# x402_pay

Make an HTTP request to a URL, automatically paying any x402 Payment Required (402) response.

Agent View of the PolicyLayer registry record for `x402_pay`. HTML page: https://policylayer.com/tools/pay-skill-mcp/x402-pay

## Facts

- Tool: `x402_pay`
- Server: Remit Md MCP Server (`pay-skill/mcp`) — https://policylayer.com/tools/pay-skill-mcp.md
- Homepage: https://github.com/pay-skill/mcp
- Risk category: Financial (Critical risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Approval-gated

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "x402_pay",
    "arguments": {}
  }
}
```

## Why x402_pay is rated Critical

This tool directly moves money in response to HTTP 402 status codes. An AI agent using this could be tricked into making unintended payments by requesting URLs designed to return 402 responses. The automatic payment mechanism with potentially unbounded transaction amounts makes this critical severity. Financial transactions are the most severe risk category regardless of other capabilities present.

From the tool's own definition: "Tool description explicitly states 'automatically paying any x402 Payment Required (402) response' - this commits financial transactions. Server description confirms 'financial transactions such as direct payments' and 'fund streaming' are core functionality."

## Use case

AI agents use x402_pay to commit financial operations through Remit Md MCP Server, usually the final step of a payment, billing, or trading workflow. A call moves real money.

## Recommended policy (PolicyLayer)

Verdict: **Approval-gated**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Remit Md MCP Server:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "x402_pay": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}
```

## Other tools on Remit Md MCP Server (27)

- `delete_webhook` — Destructive — https://policylayer.com/tools/pay-skill-mcp/delete-webhook.md
- `claim_start` — Execute — https://policylayer.com/tools/pay-skill-mcp/claim-start.md
- `award_bounty` — Financial — https://policylayer.com/tools/pay-skill-mcp/award-bounty.md
- `cancel_escrow` — Financial — https://policylayer.com/tools/pay-skill-mcp/cancel-escrow.md
- `charge_tab` — Financial — https://policylayer.com/tools/pay-skill-mcp/charge-tab.md
- `close_stream` — Financial — https://policylayer.com/tools/pay-skill-mcp/close-stream.md
- `close_tab` — Financial — https://policylayer.com/tools/pay-skill-mcp/close-tab.md
- `create_escrow` — Financial — https://policylayer.com/tools/pay-skill-mcp/create-escrow.md
- `create_fund_link` — Financial — https://policylayer.com/tools/pay-skill-mcp/create-fund-link.md
- `create_withdraw_link` — Financial — https://policylayer.com/tools/pay-skill-mcp/create-withdraw-link.md
- `forfeit_deposit` — Financial — https://policylayer.com/tools/pay-skill-mcp/forfeit-deposit.md
- `open_stream` — Financial — https://policylayer.com/tools/pay-skill-mcp/open-stream.md
- `open_tab` — Financial — https://policylayer.com/tools/pay-skill-mcp/open-tab.md
- `pay_direct` — Financial — https://policylayer.com/tools/pay-skill-mcp/pay-direct.md
- `place_deposit` — Financial — https://policylayer.com/tools/pay-skill-mcp/place-deposit.md
- `post_bounty` — Financial — https://policylayer.com/tools/pay-skill-mcp/post-bounty.md
- `reclaim_bounty` — Financial — https://policylayer.com/tools/pay-skill-mcp/reclaim-bounty.md
- `release_escrow` — Financial — https://policylayer.com/tools/pay-skill-mcp/release-escrow.md
- `return_deposit` — Financial — https://policylayer.com/tools/pay-skill-mcp/return-deposit.md
- `submit_bounty` — Financial — https://policylayer.com/tools/pay-skill-mcp/submit-bounty.md
- `withdraw_stream` — Financial — https://policylayer.com/tools/pay-skill-mcp/withdraw-stream.md
- `x402_config` — Financial — https://policylayer.com/tools/pay-skill-mcp/x402-config.md
- `check_balance` — Read — https://policylayer.com/tools/pay-skill-mcp/check-balance.md
- `get_status` — Read — https://policylayer.com/tools/pay-skill-mcp/get-status.md
- `list_webhooks` — Read — https://policylayer.com/tools/pay-skill-mcp/list-webhooks.md
- `register_webhook` — Write — https://policylayer.com/tools/pay-skill-mcp/register-webhook.md
- `update_webhook` — Write — https://policylayer.com/tools/pay-skill-mcp/update-webhook.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=pay-skill-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/pay-skill-mcp