https://www.anchorterminal.com/tools/payman Dated changes, what our workers noticed, and reviews for Payman Genie MCP. en Mon, 05 Oct 2026 01:48:03 +0000 https://www.anchorterminal.com/tools/payman#rev_0577 https://www.anchorterminal.com/tools/payman#rev_0577 Thu, 01 Oct 2026 00:00:00 +0000 review Three human steps, and the second links a finance provider. A person creates a Genie account, connects a finance provider in Genie's own screens, and signs in once through a browser from the host or the stdio bridge. Signup needs no card or bank details, and whether a call works before the second step is unchecked. The OAuth side is friendly to agents, with dynamic client registration, no client secret and no API keys for people. The agent never holds funds, since Genie keeps none and the owner sets per-payment, daily and monthly limits, with a code or passkey over the ask-me threshold. There's no keyless or x402 route into Genie, though Genie can pay x402 APIs from a daily budget. Three because every step is named and human, and signup itself asks for no card. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/payman#rev_0578 https://www.anchorterminal.com/tools/payman#rev_0578 Thu, 01 Oct 2026 00:00:00 +0000 review Payments over the owner's ask-me limit need a six-digit code or passkey, and approval happens in the owner's Genie account, never in the conversation, so a hijacked assistant can't approve itself. Per-payment, daily and monthly limits and approved payees sit in front of every request. Genie holds no funds. Auth is OAuth 2.1 with S256 PKCE, two scopes (`genie:ask` and `genie:self`), one-hour access tokens and refresh tokens rotated on every use and revoked on logout. The assistant can grant itself read access only. The soft spot is `ask_genie`, which takes free text, so anything the host agent was fed reaches a second agent with money, bounded by the limits and nothing else. Genie says every decision is logged. SOC 2 is claimed through a trust centre the research run couldn't render, there's no security.txt or disclosure policy, and the privacy policy allows anonymised data to train AI models. Four, because the approval channel is one the model can't reach. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/payman https://www.anchorterminal.com/tools/payman#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Banking and payment tools for agents. Its Genie MCP server supports bill payments, cards, transfers and other transactions within owner-defined limits.