Mcp Ap2

@codespar/mcp-ap2

Deprecated: no live endpoint. Measured on 2026-09-27: ap2.googleapis.com answers every path with Google's generic Error 404 (Not Found) page, and sandbox.ap2.googleapis.com (used with AP2_SANDBOX=true) fails the TLS handshake, because the certificate served there covers *.googleapis.com and not the extra label. AP2 is an open specification, not an API Google hosts. No tool in this server reaches a service. The package is deprecated on npm and stays in this repository for reference only. If you have a working endpoint, point the server at it with AP2_BASE_URL. To bring the package back, open an issue in mcp-dev-latam with the provider's documented base URL.

Alpha release — published under the alpha npm dist-tag. Pin exact versions during 0.x.x-alpha. Install with npm install <pkg>@alpha.

MCP server for AP2 — Google's Agent-to-Agent Payment Protocol (authorization, audit, and trust for agentic payments)

[npm] [License: MIT]

What is AP2?

AP2 (Agent-to-Agent Payment Protocol) is Google's open framework for authorization, audit, and trust in agentic payments. It answers the critical questions: Who authorized this payment? What limits apply? What's the full audit trail?

The specification is published at ap2-protocol.org.

Quick Start

Claude Desktop

Add to ~/.config/claude/claude_desktop_config.json:

{  "mcpServers": {    "ap2": {      "command": "npx",      "args": ["-y", "@codespar/mcp-ap2"],      "env": {        "AP2_API_KEY": "your-key",        "AP2_AGENT_ID": "your-agent-id"      }    }  }}

Claude Code

claude mcp add ap2 -- npx @codespar/mcp-ap2

Cursor / VS Code

Add to .cursor/mcp.json or .vscode/mcp.json:

{  "servers": {    "ap2": {      "command": "npx",      "args": ["-y", "@codespar/mcp-ap2"],      "env": {        "AP2_API_KEY": "your-key",        "AP2_AGENT_ID": "your-agent-id"      }    }  }}

Tools (22)

Authentication

The server sends AP2_API_KEY as an Authorization: Bearer header and AP2_AGENT_ID as an X-Agent-Id header on every request (src/index.ts:69-73).

There is no portal issuing those credentials. The developer portal this README used to link, developers.google.com/ap2, answers HTTP 404, as does the ap2-spec repository it pointed at. The published specification is at ap2-protocol.org.

Environment Variables

Use Cases

• Authorized agent purchases — Agent requests spend authorization, gets approval with limits, then executes payment
• Multi-agent commerce — Agent A authorizes Agent B to make payments on its behalf with scoped limits
• Compliance & audit — Full audit trail of every authorization, approval, execution, and settlement
• Cross-rail payments — AP2 bridges card payments, bank transfers, wallets, and x402 micropayments

Roadmap

v0.2 (planned)

• create_policy — Define reusable authorization policies
• delegate_authority — Allow agent-to-agent authorization delegation
• get_spend_report — Get spend analytics and reports
• OAuth 2.0 authentication flow

v0.3 (planned)

• Webhook support for real-time authorization events
• Multi-currency support with automatic FX
• Integration with x402 as payment method

Want to contribute? Open a PR or request a tool.

Links

• AP2 specification
• MCP Dev LATAM
• Landing Page

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT