A payment gateway for MCP servers, and the security bugs I found in my own code first

Fewer than 5% of MCP servers make money. I put a real payment gate in front of one and wrote down what actually broke.

The problem, with numbers

There are 10,000+ Model Context Protocol (MCP) servers out there right now, with 97 million+ combined downloads. MCP is the emerging standard for how AI agents call tools — search, databases, APIs, whatever a server wants to expose. It's had a huge adoption wave.

Fewer than 5% of the people running those servers earn anything from them.

Not because nobody would pay. It's because "let people pay per call" means building, from scratch, on top of your actual product:

A payment gateway for MCP servers, and the security bugs I found in my own code first

Related reading

"Put a security gateway in front of any MCP server in 5 minutes"

I tried four ways to gate my MCP server. Only one didn't need a Stripe account.

I audited 6,762 MCP servers. Here's the state of the ecosystem and the trust…

I Build MCP Servers. Here's the Security Hole Nobody Talks About.

I built a pay-per-call MCP server too — here's the piece that almost broke…

Manifold Security Just Scored 7,700 MCP Servers. Here's Why That Number Should…