Koskamo

PayperDrop MCP

A temporary key-value drop and hand-off channel between AI agents, allowing them to store, wait for, retrieve, list, and delete values under specific keys. It operates on a pay-per-call model using x402 payments, where writes are charged but reads are free, facilitating secure data exchange between agents.

Endpoint and access

No sign-in to connect and list tools. Individual tools may still need a vendor account, credentials, or permissions; check the documented prerequisites.

PayperDrop MCP logo, by PayperWorkVendor evidenceStreamable HTTPNo sign-inEndpoint checked 2026-11-01Operated by PayperWork
You need:needs an x402-aware MCP client
MCP endpoint (Streamable HTTP)
https://payperwork.app/drop/mcp
Vendor documentation

What you can do with it

  • Store a value under a key for a specific time-to-live
  • Wait for a key to be updated by another agent
  • Retrieve a stored value from a shared box
  • List or delete keys in a namespace

Source and maintenance

Vendor evidenceRegistry 0.4.1

Protocol and capabilities

Server
payperwork-drop 0.4.1
MCP protocol
2025-06-18
Tools
5 advertised
Resources
Not advertised
Resource templates
Not advertised
Prompts
Not advertised
Server-advertised capabilities
{
  "tools": {
    "listChanged": true
  }
}

Server-provided instructions

Untrusted server output shown for inspection. It is not Koskamo guidance and is excluded from knowledge search.

Temporary key-value storage and hand-off channels for agents, paid per call in USDC over x402. put costs $0.002 and wait $0.001; get, list and delete are free. A box is a namespace of keys. Omit it on a paid call to use your own wallet's box (the call returns its id). Pass any long random string to share a box with another agent as a channel: whoever knows the string can read and write it, so short or guessable names are public. Pass a box_... id returned by an earlier call to address that box directly. The box id is the only credential: anyone holding it can read, list, delete and wait. Security model: every call is priced before it runs (the 402 states the amount) and charged only if it succeeds; the paying wallet is the identity; no account or key exists to revoke. Full statement: GET / (JSON) or /llms.txt. Drops: the box id is the only credential; anyone holding it can read, list, delete and wait. Values are stored unencrypted (encrypt sensitive data yourself) and expire at their TTL. A paid put is stored, and charged, only once its payment settles; wait is charged whether or not a value arrives.

Tools

5 advertised

put
Advertised by the server during the last successful anonymous check.

Store a value under a key. Costs $0.002, charged only if the payment settles; a failed payment stores nothing. Values up to 64 KB, stored unencrypted, kept for ttl_seconds (default 3600, max 604800) then deleted. Overwrites an existing key and bumps its seq. The write becomes visible once the payment has settled. Returns the box id, which is also what free reads need. A box is a namespace of keys. Omit it on a paid call to use your own wallet's box (the call returns its id). Pass any long random string to share a box with another agent as a channel: whoever knows the string can read and write it, so short or guessable names are public. Pass a box_... id returned by an earlier call to address that box directly. The box id is the only credential: anyone holding it can read, list, delete and wait.

put input schema
{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "key",
    "value"
  ],
  "properties": {
    "box": {
      "type": "string",
      "maxLength": 512,
      "minLength": 1
    },
    "key": {
      "type": "string",
      "maxLength": 256,
      "minLength": 1
    },
    "value": {
      "type": "string",
      "maxLength": 65536
    },
    "ttl_seconds": {
      "type": "integer",
      "maximum": 604800,
      "minimum": 60
    }
  }
}
put annotations
{
  "title": "Put",
  "idempotentHint": true
}
wait
Advertised by the server during the last successful anonymous check.
Advertised read-only

Block until a key changes, then return it. Costs $0.001 per call whether or not anything arrives (it is a long-poll, not a subscription). Returns immediately if the key's seq is already greater than since; otherwise waits up to timeout_seconds (max 25) and returns value null with timed_out true. Pass the seq from the last value you saw to get only newer ones; since 0 returns whatever is there. This is how two agents sharing a box pass messages. A box is a namespace of keys. Omit it on a paid call to use your own wallet's box (the call returns its id). Pass any long random string to share a box with another agent as a channel: whoever knows the string can read and write it, so short or guessable names are public. Pass a box_... id returned by an earlier call to address that box directly. The box id is the only credential: anyone holding it can read, list, delete and wait.

wait input schema
{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "key"
  ],
  "properties": {
    "box": {
      "type": "string",
      "maxLength": 512,
      "minLength": 1
    },
    "key": {
      "type": "string",
      "maxLength": 256,
      "minLength": 1
    },
    "since": {
      "type": "integer",
      "default": 0,
      "maximum": 9007199254740991,
      "minimum": 0
    },
    "timeout_seconds": {
      "type": "number",
      "default": 25,
      "maximum": 25,
      "minimum": 0
    }
  }
}
wait annotations
{
  "title": "Wait",
  "readOnlyHint": true
}
get — Get
Advertised by the server during the last successful anonymous check.
Advertised read-only

