AP2

@codespar/mcp-ap2 · v0.2.0-alpha.4

🌐 GlobalProtocolsAuth · OAuth2beta22 tools4 env varsprereleasedeprecated on npm

Google's Agent-to-Agent Payment Protocol. Authorization, audit, trust establishment between autonomous payment agents.

Deprecated on npm: No live endpoint: AP2 is a spec; ap2.googleapis.com serves no API. See https://github.com/codespar/mcp-dev-latam/tree/main/packages/payments/ap2

Get started · free View docs

MIT · deprecated on npm

Limitations

v0.2.0-alpha.4 is a prerelease, with 22 tools, and the command on this page installs it. The latest stable release is 0.1.2, with 13 tools.
The package manifest does not declare 3 of the 4 variables the code reads.
The npm package ships no server.json manifest.

DetailsSource on GitHub

Package: @codespar/mcp-ap2
Version: 0.2.0-alpha.4 · prerelease
npm dist-tag: latest
Category: Protocols
Auth: OAuth2
Country: 🌐 Global
License: MIT
Transport: stdio · streamable-http

npm GitHub Server catalog docs

Quickstart

Before you use it.

This package is deprecated on npm, so this page offers no install command or client config. No live endpoint: AP2 is a spec; ap2.googleapis.com serves no API. See https://github.com/codespar/mcp-dev-latam/tree/main/packages/payments/ap2

Hosted MCP Build your own server

Environment variables4 variables

AP2_AGENT_IDRead by the code; the package manifest does not declare it.

AP2_API_KEYAPI key for ap2requiredsecret

AP2_BASE_URLRead by the code; the package manifest does not declare it.

AP2_SANDBOXRead by the code; the package manifest does not declare it.

Names read from the package code (@codespar/mcp-ap2@0.2.0-alpha.4). Descriptions and flags come from its manifest. Self-hosted, you hold the credentials.

Tools

What your agent can call.

22 tools, as the package's tools/list returns them.

register_agent

Register an AI agent as a trusted payer in the AP2 network. Defines the agent's identity, capabilities, and spending limits.

get_agent

Get agent registration details, trust status, and current spend usage

list_agents

List registered agents with optional filters

revoke_agent

Revoke an agent's payment authorization. The agent will no longer be able to make or receive payments.

authorize_payment

Request payment authorization with scoped limits. Returns an authorization token that can be used to execute the payment.

get_authorization

Get authorization details including status, limits, and expiry

list_authorizations

List payment authorizations with optional filters

execute_payment

Execute an authorized payment. Requires a valid authorization token.

get_audit_trail

Get the complete audit trail for a transaction — every authorization, approval, execution, and settlement event

list_audit_events

List audit events across all transactions with filters

list_payment_methods

List payment methods offered by the AP2 partner network.

get_transaction

Get full transaction details including authorization, execution, and settlement status

Names and descriptions come from the package's tools/list (@codespar/mcp-ap2@0.2.0-alpha.4). A kind (read, write, delete) is shown only when the package annotates its tools or each tool was verified one by one; neither exists for this server yet.

Compatibility

MCP is a protocol. Any client that speaks it can mount this server.

The CodeSpar runtime does not route this server. Mount it in your client over stdio · streamable-http.

Protocol

Any MCP client

stdio · streamable-http

Questions

Before you install.

How do I install the AP2 MCP server?

The npm package @codespar/mcp-ap2 is deprecated, so this page shows no install command for it. The registry says: No live endpoint: AP2 is a spec; ap2.googleapis.com serves no API. See https://github.com/codespar/mcp-dev-latam/tree/main/packages/payments/ap2

What can my agent do with AP2?

AP2 exposes 22 tools for protocols. Your agent calls them directly; the full list is above.

How does AP2 authenticate, and how are credentials stored?

AP2 uses OAuth2. Self-hosted, you hold the credentials: the server reads them from its environment variables.

How does AP2 handle upstream API changes?

Every server is versioned independently on npm. This one is deprecated (see the notice above), so the page does not suggest pinning a version.

Is AP2 open source? How do I report a bug?

Yes. AP2 is MIT-licensed and published on npm as @codespar/mcp-ap2, source on GitHub (link in the Details panel). Report issues on the package repository; security issues go to security@codespar.dev, and we respond within 24 hours.

Pairs well with