PayCheck

io.github.toolweather由 GitHub 账号 toolweather 发布v1.0.0更新于 Oct 24, 2026

Score merchant domain, https URL, or 0x wallet trust before an agent pays. Does not send payments.

发布方自己的服务:check.tattoo: tattoo size and placement guide

已验证Streamable HTTP可网页运行金融安全与监控

概览

AI 生成的概览

在 AI 代理付款前,对商户域名、https URL 或 0x 钱包进行收款方信任评分。

可以做什么
PayCheck 通过流式 HTTP 提供三个工具。check_merchant 对域名、https URL 或 0x 钱包地址返回确定性的信任评分和建议操作;get_quota 显示当天剩余免费检查次数;get_api_key 生成免费的 pc_live_ 密钥。评分从 100 开始,根据允许列表成员资格、来自公开 RDAP 的域名年龄以及诈骗或仿冒模式扣分。该服务器不发送付款、不签署交易,也不持有钱包密钥。
适用场景
当 AI 代理即将向商户付款、处理发票或转账,需要检查收款方信任度时适用。每次付款前对每个收款方调用一次 check_merchant。它不是支出限额工具,也无法推翻 block 判定。
运行要求
远程流式 HTTP 端点;无需本地安装或软件包。可选的 Authorization Bearer pc_live_ 密钥可将免费额度从每天 100 次提高到 1,000 次;密钥通过 POST /v1/keys 或 get_api_key 工具生成。超出额度的检查通过 x402 在 Base 上每次花费 0.001 USDC。需要访问该端点和公开 RDAP 的网络连接。
安装前请注意
Authorization 头携带机密 pc_live_ 密钥;密钥生成上限为每个 IP 每个 UTC 日 10 个,且仅存储 SHA-256 哈希。超出额度的检查会通过 x402 在 Base 上花费 0.001 USDC,因此已配置的钱包可能被扣款。check_merchant 可能写入检查历史。该服务器不发送付款也不持有密钥,但同样无法推翻 block 判定。

安装

在 SourceWeft 中

  1. 打开 控制台中的 PayCheck,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.github.toolweather%2Fpaycheck/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "paycheck": {
      "type": "http",
      "url": "https://paycheck.toolweather.workers.dev/mcp"
    }
  }
}

README

该仓库没有 README。

工具

3

check_merchant

Check merchant

Decide whether an autonomous agent should pay a merchant, host, or wallet. PayCheck returns a deterministic trust score for one target. It does not send money, does not sign transactions, and does not hold wallet keys. Use this immediately before a payment, a checkout redirect, or a transfer to a new 0x address. Pass the payee as a bare domain (api.openai.com), an https URL, or a 0x address with 40 hex characters. Do not use this tool to execute a payment. Do not use it to overturn a block. Do not call it again with a reworded category, purpose, or amount to fish for a better verdict: those fields are ignored and are not stored. Trusted is returned only for the published allowlist of known AI and developer APIs, served over https on port 443. A new or random domain is never trusted. A wallet is never trusted. Scoring v1 does not analyze on-chain history. If the URL contains an embedded 0x address, this scores the host only and will not return trusted; pass the bare address to score the wallet. Arguments: target (required string); amount_usd (optional number, ignored); category (optional string, ignored); api_key (optional pc_live_ key). You may also send Authorization: Bearer or X-API-Key. Omit the key for the anonymous allowance. Returns: score (integer 0-100), verdict (trusted | unknown | suspicious | block), reasons[], recommended_action (proceed | verify_out_of_band | require_human_review | do_not_pay), signals (host, allowlist, domain age, wallet flags, reason_codes; chain_analysis is always not_in_v1), checked_at (ISO-8601), policy_version ("1"). Free tier: 100 checks per UTC day anonymous, 1,000 per UTC day with a free pc_live_ key or a Toolweather bundle client whose x-tw-bundle-client is hex. A bundle client prefixed anon: stays at 100 per day. The same target for the same caller is idempotent for 60 seconds and does not consume a second check. Over the daily cap, each extra check is $0.001 USDC on Base (eip155:8453) via x402 and the PayAI facilitator.

输入参数target必填api_keycategoryamount_usd

get_quota

Get quota

Show how many free PayCheck merchant checks the current caller has left for the current UTC day. Use this before a batch of check_merchant calls, or after an HTTP 402, to read the remaining free allowance and when it resets. Do not use this to score a payee. It accepts no target and it does not consume a check. Do not pay x402 for this tool. It is always free. Identity matches check_merchant. Anonymous IP: 100/day. pc_live_ api_key (api_key argument, Authorization: Bearer, or X-API-Key): 1,000/day. Toolweather bundle headers x-tw-bundle-secret and x-tw-bundle-client: hex client 1,000/day, anon: prefix 100/day, any other client id 100/day. Returns: subject_kind, limit, used, remaining, resets_at (next UTC midnight, ISO-8601), billed (always false), policy_version. No x402 charge.

输入参数api_key

get_api_key

Get API key

Mint one free PayCheck API key. The key looks like pc_live_ followed by hex and raises the merchant-check allowance from 100 to 1,000 per UTC day. Use this once when you set up a long-running agent, then store the key and pass it on later check_merchant or get_quota calls. The plaintext key is returned only in this response. PayCheck stores a SHA-256 hash. Do not call this every turn. Do not call it to score a payee or to dodge a block verdict. Minting is free and is not an x402 check, and it is limited to 10 new keys per caller IP per UTC day. A new key does not change any merchant score. Checks above the free daily cap still cost $0.001 USDC on Base via x402. Returns: api_key, token_type (bearer), daily_limit (1000), prefix, note.

无需输入参数。

版本历史

1
  1. v1.0.0最新Oct 16, 2026

评分

已满足适用检查项的 75%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分

    请声明包含 README 的 GitHub 仓库,或在 OAuth 受保护资源元数据中提供 resource_documentation。

  • 许可证10 分

    请在仓库或注册中心条目中声明许可证。

其他 Check 集成