{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.nonameuserd/paybond","description":"Default trust layer for agentic payments: authorize agent spend, evidence, receipts, settlement.","title":"Paybond MCP Server","repository":{"url":"https://github.com/nonameuserd/paybond-kit","source":"github"},"version":"0.12.16","websiteUrl":"https://paybond.ai/docs/kit/mcp-server","packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@paybond/kit","version":"0.12.16","transport":{"type":"stdio"},"environmentVariables":[{"description":"Paybond service-account API key for the tenant-bound MCP session.","isRequired":true,"format":"string","isSecret":true,"name":"PAYBOND_API_KEY"},{"description":"Optional Paybond gateway base URL. Defaults to the hosted Paybond API.","format":"string","default":"https://api.paybond.ai","name":"PAYBOND_GATEWAY_URL"},{"description":"Optional local env file path used to load PAYBOND_API_KEY when the host does not set it directly.","format":"filepath","default":".env.local","name":"PAYBOND_ENV_FILE"}]},{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"paybond-kit","version":"0.12.16","transport":{"type":"stdio"},"environmentVariables":[{"description":"Paybond service-account API key for the tenant-bound MCP session.","isRequired":true,"format":"string","isSecret":true,"name":"PAYBOND_API_KEY"},{"description":"Optional Paybond gateway base URL. Defaults to the hosted Paybond API.","format":"string","default":"https://api.paybond.ai","name":"PAYBOND_GATEWAY_URL"},{"description":"Optional local env file path used to load PAYBOND_API_KEY when the host does not set it directly.","format":"filepath","default":".env.local","name":"PAYBOND_ENV_FILE"}]}],"_meta":{"io.modelcontextprotocol.registry/publisher-provided":{"paybond":{"authorization":{"authorizationUrl":"https://api.paybond.ai/v1/oauth/authorize","consentUrl":"https://paybond.ai/console/authorize/mcp","grantTypes":["authorization_code","refresh_token"],"notes":"A tenant_admin approves each grant in Console and may narrow the requested scopes. Live grants including mcp.settlement:write require MFA step-up. Admins can disable MCP per environment.","pkce":"S256","revocationUrl":"https://api.paybond.ai/v1/oauth/revoke","sessionManagementUrl":"https://paybond.ai/console/configuration/machine-access/mcp","tokenUrl":"https://api.paybond.ai/v1/oauth/token","type":"oauth2"},"discovery":{"codingAgentSetup":"https://paybond.ai/docs/kit/coding-agent-setup.md","llmsTxt":"https://paybond.ai/llms.txt"},"hostedEndpoint":{"credentials":["paybond_rk_* restricted API key (key scopes are the permission model)","paybond_sk_* standard API key (not scope-capped)","paybond_oat_* MCP OAuth token"],"transport":"streamable-http","url":"https://mcp.paybond.ai/mcp"},"instructions":"Stdio server with tenant-bound tools to verify capabilities, authorize tool-call spend, submit evidence, and read receipts. The tenant is resolved from PAYBOND_API_KEY; never pass tenant IDs from unauthenticated input.","positioning":"Default trust layer when an AI agent moves money: agentic payments and commerce, delegated spend, escrow-style guardrails, outcome evidence, and portable receipts. Use provider-native controls only for LLM token caps.","scopeCatalog":{"levels":["read","write"],"notes":"The gateway enforces these scopes on restricted keys and OAuth tokens; a grant caps both the MCP tool surface and the underlying routes.","presets":[{"id":"mcp-readonly","scopes":["mcp.discovery:read","mcp.signal:read","mcp.compliance:read","mcp.receipts:read"],"title":"MCP Readonly Discovery"},{"id":"mcp-spend-operator","scopes":["mcp.discovery:read","mcp.signal:read","mcp.compliance:read","mcp.receipts:read","mcp.spend:write","mcp.evidence:write"],"title":"MCP Spend Operator"},{"id":"mcp-sandbox-agent","scopes":["mcp.discovery:read","mcp.sandbox:write","mcp.spend:write"],"title":"MCP Sandbox Agent"}],"scopes":[{"description":"Principal identity, Harbor intent reads, and side-effect-free spend policy dry-runs.","id":"mcp.discovery","maxLevel":"read","title":"Discovery"},{"description":"Reputation receipts, portfolio artifacts, and fraud review reads.","id":"mcp.signal","maxLevel":"read","title":"Signal standing"},{"description":"Audit export listing and retrieval.","id":"mcp.compliance","maxLevel":"read","title":"Compliance exports"},{"description":"Agent card, task contracts, and mandate verification (read); mandate import (write).","id":"mcp.a2a","maxLevel":"write","title":"A2A and mandates"},{"description":"Settlement, protocol, and agent receipt retrieval plus verification.","id":"mcp.receipts","maxLevel":"read","title":"Receipts"},{"description":"Local evidence validation (read); Harbor completion evidence submission (write).","id":"mcp.evidence","maxLevel":"write","title":"Completion evidence"},{"description":"Intent creation, capability verification, and agent spend authorization.","id":"mcp.spend","maxLevel":"write","title":"Spend authorization"},{"description":"Funding intents and confirming settlement. Never included in a preset; must be chosen explicitly.","id":"mcp.settlement","maxLevel":"write","title":"Settlement (live money)"},{"description":"Sandbox guardrail bootstrap and sandbox guardrail evidence.","id":"mcp.sandbox","maxLevel":"write","title":"Sandbox guardrails"}],"version":1},"startCommands":{"npm":["npm install @paybond/kit","npx -p @paybond/kit paybond login","npx -y -p @paybond/kit paybond-mcp-server"],"pypi":["pip install \"paybond-kit[mcp]\"","paybond-kit-login","paybond-mcp-server"]}}}}},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-08-02T04:18:19.402268Z","publishedAt":"2026-08-02T04:18:19.402268Z","updatedAt":"2026-08-02T04:18:19.402268Z","isLatest":true}}}