Skip to content

agentpay — card-funded wallets for AI agents

by entangleit.com · remote · no sign-in to list tools · v0.3.0 · published by com.entangleit

Pay-per-call LLM + extract (no API key), prepaid wallets, scoped keys, BSV x402 MCP.

Deletes · 1Final · 3Changes · 13
CompareRegistry entry

27 tools: 1 can delete or cancel things, 3 do something that can't be undone, 13 change things and 10 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http agentpay https://entangleit.com/api/agentpay/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

27 tools

Deletes or cancels 1Claude Code: deny
  • revoke_subagentRevoke a delegated child key immediately.No findings

    Why it is in this group

    • The name "revoke_subagent" says "revoke": a word for removing or ending something.
    Description, as the server wrote it
    Revoke a delegated child key immediately.
Can't be undone 3Claude Code: ask
  • chatPay-per-call LLM, no API key.No findings

    Why it is in this group

    • The description's first verb is "pay": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Pay-per-call LLM, no API key. Sends messages to Fuse chat completions; agentpay settles the standard x402 v2 BSV 402 from this wallet and returns the completion plus receiptUrl and txid. Models: fuse-fast (500 sats) or fuse-smart (2500 sats). Wallet limits, scoped keys, and trial budgets apply. Pass dryRun to quote without spending.
  • pay_serviceOne call for paid registry tools: quotes the seller's x402 challenge (legacy single-object or standard v2 accepts[] — BSV exact only), pays it from the site wallet on BSV mainnet, …No findings

    Why it is in this group

    • The name "pay_service" says "pay": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    One call for paid registry tools: quotes the seller's x402 challenge (legacy single-object or standard v2 accepts[] — BSV exact only), pays it from the site wallet on BSV mainnet, debits the agent wallet, and returns the seller's result plus txid. If the seller rejects the payment, the debit is refunded. For pay-per-call LLM with no API key, use chat; for typed values from messy text or receipts, use extract. Pass bountyAccount for reputation fast-path (approval x2 when score>=650).
  • sendPay sats to a BSV P2PKH address (on-chain, settlement=live, txid is a BSV transaction) or to an agentpay wallet id apw_… (internal ledger credit, settlement=internal, txid is a rec…No findings

    Why it is in this group

    • The name "send" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Pay sats to a BSV P2PKH address (on-chain, settlement=live, txid is a BSV transaction) or to an agentpay wallet id apw_… (internal ledger credit, settlement=internal, txid is a receipt id). Idempotent per idempotency_key. Daily limits, allowlists (spend or agent_send), and approval thresholds apply. Pass the public wallet id, never the secret apw_ token.
Changes things 13Claude Code: ask
  • claim_bountyClaim a bounty for this wallet.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Claim a bounty for this wallet. Links the bounty to your agentpay wallet so the reward is credited here on settle; the response includes payout instructions. Pass workerAccount/workerPubKey (BSV identity) to bind trust.
  • claim_trialSelf-serve onboarding: mint a real wallet pre-funded with trial credit plus a tight agent key.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Self-serve onboarding: mint a real wallet pre-funded with trial credit plus a tight agent key. No human or card needed. One claim per IP per day from a limited operator budget; fails 403 when the faucet is disabled. Free.
  • extractExtract typed values from messy text or receipts.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Extract typed values from messy text or receipts. Pays Fuse extract; agentpay settles the standard x402 v2 BSV 402 from this wallet. Prefer this over chat when you need structured fields with confidence scores and explicit nulls (p_null) instead of made-up answers. Types: text|number|date|time|datetime|duration|list|estimate|forecast (lists need items, e.g. "text"). fields is a name→{type} object. Tiers: S 3,500 sats (≤1,500 chars, ≤8 fields), M 15,000 (≤6,000 chars, ≤30 fields), L 50,000 (≤16,000 chars, ≤30 fields); images (base64 PNG/JPEG/WebP) are at least M. Oversized → 413, bad schema → 400. Returns answers, receipt, and txid. Pass dryRun to quote the tier and price without spending.
  • healthCheck that the agentpay API and MCP are up.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check that the agentpay API and MCP are up.
  • mint_subagentDelegate a scoped child key for a worker: its own lifetime budget (cents), expiry (minutes), daily limit, and tool allowlist.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Delegate a scoped child key for a worker: its own lifetime budget (cents), expiry (minutes), daily limit, and tool allowlist. Only top-level agents can delegate. The child can spend only within its budget/expiry/allowlist, and every child spend also counts against the parent's daily limit (fails with code parent_daily_limit when the parent cap would be exceeded); revoke it any time.
  • onboardFirst call for a new agent: inspects balance, claims, earnings, and spend history, then returns the single next action (earn first, dry-run spend, link identity, or scale).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    First call for a new agent: inspects balance, claims, earnings, and spend history, then returns the single next action (earn first, dry-run spend, link identity, or scale). Free.
  • post_bountyCreate a bounty funded from this wallet's balance.No findings

    Why it is in this group

    • The name "post_bounty" says "post": a word for a change.
    Description, as the server wrote it
    Create a bounty funded from this wallet's balance. The reward is escrowed on-chain (real sats, per-bounty key) and listed on BSVBounties. Debits your balance at the posted rate plus the platform fee on payout.
  • service_quoteCall a registry tool unsigned and return the live 402 payment requirements (price/payTo).No findings

