pkg.soopen package index

brew / rank 5017

Install pay with Homebrew, winget

HTTP client that automatically handles 402 Payment Required. Version 0.28.0 via Homebrew; verified 2026-09-11. Also installable with winget: winget install --id pay-skill.pay -e.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install pay

local Homebrew formula metadata

Windows

Windows Package Managerverified · 92%
winget install --id pay-skill.pay -e

Windows Package Manager source index · pay-skill.pay · source: cdn.winget.microsoft.com

overview

Package summary

HTTP client that automatically handles 402 Payment Required

Commands and aliases

  • pay

history

Project history and usage

pay is a Solana Foundation command-line payment layer that wraps HTTP tools, handles supported HTTP 402 challenges, obtains local wallet authorization, and retries requests with payment proof.

Project history

The Solana Foundation developed pay as a client for agentic HTTP payments. The current project handles x402 and Machine Payments Protocol challenges and supports stablecoin settlement on Solana.

The project expanded beyond a simple HTTP wrapper to include account management, an MCP server, an API catalog, a payment gateway, sandbox facilities, and a local debugging interface.

Adoption history

pay is distributed through Homebrew, npm, and Windows Package Manager, giving the client coverage across major desktop command-line package ecosystems.

The project integrates with existing tools such as curl, wget, Claude Code, and Codex, and also exposes an MCP server for agent-driven paid HTTP requests.

How it is used

Users prefix supported clients or agents with `pay`, such as `pay curl`, so a 402 response can trigger payment preparation, local approval, signing, and an authenticated retry.

Official guidance recommends sandbox mode for examples, making the smallest useful paid request first, checking pricing, and retaining local user authorization for real payments.

Account metadata resides in `~/.config/pay/accounts.yml`; private keys are kept in supported secure stores rather than in that YAML file.

Why package nerds care

pay packages an emerging HTTP payment workflow as a composable Unix-style wrapper. It is noteworthy because it preserves familiar client commands while adding challenge detection, local authorization, payment proof, and request replay.

Its design also illustrates a newer packaging pattern: one binary combines a CLI, an agent protocol server, a local debugger, and secure-store integrations across operating systems.

Timeline

  • 2020s: The Solana Foundation developed the pay command-line project for HTTP-based payments.
  • 2026: Official documentation describes x402 and MPP support, agent integrations, sandbox use, an MCP server, and a public API catalog.

Related projects

  • pay-kit supplies multi-language building blocks for adding stablecoin payment behavior to applications.
  • pay-skills is the open catalog of paid APIs consumed by the CLI and agents.
  • x402 and MPP are the supported HTTP payment protocols.

security posture

Risk level: blue

broad file, network, media, or database tool signal.

Risk classifier

blue risk · medium confidence · tool

Why

  • broad file, network, media, or database tool signal

Signals

  • text:http,client

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 1 runtime dependencies.
  • Build metadata lists 6 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.config/pay/accounts.yml

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.config/pay/accounts.yml

executables

Installed executables

CommandKindExposureNote
paycliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-09-19
manager version0.28.0
manager updated2026-09-11
local dataok
upstreamcurrent
latest detectedpay-v0.28.0

https://github.com/solana-foundation/pay

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:pay
Version0.28.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/pay
Homepagehttps://pay.sh
Repositoryhttps://github.com/solana-foundation/pay
Upstream docshttps://pay.sh
LicenseMIT
Source archivehttps://github.com/solana-foundation/pay/archive/refs/tags/pay-v0.28.0.tar.gz
Last updated2026-09-11T19:02:20Z
Pulseupdated
Dependenciesopenssl@3
Build dependenciescmake, just, node, pkgconf, pnpm, rust
Uses from macOSpython
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namepay
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

winget95%

pay-skill.pay

winget install --id pay-skill.pay -e
  • normalized package name match
  • Matched by: Pay
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: pay-skill.pay from https://cdn.winget.microsoft.com/cache/source.msix

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • openssl@3Runtime dependency declared by Homebrew.
  • nodeBuild dependency declared by Homebrew.
  • pkgconfBuild dependency declared by Homebrew.
  • cmakeBuild dependency declared by Homebrew.
  • pnpmBuild dependency declared by Homebrew.

Same workflow

  • curlShares pkgdb curated category or tags: cli, http-client, networking.
  • lftpShares pkgdb curated category or tags: cli, http-client, networking.
  • cadaverShares pkgdb curated category or tags: cli, http-client, networking.
  • core-lightningShares pkgdb curated category or tags: cli, networking, payments.
  • c-aresShares pkgdb curated category or tags: cli, networking.
  • unboundShares pkgdb curated category or tags: cli, networking.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database
  • pkgdb category and tag curation