A LyboAI product · #PinchMeIWant50K

Run Your Payments
Autonomously
with Lybo Remi

Describe how you charge in plain English. A deterministic compiler builds it on Pinch, runs it, and fixes it when payments fail.

Sandbox-safe — approval-gated writes Built on the Pinch API
RECOVERED
$600.00
Remi · Payments front desk — Live Preview
COACH (OWNER)
Why did Sarah's payment fail?
REMI · NEEDS APPROVAL
Payment dishonoured — insufficient funds. Soft decline, customer-side. Retry Friday + send this note?
ApproveEdit
REMI — Retry scheduled · note drafted
23 MCP tools 13 read · 10 guarded writes stdio + Streamable HTTP every write needs confirm:true First Pinch MCP sandbox-verified
DISCOVER MORE

What we built

One payments core, four deliverables

A 48-hour hackathon build: an unofficial community MCP server for the Pinch Payments API, an agent that uses it responsibly, a live reference integration, and everything packaged so any platform can do the same.

pinch-mcp

A 23-tool MCP server over the Pinch API — payments, payers, subscriptions with stall detection, cashflow & settlement summaries, payer statements, split-bill tracking, QR payment links, and a dishonour-diagnosis map. stdio + Streamable HTTP. Every write is approval-gated: no confirm:true, no API call.

13 read10 guarded writesconfirm-guard

Remi agent

The AI payments teammate: Design billing from plain English, Do collections (links, subscriptions, splits), Ask instant money questions, Fix failed payments with diagnosed causes and approved recoveries. Ships in three deployment shapes on LyboAI. Named for remittance — the safe movement of money is the one job it exists to do.

DesignDoAskFix

CoachPlus integration

A live reference deployment: the Billing & Payments panel with a cashflow digest and needs-attention feed, Pinch-powered collections (payment links, real recurring subscriptions, webhooks), and Remi embedded as the coach's payments front desk.

live referencePinch collections

The Toolkit

Everything packaged for reuse: the agent pack (system prompt, playbooks, dishonour taxonomy, guardrails), recipes for Claude Desktop / LyboAI / widget embeds, a sandbox seed script — and this playground.

agent packrecipesplayground

How it works

One MCP server, every host

The Pinch API is wrapped once, in pinch-mcp. External AI hosts (Claude Desktop, Cursor — any MCP client) connect directly; LyboAI connects through its generic MCP bridge to power Remi; CoachPlus renders the result for merchants.

flowchart LR P["Pinch Payments API
(sandbox)"] --> M{{"pinch-mcp
23 tools · stdio + HTTP
confirm-guarded writes"}} M --> C1["Claude Desktop / Cursor
(any MCP client)"] M --> B["LyboAI MCP bridge
(JSON-RPC · JSON + SSE)"] B --> R[["Remi
Design · Do · Ask · Fix"]] P --> CP["CoachPlus pinch client
+ webhooks"] CP --> UI["Billing & Payments panel
/coach/payments"] R -. chat / widget .-> UI
Approval lives in the tool layer. Every write tool refuses to act without confirm: true and returns a structured preview instead — so no host, chat, flow or UI can move money without an explicit human step. Refunds carry an additional env-enforced cap.

The blueprint

A deterministic compiler for billing models

This is real, live output from pinch_design_billing against the Pinch sandbox — a monthly membership, casual sessions, and a 10-week term with a deposit, under a 7% platform fee. Validation, Pinch-primitive mapping, schedules, indicative fees, timeline and review flags are all computed deterministically. Nothing is provisioned without confirm:true.

pinch_design_billing — blueprintText (live sandbox output)
$ pinch_design_billing { businessName: "CoachPlus Demo Club", platformFeePercent: 7, confirm: false, components: [membership, per_session, term] }

BILLING BLUEPRINT — CoachPlus Demo Club
Anchor date: 2026-07-25 · fee estimates are sandbox-observed, indicative — not official pricing

