Back to Browse

Centralized MCP Server

Developer ToolsUse Caution2.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Centralized API gateway routing to MCP servers with per-call billing

About

Centralized API gateway routing to MCP servers with per-call billing

Security Report

2.2
Use Caution2.2Critical Risk

The AgentPay Gateway is a legitimate MCP proxy server with reasonable architecture, but has significant security concerns that users should be aware of. Critical issues include: (1) missing authentication/authorization validation on the HTTP endpoint itself — any client can call tools if they know an API key format, (2) hardcoded backend URLs and lack of TLS verification, (3) overly broad environment variable access and unvalidated Stripe configuration, (4) insufficient input validation on tool arguments before proxying, and (5) a fundamental architectural flaw where credit deduction happens before backend execution, creating a race condition. The code quality is reasonable but these authentication and validation gaps create real abuse vectors. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 3 high severity).

5 files analyzed · 21 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

database

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-rumblingb-agentpay-gateway-mcp": {
      "args": [
        "-y",
        "github:Rumblingb/agentpay-gateway-mcp"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!