Packageactivev0.2.19
io.github.xona-labs/xpay
Agentic commerce for AI agents: multi-network wallet, x402 payments, AgenC hires, 20k+ services
xona-labs/xpay WebsiteUpdated Jul 12, 2026 No blockers found
assessed on 3 of 4 dimensions
MaintenanceActively maintained — last activity 0 days ago.GitHub · as of Jul 12, 2026
PassProvenanceOrigin linked to a public source repository.Official MCP Registry · as of Jul 12, 2026
PassSupply chainNo known vulnerabilities in scanned package dependencies (OSV).OSV (Google Open Source Vulnerabilities) · as of Jul 12, 2026
PassManifest integrityManifest capture requires running the package (sandbox phase).
PendingBehavioral trustNo live endpoint to observe.
Not applicable
Connect
npm package · v0.2.19 · stdio
XPAY_PROFILE
Wallet profile to load or create (default: active profile, else "default")XPAY_PASSPHRASEsecret
Encrypts the auto-generated wallet at rest; also unlocks an existing encrypted profileXPAY_HOME
Override the ~/.xpay/ data directoryXPAY_NO_AUTO_WALLET
Set to error instead of auto-generating a wallet when none is configuredXPAY_SOLANA_SECRETsecret
Use an existing Solana secret key (base58) instead of the generated walletXPAY_EVM_KEYsecret
Use an existing EVM private key instead of the generated walletXPAY_EVM_NETWORK
EVM network for XPAY_EVM_KEY (e.g. base, base-sepolia)
Provenance
- Official MCP Registry · as of Jul 12, 2026 · registry-tos
- OSV (Google Open Source Vulnerabilities) · as of Jul 12, 2026 · CC-BY-4.0
- GitHub · as of Jul 12, 2026 · github-tos
Every verdict is attributable to its sources and recomputed from our own landed copy, never read live on this page.