360 Secure SkillHub
360 安全技能中心

Payclaw Badge Pub

这是一个MCP凭证提供器,通过PayClaw API让AI代理在访问UCP合规商户前声明为经授权的行为者,返回UCP兼容凭证,并上报徽章出示与验证结果;需PAYCLAW_API_KEY和Node.js 20+,不发行卡、不移动资金。

payclawinc
payclawinc
热度 55.82
最近更新 2026-05-11 17:27:50
分类:安全依赖:MCP 服务 / 第三方 API应用场景:购物 / API 集成 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add payclaw-badge
Metadata
name
payclaw-badge
description
Agents are not bots. Prove it. UCP Credential Provider: declare your agent as an authorized actor before shopping at any UCP-compliant merchant. Requires PAYCLAW_API_KEY (get one at payclaw.io/dashboard/badge). Free forever.
metadata
{"openclaw":{"emoji":"🛡️","requires":{"bins":["npx"]},"mcp":{"name":"payclaw-badge","command":"npx","args":["-y","@payclaw/badge"],"env":{"PAYCLAW_API_URL":"https://api.payclaw.io"}}}}

Badge by PayClaw

Agents are not bots. Prove it before you shop.

Your AI agent looks like a bot to every merchant on the internet. Badge gives it a way to declare what it is: an authorized actor, shopping on behalf of a real human, with explicit consent.

One MCP tool call. Your agent declares itself. UCP-compliant merchants let it through.

Setup

Add to your MCP client config:

{
  "mcpServers": {
    "payclaw-badge": {
      "command": "npx",
      "args": ["-y", "@payclaw/badge"],
      "env": {
        "PAYCLAW_API_KEY": "your_key_from_payclaw.io",
        "PAYCLAW_API_URL": "https://api.payclaw.io"
      }
    }
  }
}

Credentials: PAYCLAW_API_KEY required. Get your key at payclaw.io/dashboard/badge. For zero-friction install (no key, device auth), use payclaw-io instead.

Requires Node.js 20+. Node 18 is end-of-life. If you see engine errors: node -v — install from nodejs.org or nvm install 20.

UCP Identity Linking

Badge is a UCP (Universal Commerce Protocol) Credential Provider. Merchants who declare io.payclaw.common.identity in their UCP manifest signal that declared agents are preferred at their store.

Tools

Tool Description
payclaw_getAgentIdentity Declare yourself as an authorized actor before acting at any merchant. Without this, UCP-compliant merchants may prefer or require a declared agent. Returns a UCP-compatible credential.
payclaw_reportBadgePresented Signal Badge presentation to a merchant

How It Works

  1. Agent calls payclaw_getAgentIdentity({ merchant: "starbucks.com" })
  2. PayClaw issues a UCP-compatible verification token
  3. Agent presents disclosure to merchants
  4. PayClaw checks outcome (accepted/denied/inconclusive)
  5. Verified Trips count goes up

No card issued. No money moves. Badge is identity only. Free forever.

Security & Privacy

For payment too, use payclaw-io — Badge + Spend.

Links