F

mcp.payram.com

https://mcp.payram.com/mcp
45/100 · MCP Trust Grade · checked 4h ago · MCP 2025-06-18
Watched since 2026-06-03 — behavioral baseline locked. We re-check this server's tool surface on a schedule; if it adds, removes, or silently rewrites a tool (rug-pull), we record it.

What it offers — 49 tools · Developer Tools

test_payram_connection

Checks the /api/v1/payment endpoint on a Payram server using baseUrl and apiKey. If they are not provided, returns a .env template you can add to your

generate_payment_sdk_snippet

Generates backend code using the official Payram JS/TS SDK to create a payment.

generate_payment_http_snippet

Generates a raw HTTP sample for creating a Payram payment in the requested language.

generate_payment_status_snippet

Generates backend code to query the status of a Payram payment.

generate_payment_route_snippet

Generates a ready-to-use backend endpoint (e.g., /api/pay/create) that creates a Payram payment.

snippet_nextjs_payment_route

Returns a Next.js App Router API route that calls Payram's create-payment HTTP API.

snippet_express_payment_route

Returns an Express router that posts to Payram's /api/v1/payment endpoint.

snippet_fastapi_payment_route

Returns a FastAPI handler that calls Payram's create-payment HTTP API.

snippet_laravel_payment_route

Returns a Laravel controller that posts to Payram's /api/v1/payment endpoint.

snippet_go_payment_handler

Returns a Gin handler that proxies /api/pay/create to Payram's create-payment API.

snippet_spring_payment_controller

Returns a Spring Boot controller that calls Payram's /api/v1/payment endpoint.

generate_payout_sdk_snippet

Generates a backend code snippet for creating a payout using the Payram JS/TS SDK.

generate_payout_status_snippet

Generates backend code to query the status of a payout using the Payram SDK.

generate_payout_recipient_flow_snippet

Generates the recommended OTP-verified payout flow: create recipient → validate OTP → create payout against the saved recipient. Use this for repeat b

generate_referral_sdk_snippet

Generates a backend route or service snippet to create a referral event using the Payram SDK.

generate_referral_validation_snippet

Generates a snippet to validate referral IDs, statuses, and eligibility.

generate_referral_status_snippet

Generates code to fetch referral progress, rewards, or status.

generate_referral_route_snippet

Generates a backend route such as /api/referrals/create for logging referral events.

+31 more tools

Spec conformance20%100
Security (OWASP MCP)30%10
Reliability / performance20%92
Tool hygiene15%45
Transparency / provenance15%70

Observed behavior

No proxied traffic observed for this host yet. Connect it at /connect and its grade gains a measured Reliability score + per-tool behavioral evidence — the half a static scan can't produce.

Findings

FAILMCP08 Tool "test_payram_connection" references sensitive file paths / secrets (exfiltration surface).
FAILMCP08 Tool "assess_payram_project" references sensitive file paths / secrets (exfiltration surface).
FAILMCP08 Tool "generate_env_template" references sensitive file paths / secrets (exfiltration surface).
Grade another server

We re-grade mcp.payram.com on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.

Share this report card

A 1200×630 card with the grade + audit — drop it in a post, Slack, or your repo.

MCP Trust report card — mcp.payram.com grade F
Share on X Open card image

Embed this grade

A live badge — it re-verifies itself and shows current stability. Static scorecards can't. Paste it in your README or site to show users you're independently audited.

MCP Trust Grade F · wmcp.sh
[![MCP Trust Grade F](https://wmcp.sh/mcp/grade/mcp.payram.com/badge.svg)](https://wmcp.sh/mcp/grade/mcp.payram.com)
<a href="https://wmcp.sh/mcp/grade/mcp.payram.com"><img src="https://wmcp.sh/mcp/grade/mcp.payram.com/badge.svg" alt="MCP Trust Grade F · wmcp.sh"></a>

Agents: check this before connecting

Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:

https://wmcp.sh/mcp/trust
How this grade is computed. An open, independent rubric — Spec conformance (20%), Security mapped to the OWASP MCP Top 10 (30%), Reliability (20%), Tool hygiene (15%), Transparency (15%) — run by connecting to the server and inspecting its real MCP surface. The grade is free and identical whether or not the operator pays. v1 uses static + spec signals from a single connection; continuous uptime, real latency, and annotation-truthing (declared readOnly vs observed behavior) layer on via the wmcp.sh proxy.