# PayStage Auth Watch MCP server

> Scan and evaluate outstanding ERC-20, Permit2, and EIP-3009 token authorizations for a wallet against a specified policy.

- Repository: https://github.com/base-buzz/paystage
- Page: https://hostedmcp.org/servers/base-buzz/auth-watch
- Transport: stdio
- Stars: 5
- License: MIT
- Latest version: 0.2.0

## Install

### Claude Code

```sh
claude mcp add auth-watch -- npx -y @paystage/auth-watch
```

### Cursor (`~/.cursor/mcp.json`)

```json
{
  "mcpServers": {
    "auth-watch": {
      "command": "npx",
      "args": [
        "-y",
        "@paystage/auth-watch"
      ]
    }
  }
}
```

### VS Code (`.vscode/mcp.json`)

```json
{
  "servers": {
    "auth-watch": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@paystage/auth-watch"
      ]
    }
  }
}
```

### VS Code CLI

```sh
code --add-mcp '{"name":"auth-watch","type":"stdio","command":"npx","args":["-y","@paystage/auth-watch"]}'
```

### Claude Desktop (`claude_desktop_config.json`)

```json
{
  "mcpServers": {
    "auth-watch": {
      "command": "npx",
      "args": [
        "-y",
        "@paystage/auth-watch"
      ]
    }
  }
}
```

### Codex

```sh
codex mcp add auth-watch -- npx -y @paystage/auth-watch
```

### Codex config.toml (`~/.codex/config.toml`)

```toml
[mcp_servers.auth-watch]
command = "npx"
args = ["-y", "@paystage/auth-watch"]
```

### Gemini CLI

```sh
gemini mcp add -s user auth-watch npx -- -y @paystage/auth-watch
```

### Gemini settings.json (`~/.gemini/settings.json`)

```json
{
  "mcpServers": {
    "auth-watch": {
      "command": "npx",
      "args": [
        "-y",
        "@paystage/auth-watch"
      ]
    }
  }
}
```

## Environment variables

| Name | Required | Secret | Description |
|---|---|---|---|
| `PAYSTAGE_POLICY_PATH` | no | no | Path to policy.json spending rules |
| `PAYSTAGE_RPC_URL` | no | no | Base RPC URL override |

## FAQ

### Does this server require private keys?

No, the server holds no keys and does not sign any transactions; it only reads allowance and nonce state.

### What kind of network access does it require?

It performs read-only JSON-RPC eth_call operations against the network.

### Which networks are supported?

The server supports Base mainnet and Base Sepolia.