1. Adult membership [membership] → Pinch Plan + Subscription (monthly, ongoing until cancelled)
   $59.00 monthly from 2026-07-25, until cancelled
   per charge: gross $59.00 · est Pinch fee $1.30 · platform fee $4.13 · est net $53.57
   provisioning: event-driven · flags: 7% platform fee NOT applied automatically — see needsReview; no payerEmail — provision per customer as they sign up (see exampleCall)

2. Casual session [per_session] → Payment link issued per booking (event-driven)
   $30.00 per session, on demand — no fixed dates
   per charge: gross $30.00 · est Pinch fee $0.66 · platform fee $2.10 · est net $27.24
   provisioning: event-driven · flags: 7% platform fee NOT applied automatically — see needsReview; not auto-provisioned — issue a payment link at each booking (see exampleCall)

3. U12 Spring skills term [term] → Pinch Plan + Subscription (weekly, ends after 10 payments, deposit via fixedPayments)
   $50.00 deposit on 2026-07-25, then 10 × $45.00 weekly from 2026-08-01 to 2026-10-03 ($500.00 total)
   per charge: gross $45.00 · est Pinch fee $0.99 · platform fee $3.15 · est net $40.86
   provisioning: event-driven · flags: 7% platform fee NOT applied automatically — see needsReview; no payerEmail — provision per customer as they enrol (see exampleCall)

TIMELINE (first events)
   2026-07-25     $59.00  Adult membership — monthly charge
   2026-07-25     $50.00  U12 Spring skills term — deposit
   2026-08-01     $45.00  U12 Spring skills term — instalment
   2026-08-08     $45.00  U12 Spring skills term — instalment
   2026-08-15     $45.00  U12 Spring skills term — instalment
   2026-08-22     $45.00  U12 Spring skills term — instalment

FIRST 30 DAYS: gross $289.00 · est net $262.41 · recurring: $59.00/monthly, $45.00/weekly
POLICY: Soft-failure retry after 3 days — matches the insufficient-funds playbook (retry ~3 days, friendly nudge, pause after 3 consecutive failures). Hard failures are never blind-retried: send a payment link to update details instead.
NEEDS REVIEW: Platform fee retention (7%) requires Pinch Managed Merchants / application fees — flagged for Pinch review; not auto-provisioned. Estimates above show the deduction for planning only.

AI interprets intent. A deterministic, schema-validated compiler decides what Pinch operations are permitted.

Playground

Talk to the tools

Demo mode replays real captured sandbox outputs — it works fully offline. Live mode speaks MCP Streamable HTTP straight from your browser to a pinch-mcp endpoint you run.

# pick a question above — every response below is a real capture from the Pinch sandbox (no network needed)
start yours with: node dist/index.js --http 3333 --cors
locked — live is refused by the server on playgrounds
initialize → notifications/initialized → tools/call, per the MCP Streamable HTTP spec
# results appear here
Security: credentials go directly from your browser to YOUR endpoint — never to us. This page has no backend. Test keys only.

Host it for your platform

Three deployment patterns

pinch-mcp is an unofficial community MCP server for the Pinch Payments API. Your merchants, your keys — credentials are never shared or proxied by anyone else.

Per-platform instance

One process per merchant or platform, credentials via env vars. The simplest and safest default — exactly what the Claude Desktop quickstart sets up.

safest default
PINCH_MERCHANT_ID=mch_… PINCH_SECRET_KEY=sk_… node dist/index.js

Shared multi-tenant endpoint

One hosted process; each caller brings their own keys per request via x-pinch-merchant-id / x-pinch-secret-key / x-pinch-env headers. OAuth tokens cached per merchant+env, header secrets never logged, --cors answers browser preflights. Without --allow-live, the server refuses x-pinch-env: live outright.

header credstest-only by default
node dist/index.js --http 8787 --cors

Library import

buildServer() is exported from the built module — embed the fully-wired MCP server, all 23 tools, inside your own Node process and connect whatever transport you like.

embed anywhere
const { buildServer } = await import("./dist/index.js")
Unofficial community MCP for the Pinch Payments API — not an official Pinch product. Merchants authorise it with their own API keys.