Read a key. Free, no payment or identity needed, rate limited per address. Needs the box: a box_... id from put, or a channel name. Returns value null with found false if absent or expired. A box is a namespace of keys. Omit it on a paid call to use your own wallet's box (the call returns its id). Pass any long random string to share a box with another agent as a channel: whoever knows the string can read and write it, so short or guessable names are public. Pass a box_... id returned by an earlier call to address that box directly. The box id is the only credential: anyone holding it can read, list, delete and wait.

get input schema
{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "box",
    "key"
  ],
  "properties": {
    "box": {
      "type": "string",
      "maxLength": 512,
      "minLength": 1
    },
    "key": {
      "type": "string",
      "maxLength": 256,
      "minLength": 1
    }
  }
}
get annotations
{
  "readOnlyHint": true
}
list — List keys
Advertised by the server during the last successful anonymous check.
Advertised read-only

List the keys in a box with their seq, size and expiry, newest first, without values. Free, rate limited per address. Anyone holding the box id can do this.

list input schema
{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "box"
  ],
  "properties": {
    "box": {
      "type": "string",
      "maxLength": 512,
      "minLength": 1
    }
  }
}
list annotations
{
  "readOnlyHint": true
}
delete — Delete
Advertised by the server during the last successful anonymous check.
Advertised destructive

Delete a key from a box immediately. Free, rate limited per address. Anyone holding the box id can do this; there is no undo.

delete input schema
{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "box",
    "key"
  ],
  "properties": {
    "box": {
      "type": "string",
      "maxLength": 512,
      "minLength": 1
    },
    "key": {
      "type": "string",
      "maxLength": 256,
      "minLength": 1
    }
  }
}
delete annotations
{
  "idempotentHint": true,
  "destructiveHint": true
}

Prompts

Not advertised

No prompt definitions available.

Resources

Not advertised

No resource definitions available.

30-day availability

Aggregated from read-only remote checks; this is not a tool-execution or security guarantee.

Successful checks
1 of 1 (100%)
Average latency
194 ms
95th percentile latency
194 ms

Maintenance history

Public check and source-refresh events. Editorial and ownership records remain private.

  • · probe · passed · 194 ms · metadata changed · 5 tool(s)

Connect from your client

Each snippet registers the same endpoint; pick the client you use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Claude Code

Run this once in a terminal. It registers the remote server. Use --scope project to write .mcp.json for the repo.
Claude Code configuration
claude mcp add --transport http payperdrop-mcp https://payperwork.app/drop/mcp

Codex

Run this once. Codex stores MCP servers in ~/.codex/config.toml (or .codex/config.toml in a trusted project).
Codex configuration
codex mcp add payperdrop-mcp --url https://payperwork.app/drop/mcp

Cursor

Merge this server into .cursor/mcp.json in your project, then enable payperdrop-mcp in your MCP settings.
Cursor configuration
{
  "mcpServers": {
    "payperdrop-mcp": {
      "url": "https://payperwork.app/drop/mcp"
    }
  }
}

Cline

Merge this into cline_mcp_settings.json (Cline → MCP Servers → Configure).
Cline configuration
{
  "mcpServers": {
    "payperdrop-mcp": {
      "type": "streamableHttp",
      "url": "https://payperwork.app/drop/mcp",
      "disabled": false
    }
  }
}

VS Code

Merge this server into .vscode/mcp.json. Use MCP: List Servers to start payperdrop-mcp and inspect its tools.
VS Code configuration
{
  "servers": {
    "payperdrop-mcp": {
      "type": "http",
      "url": "https://payperwork.app/drop/mcp"
    }
  }
}

Gemini CLI

Run this once. It writes .gemini/settings.json in the current project; pass --scope user for ~/.gemini/settings.json.
Gemini CLI configuration
gemini mcp add --transport http payperdrop-mcp https://payperwork.app/drop/mcp

Claude Desktop

Merge this into claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\), then restart Claude Desktop.
Claude Desktop configuration
{
  "mcpServers": {
    "payperdrop-mcp": {
      "url": "https://payperwork.app/drop/mcp"
    }
  }
}

Windsurf

Merge this into ~/.codeium/windsurf/mcp_config.json, then refresh MCP in Cascade. Windsurf remote servers use serverUrl, not url.
Windsurf configuration
{
  "mcpServers": {
    "payperdrop-mcp": {
      "serverUrl": "https://payperwork.app/drop/mcp"
    }
  }
}

Let your agent find its tools

Find servers like PayperDrop MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.

Do you run PayperDrop MCP?

Prove ownership with a DNS record, a well-known file, or your Official MCP Registry entry, and your edits publish immediately. Proofs are re-checked weekly; admins can still hide or remove a listing.

Claim this listing