An MCP server for agent payments: propose, never drain

The Agentgates MCP server pairs an agent with a wallet under owner-approved grants. Every money-moving action is propose-only: the agent proposes, the wallet owner approves. OAuth 2.0 with PKCE and dynamic client registration.

What the server does

MCP clients — Claude, ChatGPT, IDE agents, anything speaking the Model Context Protocol — connect at agentgates.ai/mcp and pair with an Agentgates wallet. The pairing is scoped by grants the wallet owner approves; the agent works inside them.

Money never moves on the agent’s word alone. Every transfer is propose-only: the agent stages it, the owner approves it in their own wallet. An agent with a paired wallet can read balances, quote prices, and stage spends — it cannot drain anything.

Connecting

Auth is standard OAuth 2.0 with PKCE and dynamic client registration — no pre-shared key. Machine-readable metadata sits at /.well-known/oauth-authorization-server and /.well-known/oauth-protected-resource; the prose contract is /auth.md. A bare GET to /mcp answers 401 with resource_metadata pointing at the same documents — that 401 is the front door, not a failure.

Where it is listed

The server is published in the official MCP registry as ai.agentgates/mcp — searchable at registry.modelcontextprotocol.io and mirrored by the aggregators that crawl it. The full discovery surface (server card, A2A card, api-catalog, skills) lives under /.well-known/ on this origin.

FAQ

Can the agent move money on its own?

No. Every money-moving action is propose-only — the agent proposes, the wallet owner approves in their own wallet.

How does an MCP client authenticate?

OAuth 2.0 with PKCE and dynamic client registration. Metadata at /.well-known/oauth-authorization-server; prose at /auth.md.

Where do I find the server?

agentgates.ai/mcp on this origin, or search "agentgates" in the official MCP registry (ai.agentgates/mcp).

Do the compute and inference lanes need MCP?

No — they sell over plain HTTP with x402 and need no pairing at all. The MCP server is for wallet-holding workflows.