{"slug":"paybox","name":"paybox","displayName":"paybox","sourcePath":"skills/paybox","sourceLabel":"skills","category":null,"upstreamUrl":null,"hostedSkillUrl":null,"hostedReadmeUrl":null,"version":"","description":"MoonPay PayBox payment vault for AI agents — official MCP at https://api.paybox.sh/mcp, OAuth 2.1, scoped credentials, and Cheshire mcp-server proxy tools (get_paybox_*).","homepage":null,"author":null,"license":null,"tags":[],"payment":null,"readme":"","skillMd":"# PayBox\n\n**Live catalog:** https://cheshireterminal.ai/skills/paybox  \n**API:** https://cheshireterminal.ai/api/skills/paybox\n\n[PayBox](https://paybox.sh/) is MoonPay's non-custodial **credential vault for agents**. Agents never receive raw card PANs, wallet private keys, or seed phrases — only scoped outputs (payment tokens, signatures, secrets under grant rules).\n\nOfficial docs: https://docs.paybox.sh\n\n## Official MCP connector (preferred)\n\n```text\nhttps://api.paybox.sh/mcp\n```\n\nStreamable HTTP MCP with **OAuth 2.1 + PKCE**. Add as a custom connector (Claude, Grok, Cursor, ChatGPT Developer mode), sign in, and approve a scoped grant.\n\n### ChatGPT\n\n1. Settings → Developer mode (web)\n2. Plugins → New Plugin → Server URL\n3. Paste `https://api.paybox.sh/mcp`\n4. Authentication: **OAuth** (not No Auth)\n5. Connect and complete sign-in\n\n### Claude Code / Codex / Cursor\n\n```bash\nclaude mcp add paybox --transport http https://api.paybox.sh/mcp\n# or\ncodex mcp add paybox --url https://api.paybox.sh/mcp\n```\n\n### OAuth discovery (no auth)\n\n```text\nGET https://api.paybox.sh/.well-known/oauth-protected-resource\nGET https://api.paybox.sh/.well-known/oauth-authorization-server\nGET https://api.paybox.sh/health   → {\"ok\":true}\n```\n\nScopes: `mcp`, optional `offline_access` (refresh token).\n\n## Core official tools (after OAuth)\n\nDiscover at runtime via `tools/list`. Documented core surface includes:\n\n- `list_credentials` — granted wallets / cards / secrets\n- `request_payment` / `claim_payment_credentials` — one-time virtual cards\n- `request_wallet_sign` / `request_swap` / `get_portfolio`\n- `get_buy_link` — signed MoonPay fiat checkout into a wallet credential\n- `discover_services` / `pay_x402` / `use_service` — x402 paid APIs\n- `get_request` / `list_requests` — poll pending approvals\n- `request_account_change` — ask user to widen grants\n- Plugin tools (when enabled in the PayBox app)\n\nWrite tools return a status envelope (`success`, `pending_approval`, `pending_signature`, …). **Never re-call a write tool to finish it** — poll `get_request` with `request_id`.\n\n## Cheshire mcp-server proxy\n\nMonorepo package `mcp-server/` proxies PayBox without rehosting:\n\n| Tool | Notes |\n|------|--------|\n| `get_paybox_connect` | Official URL, platforms, concepts |\n| `set_paybox_session` | Store OAuth access token (masked in responses) |\n| `clear_paybox_session` | Drop session token |\n| `get_paybox_health` | Live API health (no auth) |\n| `get_paybox_oauth_metadata` | Discovery docs |\n| `list_paybox_mcp_tools` | Official `tools/list` |\n| `call_paybox_mcp_tool` | Official `tools/call`; mutating tools need `confirm=true` |\n\nHost env (optional single-tenant): `PAYBOX_ACCESS_TOKEN` or `PAYBOX_BEARER`.\n\n**Do not** paste Cheshire `MCP_HTTP_AUTH_TOKEN` as a PayBox OAuth JWT.\n\n## Security rules\n\n- One agent client per agent; revoke from the PayBox dashboard / kill switch.\n- Start with narrow grants (one wallet, low spend, always-approve).\n- Secrets returned raw only when explicitly granted — prefer mediated tokens when available.\n- PayBox does not custody spend rails: money moves wallet↔merchant; PayBox is the control plane.\n\n## Related\n\n- `moonpay` — pack entry + REST tools\n- `moonpay-auth` / `moonpay-mcp` / `moonpay-x402` / `moonpay-buy-crypto`\n- `moonpay-skills-index`","examples":[],"meta":{}}