# ClawPay MCP — Non-Custodial x402 Payments for AI Agents (npm · clawpay-mcp)

Non-custodial x402 payments for AI agents. Sign locally, spend limits, Base network.

- Trust score: 57/100 (low)
- Change this week: +18
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `clawpay-mcp`: 57/100 (this document), [markdown](https://verifymcp.io/servers/up2itnow0822-clawpay-mcp/clawpay-mcp.md), [page](https://verifymcp.io/servers/up2itnow0822-clawpay-mcp/clawpay-mcp)

## Channel facts

- Registry: `npm`
- Package: `clawpay-mcp`
- Version: `1.1.2`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 79/100
  - No malware found by supply-chain analysis.
  - CVE check failed: a known high-severity CVE affects ws 8.18.3, reached via viem > ws. A fixed version is available.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (111 of 115), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 19/100
  - Repository check failed: the declared repository URL redirects; it must resolve directly.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 135 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 71/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 1544 tokens (~140/item across 11 items; 11 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add up2itnow0822-clawpay-mcp -- npx -y clawpay-mcp
```

### Codex

```bash
codex mcp add up2itnow0822-clawpay-mcp -- npx -y clawpay-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "up2itnow0822-clawpay-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "clawpay-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add up2itnow0822-clawpay-mcp --command npx --arg -y --arg clawpay-mcp
```

### Hermes

```yaml
mcp_servers:
  up2itnow0822-clawpay-mcp:
    command: "npx"
    args: ["-y", "clawpay-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "up2itnow0822-clawpay-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "clawpay-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 57, +38)

- [security regression] CVE-2026-45736 affects this package: high
- [security regression] CVE-2026-48779 affects this package: high
- [security regression] Known CVEs: unverified → fail
- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional regression] Capabilities: pass → unverified
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] License: unverified → pass
- [functional] Licence: MIT

### 2026-08-01 (score 19, −2)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-31 (score 21, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-30 (score 39, +21)

- [functional improvement] Tool coverage: unverified → 100

### 2026-07-28 (score 18, −21)

- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified

### 2026-07-27 (score 39)

First indexed and scored.

## MCP tools (11)

### `deploy_wallet` (~126 tokens)

Deploy a new AgentAccountV2 wallet via the factory contract. The wallet is deterministically addressed (CREATE2) and owned by an NFT. Returns the wallet address and deployment transaction hash. Requires FACTORY_ADDRESS and NFT_CONTRACT_ADDRESS env vars (or pass them as arguments).

Input parameters:

- `factory_address` (string): Factory contract address. Defaults to FACTORY_ADDRESS env var.
- `nft_contract_address` (string): NFT contract address. Defaults to NFT_CONTRACT_ADDRESS env var.
- `token_id` (string, required): NFT token ID that will own this wallet (e.g. "1")

### `get_wallet_info` (~82 tokens)

Get comprehensive wallet information including address, on-chain balance, spend limits, remaining period allowance, and queue depth. Use token parameter to check budget for a specific ERC20 (defaults to ETH).

Input parameters:

- `token` (string): Token address to check. Use "0x0000000000000000000000000000000000000000" for ETH (default).

### `send_payment` (~187 tokens)

Send ETH or ERC20 tokens from the Agent Wallet. If the amount is within the configured spend limits, it executes immediately and returns the tx hash. If it exceeds limits, the transaction is queued for owner approval (use queue_approval to manage). Always check spend limits first with check_spend_limit to avoid surprises.

Input parameters:

- `amount_eth` (string, required): Amount in ETH (or token units). E.g. "0.001" for 0.001 ETH, "1.5" for 1.5 USDC
- `memo` (string): Optional memo for this payment (not stored on-chain)
- `to` (string, required): Recipient wallet address (0x-prefixed)
- `token` (string): ERC20 token address. Omit for native ETH.
- `token_decimals` (number): Token decimals (default 18 for ETH, 6 for USDC)

### `check_spend_limit` (~82 tokens)

Check whether a proposed payment amount is within the wallet's autonomous spend limits. Returns a clear yes/no with remaining budget details. Use this before send_payment to avoid surprise queuing.

Input parameters:

- `amount_eth` (string, required): Amount in ETH to check (e.g. "0.01")
- `token` (string): Token address. Omit for native ETH.

### `queue_approval` (~95 tokens)

Manage over-limit transactions queued for owner review. Use action="list" to see pending transactions, "approve" to approve one by ID, or "cancel" to cancel one by ID. Approve/cancel require the agent key to have owner privileges.

