Tools show up when the registry metadata or the repository README lists them. GitHub enrichment fills this in when a token is configured.
About
The runtime security layer for AI agent commerce. Drop-in CLI + MCP server — blocks hallucinated purchases and keeps card credentials out of agent context. It only takes 0.1% of hallucination to drain 100% of your wallet.
FAQ
What is pop-pay?
Runtime security for AI agent commerce. CLI + MCP server blocks hallucinated purchases.
How do I install pop-pay?
Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.
Is pop-pay official?
No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.
How is the trust score calculated?
This listing scores 25 (Limited). The formula is published on the methodology page.