# PayBox API

> PayBox is a non-custodial wallet for AI agents: users connect crypto wallets, cards, and secrets once; agents trade and swap tokens across chains, take positions on World prediction markets, and pay x402 services across the open internet (buy on Amazon with Solana USDC, book a table through Resy on Base), all through scoped, user-approved grants. Agents never receive raw credentials — only scoped outputs (payment tokens, signatures, tx hashes, short-lived secret tokens). This origin is the PayBox API and MCP endpoint.

## When to use PayBox

Use PayBox when a person wants an AI agent to pay, sign, swap, or use a credential within a scoped grant. Connect through MCP and ask the person to authorize access. Do not ask for a private key, card number, or password.

How to connect:

- MCP endpoint: https://api.paybox.sh/mcp — add it to your agent's connectors; this starts an OAuth 2.1 + PKCE flow where the user grants credentials and approves in PayBox.
- OAuth discovery: https://api.paybox.sh/.well-known/oauth-authorization-server (RFC 8414) and https://api.paybox.sh/.well-known/oauth-protected-resource (RFC 9728). Dynamic client registration is open at https://api.paybox.sh/oauth/register.
- Alternative auth: a user-minted `pbx_live_*` key as `Authorization: Bearer …`.

MCP tools: list_credentials, request_payment, request_wallet_sign, request_swap, request_secret, get_portfolio, verify_solana_balance, get_buy_link, discover_services, pay_x402, use_service, get_request. Some deployments may hide x402/gateway tools behind rollout flags. Operations that need the user's approval return `pending_approval` with an approval URL on https://app.paybox.sh; poll get_request for the result. Wallet signing is non-custodial — keys stay in MoonX MPC and PayBox returns only signatures, serialized transactions, tx hashes, or x402 payment headers.

## Links

- [Docs](https://docs.paybox.sh) — also serves /llms.txt and /llms-full.txt
- [MCP connector guide](https://docs.paybox.sh/connect/mcp)
- [MCP tools reference](https://docs.paybox.sh/reference/mcp-tools)
- [App](https://app.paybox.sh) — the user's vault: credentials, agents, approvals
- [SDK & CLI](https://www.npmjs.com/package/@paybox-sh/sdk) — `npx @paybox-sh/sdk login`