Input parameters:

- `action` (string, required): Action: "list", "approve", or "cancel"
- `tx_id` (string): Transaction queue ID (required for approve/cancel)

### `x402_pay` (~231 tokens)

Fetch a URL and automatically handle HTTP 402 Payment Required responses. If an active x402 V2 session covers this URL, the session token is used instead of making a new payment (no on-chain cost). If no session exists, the Agent Wallet pays the required amount and retries. Payment is rejected if it exceeds your wallet's spend limits or the max_payment_eth cap. Powered by the x402 protocol on Base network. Tip: Use x402_session_start to pay once for a session and save on repeated calls.

Input parameters:

- `body` (string): Request body string (for POST/PUT/PATCH)
- `headers` (object): Additional request headers
- `max_payment_eth` (string): Maximum payment cap in ETH (e.g. "0.001")
- `method` (string): HTTP method (default: GET)
- `skip_session_check` (boolean): Skip session auto-detection and force a fresh x402 payment
- `timeout_ms` (number): Timeout in milliseconds (default: 30000)
- `url` (string, required): URL to fetch (HTTP 402 responses are handled automatically)

### `get_transaction_history` (~126 tokens)

Retrieve the wallet's recent on-chain transaction history from event logs. Shows executions, queued transactions, approvals, cancellations, spend policy updates, and operator changes. Filter by event type or block range for targeted queries.

Input parameters:

- `event_type` (string): Filter by event type (default: all)
- `from_block` (string): Start block (decimal string). Defaults to 1000 blocks ago.
- `limit` (number): Max entries to return (default: 20, max: 100)
- `to_block` (string): End block (decimal string). Defaults to latest.

### `x402_session_start` (~285 tokens)

Establish an x402 V2 payment session: make a SINGLE on-chain payment and receive a cryptographically signed session token. All subsequent calls to the same endpoint within the session lifetime use x402_session_fetch — no additional payments required. Agents pay once per session rather than once per API call. Session tokens are signed locally by your wallet key (non-custodial). Returns a session_id you pass to x402_session_fetch for all future calls.

Input parameters:

- `body` (string): Request body for POST/PUT/PATCH session-start requests
- `endpoint` (string, required): Base URL to establish a session for (e.g., "https://api.example.com/v1")
- `headers` (object): Additional request headers
- `label` (string): Optional label for this session (e.g., "Premium API session")
- `max_payment_eth` (string): Maximum ETH to pay for this session. Rejects if price exceeds this.
- `method` (string): HTTP method for the initial request (default: GET)
- `scope` (string): "prefix": covers all paths under this URL (default). "exact": single URL only.
- `timeout_ms` (number): Request timeout in milliseconds (default: 30000)
- `ttl_seconds` (number): Session TTL in seconds (default: 3600 / 1 hour). Max: 30 days.

### `x402_session_fetch` (~179 tokens)

Make an HTTP request within an established x402 V2 session — NO payment required. The session token (signed by your wallet) is automatically attached to the request. The server recognises your session and grants access without a new on-chain payment. Requires a session_id from x402_session_start. Returns an error if the session has expired (call x402_session_start again to renew).

Input parameters:

- `body` (string): Request body for POST/PUT/PATCH
- `headers` (object): Additional headers (session token is injected automatically)
- `method` (string): HTTP method (default: GET)
- `session_id` (string, required): Session ID from x402_session_start
- `timeout_ms` (number): Timeout in milliseconds (default: 30000)
- `url` (string, required): URL to fetch (must be covered by the session)

### `x402_session_status` (~77 tokens)

Check the status of x402 V2 payment sessions. Without arguments, lists all active sessions with TTL remaining. With a session_id, shows full details for that session including call count, payment info, and the signed session token.

Input parameters:

- `session_id` (string): Specific session ID to inspect. Omit to list all active sessions.

### `x402_session_end` (~74 tokens)

Explicitly close an x402 V2 session before it expires naturally. After calling this, x402_session_fetch will return an error for the closed session. Useful for security hygiene or when you know a session is no longer needed.

Input parameters:

- `session_id` (string, required): Session ID to close (from x402_session_start)

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/up2itnow0822-clawpay-mcp/clawpay-mcp#diagnostics

## Score history

- 2026-08-03: 57
- 2026-08-02: 57
- 2026-08-01: 19
- 2026-07-31: 21
- 2026-07-30: 39
- 2026-07-28: 18
- 2026-07-27: 39

## Links

- npm package: https://www.npmjs.com/package/clawpay-mcp
- Socket report: https://socket.dev/npm/package/clawpay-mcp
- Changelog RSS feed: https://verifymcp.io/servers/up2itnow0822-clawpay-mcp/clawpay-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/up2itnow0822-clawpay-mcp/clawpay-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/up2itnow0822-clawpay-mcp/clawpay-mcp