v0.3.4 - hardening

• Spending log: locked across processes, written to a unique temp file, pruned by age (a week) instead of by count - two assistants on one wallet cannot overrun the daily cap, and a flood of tiny entries cannot push large ones out of the window.
• Confirmation dialog: a payment the person confirms may be at most 20 USDC by default (P2FLUX_MAX_CONFIRMED; was 1000).
• Local server: only public web addresses are paid (no private networks, no .local/.internal names).
• Hosted server: the paid text is handed out with a claim the assistant holds; the approval link alone unlocks nothing. get_paid_page now takes request_id and claim.

npm: @p2flux/mcp 0.3.4

v0.3.3 - security fixes

• The wallet signs only the plain EIP-3009 transfer for the price shown: a site's 402 can no longer steer it into a Permit2 approval or an ERC-20 approval extension.
• Hosted server (agent.p2flux.com): a full request table refuses new requests instead of evicting ones that are waiting or already paid; callers are counted per IPv6 /64.

npm: @p2flux/mcp 0.3.3

0.3.2

• Prepaid deposits now reach the seller's minimum deposit (1 USDC on P2Flux). Before, the payment library capped a deposit at 3x the price, so cheap pages (under ~0.34 USDC) were always paid one by one.
• Sub-cent prices: when a site asks less from a prepaid balance than per request, the agent pays the prepaid price. check_price names both.

v0.3.1

0.3.1 - no code change since 0.3.0.

• Adds mcpName so the package is listed in the official MCP Registry as io.github.P2Flux/mcp (also on Smithery and Glama).
• Claude Desktop: install p2flux.mcpb below. Others: npx -y @p2flux/mcp. Hosted server for claude.ai and ChatGPT: https://agent.p2flux.com/mcp.

What 0.3.0 brought (budget with confirmation above it, access tokens for subscriptions, remote server): see the 0.3.0 release.

P2Flux MCP 0.3.0

New in 0.3.0

• A budget, and you are asked above it (Claude Desktop, Claude Code, Cursor): payments inside your limits (default 0.50 USDC per payment, 5 USDC a day) go through on their own. Above them your app asks you in a dialog the assistant cannot answer - amount, site and what the site says it sells - and pays only if you confirm (never above 1000 USDC).
• Subscriptions / access tokens: a site can sell a period instead of one page (for example a tipster's subscription at the price people pay). It answers with an access token, kept on your computer for that site only and sent back only to it; later pages there are read without paying until it expires.
• check_price shows what the site says a payment buys.
• Remote server (claude.ai, ChatGPT): https://agent.p2flux.com/mcp. Above 5 USDC the assistant must ask you for a budget first, and the approval page shows a warning with a box to tick. Access tokens are sealed to their site.

Install: Claude Desktop - download p2flux.mcpb below and double-click. Other clients - npx -y @p2flux/mcp (npm); P2FLUX_NETWORK=live for real USDC on Base.

p2flux.mcpb sha256: d6cbdea3a67f19f2a92f886ca5c8f71aa6fb4b10d4722f422d2f1bdbd8e436a9

P2Flux MCP 0.2.0

Let your AI assistant find and pay for web content with USDC (x402), within limits you set. The wallet stays on your computer.

Claude Desktop: download p2flux.mcpb below and double-click it. Leave Money on test the first time.

Claude Code, Cursor and other MCP clients: npx -y @p2flux/mcp (npm: @p2flux/mcp). P2FLUX_NETWORK=live for real USDC on Base.

claude.ai / ChatGPT (remote): https://agent.p2flux.com/mcp - you approve each payment in your own browser wallet.

p2flux.mcpb sha256: f62b5ba50ca1a19b75ffc04dc6fd338e2081b3ae0491c9a114c60e4efe4a9b08