Next free-source huntWe check for new free data every weekday.
FinancialMCP serverFirst audited Nov 13, 2026

PayRam

Install, configure, operate and integrate self-hosted PayRam crypto payment gateways.The vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 220 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
No, read-onlyAll 44 tools say they only read.
Endpointhttps://mcp.payram.com/mcp

Source code Website Streamable HTTP · protocol 2025-11-25 · server version 1.2.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 44 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (44)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • payram_setup_planStart here to install PayRam on a VPS. Returns an ordered, personalised plan — prepare server → install → claim admin + set public URL → wallets (incl. Smart Bridge review) → API key + first payment…Read-only
  • payram_doctorRead-only diagnosis of a PayRam server by its public URL — works from the hosted MCP without credentials: reachability, health, TLS certificate, installed vs latest version, worker states. Optionally…Read-only
  • payram_troubleshootSomething is not working? Describe the problem in plain words and/or paste the error or log text. Returns the known PayRam problems it matches, what each usually means, how to confirm it and the fix,…Read-only
  • payram_runbookStep-by-step procedures for changes to a running PayRam, each step marked agent vs human with hard stops: set_site_url, change_domain, ssl_setup, ssl_renewal_fix, firewall_ports, upgrade, backup, res…Read-only
  • payram_ops_playbookExact, copy-paste recipes for day-2 operations and troubleshooting that YOU run against the merchant's PayRam API with credentials that stay on your machine: which endpoint, which credential (public…Read-only
  • generate_env_templateCreates a .env template for configuring a merchant backend to talk to a self-hosted Payram server.Read-only
  • generate_setup_checklistReturns a step-by-step checklist of everything a merchant must configure to start using Payram.Read-only
  • suggest_file_structureSuggests a recommended backend folder/file structure for integrating Payram.Read-only
  • get_agent_setup_flowReturns the canonical PayRam headless-agent guide: agent CLI commands, env vars, merchant vs operator mode, wallet flows, adding chains, troubleshooting. Long (~11k tokens). For a short personalised…Read-only
  • generate_payment_sdk_snippetGenerates backend code using the official Payram JS/TS SDK to create a payment.Read-only
  • generate_payment_http_snippetGenerates a raw HTTP sample for creating a Payram payment in the requested language.Read-only
  • generate_payment_status_snippetGenerates backend code to query the status of a Payram payment.Read-only
  • generate_payment_route_snippetGenerates a ready-to-use backend endpoint (e.g., /api/pay/create) that creates a Payram payment.Read-only
  • snippet_nextjs_payment_routeReturns a Next.js App Router API route that calls Payram's create-payment HTTP API.Read-only
  • snippet_express_payment_routeReturns an Express router that posts to Payram's /api/v1/payment endpoint.Read-only
  • snippet_fastapi_payment_routeReturns a FastAPI handler that calls Payram's create-payment HTTP API.Read-only
  • snippet_laravel_payment_routeReturns a Laravel controller that posts to Payram's /api/v1/payment endpoint.Read-only
  • snippet_go_payment_handlerReturns a Gin handler that proxies /api/pay/create to Payram's create-payment API.Read-only
  • snippet_spring_payment_controllerReturns a Spring Boot controller that calls Payram's /api/v1/payment endpoint.Read-only
  • generate_payout_sdk_snippetGenerates a backend code snippet for creating a payout using the Payram JS/TS SDK.Read-only
  • generate_payout_status_snippetGenerates backend code to query the status of a payout using the Payram SDK.Read-only
  • generate_payout_recipient_flow_snippetGenerates the recommended OTP-verified payout flow: create recipient → validate OTP → create payout against the saved recipient. Use this for repeat beneficiaries; use generate_payout_sdk_snippet for…Read-only
  • generate_referral_sdk_snippetGenerates a backend route or service snippet to create a referral event using the Payram SDK.Read-only
  • generate_referral_validation_snippetGenerates a snippet to validate referral IDs, statuses, and eligibility.Read-only
  • generate_referral_status_snippetGenerates code to fetch referral progress, rewards, or status.Read-only
  • generate_referral_route_snippetGenerates a backend route such as /api/referrals/create for logging referral events.Read-only
  • generate_webhook_handlerGenerates backend code to handle Payram webhook HTTP requests.Read-only
  • generate_webhook_event_routerGenerates a backend event router that dispatches Payram webhook events to domain handlers.Read-only
  • generate_mock_webhook_eventGenerates a snippet to send mock Payram webhook events to your local endpoint for testing.Read-only
  • generate_topup_integration_snippetFor EXISTING apps: emits the recommended top-up wallet integration — ledger schema + cumulative-credit webhook handler + atomic invoice-settle function. Credits crypto payments to a user's balance fi…Read-only
  • explain_payram_basicsExplain Payram's product pillars, architecture, payments, and payouts capabilities.Read-only
  • explain_payram_securityAnswer "is PayRam safe / trustworthy / audited?": why an agent can use it without holding secrets, the independent smart contract audit (what it covers and what it does not), and how to verify the re…Read-only
  • get_payram_linksSurface official documentation, website, and community links.Read-only
  • explain_payment_flowDescribe how payments move from customer initiation through settlement.Read-only
  • explain_payram_conceptsGlossary-backed explanation of Payram terminology and constraints.Read-only
  • explain_referrals_basicsSummarize how Payram referral campaigns are configured and managed.Read-only
  • explain_referral_flowDetail the referrer/referee lifecycle and required APIs.Read-only
  • get_referral_dashboard_guideExplain how to embed and manage the referral dashboard experience.Read-only
  • prepare_payram_testConfirm hosting, credentials, and environment variables before generating demo apps.Read-only
  • get_payram_doc_by_idReturns the markdown for a Payram doc given its id, e.g. "features/payouts".Read-only
  • list_payram_docsLists the available Payram doc ids. Optionally scope by a prefix such as "features".Read-only
  • scaffold_payram_appGenerates a minimal full-stack app skeleton with Payram payments and payouts routes (and a simple UI) for a chosen language and framework.Read-only
  • test_payram_connectionDeprecated: use payram_doctor, which does this and more. Read-only check that a PayRam server is reachable and healthy and, if an API key is supplied, that the key is accepted. Never creates payments.Read-only
  • onboard_agent_setupDeprecated: use payram_setup_plan, which does this and lets you personalise it. Returns the default headless plan (testnet, USDC on Base).Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200220 ms
initializedHTTP 20265 ms
tools/listHTTP 200214 ms
resources/listHTTP 20060 ms
prompts/listHTTP 20063 ms
unknown-methodHTTP 20058 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.