Server data from the Official MCP Registry
Agents are not bots. Prove it. MCP-native identity declaration for authorized agents.
Agents are not bots. Prove it. MCP-native identity declaration for authorized agents.
Set these up before or after installing:
Environment variable: PAYCLAW_API_KEY
Environment variable: PAYCLAW_API_URL
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-payclaw-badge": {
"env": {
"PAYCLAW_API_KEY": "your-payclaw-api-key-here",
"PAYCLAW_API_URL": "your-payclaw-api-url-here"
},
"args": [
"-y",
"@payclaw/badge"
],
"command": "npx"
}
}
}The server has appropriate authentication and permissions for its purpose but has concerning security practices including auto-execution of remote packages, sending agent conversations to external APIs, and potential for exposing sensitive merchant interactions. While legitimate for its identity verification use case, users should be aware of the data sharing implications. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.
Scanned 7 files · 8 findings
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Be the first to review this server!