MB, 24-hour link); a key raises the limits and lets you sell.

Input parameters:

- `content`
- `fileName`
- `filePath`
- `idempotencyKey`
- `listingCategory`
- `listingDescription`
- `listingTags`
- `listingTitle`
- `mimeType`
- `pricePerDownload`
- `url`

Output parameters:

- `result` (string)

### `get_upload_status` (~113 tokens)

Check the processing status of a previously uploaded file. Returns the current status (PENDING_UPLOAD, UPLOADING, READY, FAILED) and whether the file is ready for download. Rarely needed — the 'transfer' tool handles polling automatically. Use this only to check on uploads that timed out or for manual status inspection. No API key required — without one you upload as a guest (100 MB, 24-hour link); a key raises the limits and lets you sell.

Input parameters:

- `uploadId` (string, required)

Output parameters:

- `result` (string)

### `get_download_url` (~80 tokens)

Get a fresh shareable download URL for a previously uploaded file. The file must be in READY status. Share this URL with anyone — it works without authentication. No API key required — without one you upload as a guest (100 MB, 24-hour link); a key raises the limits and lets you sell.

Input parameters:

- `uploadId` (string, required)

Output parameters:

- `result` (string)

### `list_on_marketplace` (~91 tokens)

List an already-uploaded file on the public Payaion marketplace. The upload must be READY status and have a price set. Returns the unified page URL where buyers can view details and download. Requires the agent key owner to own the upload.

Input parameters:

- `category`
- `description` (string, required)
- `tags`
- `title` (string, required)
- `uploadId` (string, required)

Output parameters:

- `result` (string)

### `browse_marketplace` (~74 tokens)

Search and browse active listings on the Payaion marketplace. Filter by keyword, category, and paginate through results. Returns listing details including title, price, file info, and unified page URL. No API key required.

Input parameters:

- `category`
- `page`
- `pageSize`
- `q`

Output parameters:

- `result` (string)

### `get_payment_requirements` (~65 tokens)

Retrieve payment requirements for a marketplace asset before purchasing. Returns whether the asset is free or paid. For paid assets, includes the x402 payment requirements object that must be signed by the buyer's wallet and passed to the purchase_asset tool.

Input parameters:

- `upload_id` (string, required)

Output parameters:

- `result` (string)

### `purchase_asset` (~105 tokens)

Finalize the purchase of a paid marketplace asset. Requires a signed x402 payment payload from the buyer's wallet. First call get_payment_requirements to obtain the payment requirements, sign them with your EVM wallet, then pass the signed payload here. Returns the purchase receipt including a directDownloadUrl — GET that URL with your X-Aion-Key header to download the file immediately, no extra steps needed.

Input parameters:

- `payment_payload` (object, required)
- `upload_id` (string, required)

Output parameters:

- `result` (string)

## Diagnostics

Captured diagnostic sections: Provenance, Install scripts, Dependencies. The full working is on the page: https://verifymcp.io/servers/defdone-payaion/payaion-mcp-2#diagnostics

## Score history

- 2026-08-07: 56
- 2026-08-06: 31

## Links

- PyPI project: https://pypi.org/project/payaion-mcp/
- Socket report: https://socket.dev/pypi/package/payaion-mcp
- Website: https://payaion.com/
- Changelog RSS feed: https://verifymcp.io/servers/defdone-payaion/payaion-mcp-2.xml
- Changelog JSON feed: https://verifymcp.io/servers/defdone-payaion/payaion-mcp-2.json
- HTML version of this page: https://verifymcp.io/servers/defdone-payaion/payaion-mcp-2