"A sandbox environment to run Python code and install dependencies" matching MCP servers:

Your AI agent can't touch Stripe, Gmail, Slack or more, without your tap. mild.run intercepts every sensitive action and sends you a notification to approve or block — before anything executes. Agent never holds credentials.

Paybond Kit for Python is the PyPI package for tenant-bound Paybond integrations and delegated agent spend controls. It opens hosted Gateway sessions, verifies capability tokens, authorizes tool-call spend, signs intent and evidence payloads, uses Stripe Connect, Stripe ACH Direct Debit, or x402 / USDC-on-Base settlement rails, reads tenant-scoped Signal, fraud, ledger, protocol, and A2A data, and

Enables AI agents to scan payment endpoints for safety, returning a letter grade (A–F) and verdict before authorizing payments.

Credit and payments for AI agent developers — over MCP. No crypto required

Project Point One Percent - Agent Pay \[pop-pay] is a payment guardrail and one-time flow protocol specifically designed for Agentic AI (e.g., Claude Code, OpenClaw). It enables agents to handle financial transactions safely without risking unlimited exposure of human-controlled credit cards.

Automates Spectrum/Charter ISP account management tasks such as viewing account overview, paying bills, checking outages, and scheduling technician visits via browser automation.

An MCP server that enables AI assistants to automate Cash App payments, balance checks, and transaction management via browser automation.

Deprecated browser-automation MCP server for Venmo, PayPal, and Cash App (withdrawn due to ToS violations, account suspension risk, and credential exposure). Do not use.

Enables AI agents to manage spa/wellness operations via Zenoti API, including appointments, guests, services, and billing.

Create German invoices (§14 UStG) via Claude or any MCP-compatible AI by describing the invoice in natural language.

Service name: Scrape Agent Service base URL: https://scrapeagent.xyz Website URL: https://scrapeagent.xyz Email: your email Category: Data Description: Pay-per-use web scraping API built on x402. Extract clean text, links or HTML from any URL for $0.01 USDC on Base. No API key, no subscription needed. Perfect for AI agents that need web data on demand. Endpoint paths: /api/scrape/x402

Enables AI agents to pay with crypto (XSGD) via EIP-3009 and receive single-use virtual Visa cards from the StraitsX sandbox or production environment.

Enables AI assistants to manage USAA bank and insurance accounts — check balances, view transactions, transfer funds, pay bills, and more — through the Model Context Protocol.

MCP server for the Gravv payments API that lets AI assistants onboard customers, run KYC, open accounts, move money, issue cards, and exchange currency, with built-in documentation search and safety confirmations for money-moving operations.

Enables AI agents to gate real-world side effects through a durable decision record, ensuring at-most-once initiation, deduplication, budget enforcement, and auditable outcomes across retries and failures.

Enables AI coding assistants to log billable hours into the Keeping time-tracking service via MCP tools, with dry-run protection for all write operations.

Exactly-once execution for irreversible agent actions: an agent claims the right to run an effect, and a retry after a lost response returns the sealed result instead of charging again. 12 tools over stdio, including a gateway mode where the agent holds a single-use ticket and never the provider key.

Enables MCP hosts like Claude, VS Code, Cursor, and others to discover payment methods, create payment links, verify payments, inspect invoices, and manage refunds through focused tools, with a guided safe payment workflow and a restricted generic API escape hatch.

Your agent takes a business live on payments: go_live creates a real merchant account (sandbox + production) the same day; create_checkout returns a payable link. Payments for AI builders, 3.9% flat.

Enables agents to request payment authorization against signed human mandates, enforcing policy-as-code limits and returning a decision (authorize, challenge, or deny) without moving funds.