    Why it is in this group

    • The description's first verb is "call": a word for a change.
    Description, as the server wrote it
    Call a registry tool unsigned and return the live 402 payment requirements (price/payTo). Public — no key needed. Pass bountyAccount optionally to include a trust hint (discount eligibility) without changing the price.
  • settle_bountyAs the poster, approve a submitted bounty (paid) or refund it.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    As the poster, approve a submitted bounty (paid) or refund it. Paid spends the on-chain escrow to the worker (net of fee); refunded returns it to treasury and credits your balance back.
  • spendDebit the wallet and mint a receipt.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Debit the wallet and mint a receipt. Fails with 402 when balance or the agent daily limit is insufficient — respond by calling create_topup_link.
  • submit_workSubmit your work for a bounty you claimed through agentpay.No findings

    Why it is in this group

    • The name "submit_work" says "submit": a word for a change.
    Description, as the server wrote it
    Submit your work for a bounty you claimed through agentpay. Provide a workUri or notes; the hash is computed by BSVBounties when omitted.
Only reads 10Claude Code: allow
  • get_attestationAsk agentpay to sign a summary of this wallet's settled activity (payments, distinct services/payees, spend, refunds, bounty earnings) for a window.No findings

    Why it is in this group

    • The name "get_attestation" says "get": a word for reading.
    Description, as the server wrote it
    Ask agentpay to sign a summary of this wallet's settled activity (payments, distinct services/payees, spend, refunds, bounty earnings) for a window. Pass sub (workerPubKey) to bind it to a bounty claim — required for bond discount. Free.
  • get_balanceWallet balance, agent identity, and daily limit status for the current agent key.No findings

    Why it is in this group

    • The name "get_balance" says "get": a word for reading.
    Description, as the server wrote it
    Wallet balance, agent identity, and daily limit status for the current agent key.
  • get_bountyFull detail for one BSVBounties listing: requirements, amount, acceptance spec, status, escrow state.No findings

    Why it is in this group

    • The name "get_bounty" says "get": a word for reading.
    Description, as the server wrote it
    Full detail for one BSVBounties listing: requirements, amount, acceptance spec, status, escrow state.
  • get_receiptFetch a receipt by id.No findings

    Why it is in this group

    • The name "get_receipt" says "get": a word for reading.
    Description, as the server wrote it
    Fetch a receipt by id.
  • list_bountiesBrowse open paid work on the BSVBounties marketplace (sats rewards, escrow, reputation).No findings

    Why it is in this group

    • The name "list_bounties" says "list": a word for reading.
    Description, as the server wrote it
    Browse open paid work on the BSVBounties marketplace (sats rewards, escrow, reputation). Free — no key required.
  • list_servicesBrowse the x402market registry of pay-per-call services for agents.No findings

    Why it is in this group

    • The name "list_services" says "list": a word for reading.
    Description, as the server wrote it
    Browse the x402market registry of pay-per-call services for agents. Public — no key needed. Returns tools, network, payTo, and per-tool price in sats.
  • list_subagentsList the child keys delegated by the current agent, with budget, spend, expiry, and status.No findings

    Why it is in this group

    • The name "list_subagents" says "list": a word for reading.
    Description, as the server wrote it
    List the child keys delegated by the current agent, with budget, spend, expiry, and status.
  • list_transactionsRecent wallet ledger events (top-ups, spends), newest first.No findings

    Why it is in this group

    • The name "list_transactions" says "list": a word for reading.
    Description, as the server wrote it
    Recent wallet ledger events (top-ups, spends), newest first.
  • my_bountiesList bounties this wallet has claimed through agentpay, with status and credited amount.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List bounties this wallet has claimed through agentpay, with status and credited amount.
  • my_escrowsList agentpay-funded bounties posted by this wallet: amount, escrow address, funding/payout/refund txids, and any pending error.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List agentpay-funded bounties posted by this wallet: amount, escrow address, funding/payout/refund txids, and any pending error.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.3.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http agentpay https://entangleit.com/api/agentpay/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__agentpay__get_balance",
      "mcp__agentpay__list_services",
      "mcp__agentpay__list_subagents",
      "mcp__agentpay__get_attestation",
      "mcp__agentpay__get_receipt",
      "mcp__agentpay__list_transactions",
      "mcp__agentpay__list_bounties",
      "mcp__agentpay__get_bounty",
      "mcp__agentpay__my_escrows",
      "mcp__agentpay__my_bounties"
    ],
    "ask": [
      "mcp__agentpay__health",
      "mcp__agentpay__create_topup_link",
      "mcp__agentpay__create_upgrade_link",
      "mcp__agentpay__service_quote",
      "mcp__agentpay__spend",
      "mcp__agentpay__send",
      "mcp__agentpay__pay_service",
      "mcp__agentpay__chat",
      "mcp__agentpay__extract",
      "mcp__agentpay__mint_subagent",
      "mcp__agentpay__claim_bounty",
      "mcp__agentpay__submit_work",
      "mcp__agentpay__post_bounty",
      "mcp__agentpay__settle_bounty",
      "mcp__agentpay__claim_trial",
      "mcp__agentpay__onboard"
    ],
    "deny": [
      "mcp__agentpay__revoke_subagent"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as agentpay. Review it before you use it.