Back to Browse

Agentpay MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Ozerki pharmacy catalog, local pickup availability and tracked basket handoff for AI agents.

About

Ozerki pharmacy catalog, local pickup availability and tracked basket handoff for AI agents.

Remote endpoints: streamable-http: https://agentpay.shop/ap/mcp/ozerki

Security Report

4.2
Use Caution4.2High Risk

AgentPay MCP is a Russia-focused e-commerce agent with reasonable architecture but has several security concerns. The server relies on environment variables for API URL configuration with a hardcoded fallback to a Railway.app domain, lacks explicit authentication validation in the client code, and exposes financial transaction capabilities (purchases, top-ups, address storage) through an MCP interface designed for remote deployment. While the tool definitions show careful design patterns (HITL, limits enforcement, idempotency keys), the source code provided lacks critical security layers: no visible authentication middleware, no credential validation, and no rate limiting apparent in the catalog layer. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 2 high severity).

5 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Reviews

No reviews yet

Be the first to review this server!