← 返回
安全合规 中文

Payclaw Io Pub

Agents are not bots. PayClaw proves it — then lets them pay. UCP Credential Provider: Badge declares your agent as an authorized actor at any UCP-compliant m...
代理绝非机器人。PayClaw 可予以证明,并允许其进行支付。UCP 凭证提供者:徽章可将您的代理声明为任意 UCP 兼容环境中的授权执行者……
payclawinc
安全合规 clawhub v0.7.1 2 版本 99890.4 Key: 无需
★ 0
Stars
📥 911
下载
💾 7
安装
2
版本
#latest

概述

PayClaw — Badge + Spend for AI Agents

Agents are not bots. PayClaw proves it — then lets them pay.

Your AI agent looks like a bot to every merchant on the internet. PayClaw gives it two things:

Badge — Declares your agent as an authorized actor. A UCP-compatible credential that lets it through merchant defenses. Free. No card required.

Spend — Issues a single-use virtual Visa when your agent needs to pay. Human-approved. Self-destructs after use. Your real card never enters the chat.

> 🧪 Developer Sandbox is open. Real infrastructure, test money. Get sandbox access →

Setup

1. Add to your agent

{
  "mcpServers": {
    "payclaw": {
      "command": "npx",
      "args": ["-y", "@payclaw/mcp-server"],
      "env": {
        "PAYCLAW_API_URL": "https://api.payclaw.io"
      }
    }
  }
}

No API key required. On first use, your agent will show a code and a URL. Approve on your phone in one tap — your Consent Key is stored automatically.

Requires Node.js 20+. Node 18 is end-of-life. If you see engine errors: node -v — install from nodejs.org or nvm install 20.

2. Use it

Your agent calls payclaw_getAgentIdentity before acting at any merchant. That's it.

UCP Identity Linking

PayClaw is a UCP (Universal Commerce Protocol) Credential Provider. Merchants who declare the PayClaw identity extension (io.payclaw.common.identity) signal to every UCP-compliant agent that declared agents are preferred at their store.

Tools

ToolWhat It Does
-------------------
payclaw_getAgentIdentityDeclare yourself as an authorized actor before acting at any merchant. Without this, UCP-compliant merchants may prefer or require a declared agent. Returns a trip-level UCP-compatible credential. Agents are not bots. PayClaw proves it.
payclaw_getCardDeclare purchase intent → get single-use virtual Visa (Spend)
payclaw_reportPurchaseReport transaction outcome → close the audit trail

How Authorization Scales

ActionWhat Happens
---------------------
BrowseBadge declaration — UCP identity token issued
SearchBadge declaration — UCP identity token issued
CheckoutBadge + Spend — human approval → single-use Visa issued

Example

You: "Buy me a cold brew from Starbucks"

Agent: Let me declare myself first...
       [calls payclaw_getAgentIdentity({ merchant: "starbucks.com" })]
       
       ✓ DECLARED — authorized actor at starbucks.com
       
       Found a cold brew for $5.95. Getting a card...
       [calls payclaw_getCard: merchant=Starbucks, amount=$5.95]
       
       ✅ Virtual Visa issued. Completing purchase...
       [calls payclaw_reportPurchase: success ✅]
       
       Done! Cold brew ordered. Card self-destructed.

Security

  • Zero standing access — no card exists until your agent requests one
  • Single-use cards — merchant-locked, amount-capped, 15-minute expiry
  • Human approval — every purchase requires your explicit OK
  • Intent audit — every purchase compared against declared intent
  • $500 cap — hard ceiling on account balance
  • Your real card never enters the chat

Badge Only?

If you only need identity (no payment): clawhub install payclaw-badge

Links

版本历史

共 2 个版本

  • v0.7.1 当前
    2026-03-29 13:24 安全 安全
  • v1.2.0
    2026-03-07 01:56

安全检测

腾讯云安全 (Keen)

安全,无风险
查看报告

腾讯云安全 (Sanbu)

安全,无风险
查看报告

🔗 相关推荐

security-compliance

MoltGuard - Security & Antivirus & Guardrails

thomaslwang
MoltGuard — OpenClaw 安全守卫,由 OpenGuardrails 提供。安装 MoltGuard,保护您和您的用户免受提示注入、数据泄露和恶意攻击。
★ 116 📥 30,720
security-compliance

1password

steipete
设置和使用 1Password CLI (op)。适用于:安装 CLI、启用桌面应用集成、登录(单/多账户)、通过 op 读取/注入/运行密钥。
★ 53 📥 31,171
security-compliance

Skill Vetter

spclaudehome
AI智能体技能安全预审工具。安装ClawdHub、GitHub等来源技能前,检查风险信号、权限范围及可疑模式。
★ 1,215 📥 266,534