P
paysafe
Local@paysafe-agent.comSecurity
About paysafe
Payment firewall for x402: scans for replay, overpayment, PII/secret leaks, prompt-injection
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
Tools
12Saved tool list · updated 2w ago
| Parameter | Type | Required | Description |
|---|---|---|---|
| policy | object | No | |
| policy.skip_deep | boolean | No | |
| policy.force_deep | boolean | No | Run deep content analysis even below the micropayment threshold |
| context | object | No | |
| context.offer | string | No | The raw 402 offer / discovery payload the payment terms came from (accepts entry, Bazaar listing JSON). pay_to is expected here and exempt from the address-provenance check; the offer is still scanned for embedded injection instructions. |
| context.phase | enum | No | Set 'pre_sign' when scanning BEFORE the payment is signed (the normal scan-before-pay flow): the EIP-3009 nonce doesn't exist yet, so its absence won't be flagged. Omit or use 'post_sign' when scanning a signed payload.pre_sign | post_sign |
| context.origin | enum | No | Where the decision to pay originatedplanning | user_instruction | tool_result | fetched_content | unknown |
| context.content | string | No | PROSE the agent just read (page text, tool output), for injection analysis. Do NOT put the 402 offer / discovery JSON here — that goes in `offer` (the recipient address is expected there). |
| context.content_source_url | string | No | |
| payment | object | Yes | |
| payment.asset | string | No | |
| payment.nonce | string | No | |
| payment.payer | string | No | |
| payment.amount | string | No | Atomic units, e.g. '10000' = $0.01 USDC |
| payment.pay_to | string | No | |
| payment.reason | string | No | |
| payment.scheme | string | No | |
| payment.network | string | No | CAIP-2, e.g. eip155:8453 |
| payment.metadata | object | No | |
| payment.amount_usd | number | No | |
| payment.description | string | No | |
| payment.resource_url | string | No | |
| payment.asset_decimals | number | No | |
| agent_id | string | No | |
| expected_price_usd | number | No |
Details
The maintainer has not added details yet. Check the README in the repository.
Comments
Markdown supported
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.