Built on the LyboAI agents platform

From chatbots to agents

LyboAI's flow engine and knowledge grounding now compose with MCP tools and human approval gates: bots that do things — take payments, diagnose failures, act on approval — not just answer questions. The preview → approve → confirm:true loop maps directly onto the orchestrator's tool rounds.

merchant message → flow engine → knowledge grounding → MCP tool call (preview) → human approval gateconfirm:true → money moves

payments-support

Standalone Remi: a ready-to-instantiate template whose whole job is payments. Design billing conversationally, answer money questions from live Pinch data, triage dishonours and prepare recoveries — every write held for approval.

standalone Remitemplate

support-with-remi

Your existing support agent, with Remi as its payments workflow: general questions stay with your bot; anything payments-shaped routes into Remi's Design/Do/Ask/Fix branch with identical guard language. The CoachPlus Support Agent model.

your agent + Remiworkflow branch

About us

Built by LYBOTECH GROUP

LYBOTECH GROUP is an applied-AI company: we build the framework, runtime, training and vertical products that let businesses put AI agents to work safely. The Pinch build sits inside a broader portfolio — this weekend advanced several parts of it and created two new ones.

lybotechgroup.com ↗ LyboTech Experience ↗

LyboAI — the AI platform arm

Key platforms under LyboAI. Orange tags mark what this hackathon updated or created; indigo marks existing platforms carried in unchanged.

Agents Platform

The flow-engine + knowledge-grounding platform that turns chatbots into agents that do things. Powers the Remi family and the CoachPlus Front Desk.

Hackathon · updated
Show more
  • MCP tool-calling with a preview → human-approval → confirm:true gate.
  • Per-organisation MCP credential resolution (mcpOrg) + orgId plumbing, so a bot's tools authenticate as the org's own merchant — no plaintext secrets in tool headers.
  • Schema hardening: credential-named tool headers rejected; tool serverUrl falls back to the connection.
  • 10-agent Remi family incl. the customer-facing Remi Front Desk; catalog extended to 22 actions.
  • Fixes to make it work: Supabase session-pooler switch (restored Google sign-in on Cloud Run), 300-char tool-description cap guards, docs≠code bridge (catalog-template executor + Fastify), default-guardrail & from-template patches, and runtime widget URL/key moved to systemSettings.

AI Enablers

The horizontal building blocks the products stand on.

Existing · unchanged
Show more
  • Value-AI Framework — the agent/application framework. Carried in unchanged this hackathon.
  • Edge Runtime & LyboOS — the on-device / edge runtime and OS layer. Carried in unchanged this hackathon.

AI Academy

LyboAI's training arm — practical courses for teams adopting agents.

Hackathon · course added
Show more
  • New course: MCP Security — the safe-tooling principles this Pinch build was hardened against (OWASP GenAI secure-MCP, SlowMist checklist, Palo Alto analysis): confirm-guards, egress limits, redaction, no generic passthrough.

AI Security

A new security line, born from this build's threat modelling.

Hackathon · created
Show more
  • First product: the MCP Security Checker — evaluates an MCP server against the same standards (OWASP GenAI / SlowMist / Palo Alto): confirm-gating, credential handling, output caps, manifest integrity, and generic-passthrough / egress checks.

CoachPlus — the vertical product

CoachPlus is a coaching marketplace and business platform: coaches list profiles discoverable by location and category, sell courses and sessions, take bookings and enrolments, run a tenant website and app, and get paid — with GST invoicing built in. It is in build and not yet launched, and the prime candidate for integrating the LyboAI Agents Platform (Remi) with the Pinch payment rails demonstrated here.

In build · pre-launchHackathon · payments integratedintegration candidate
Show more
  • Platform features: geo + category coach discovery, courses & enrolments, bookings, availability, tenant websites + app configurations, and GST-aware invoicing.
  • Hackathon — payments: Pinch as the provider with BYO keys per coach (server-only coachSecrets, AsyncLocalStorage credential scoping); in-platform payment actions (subscriptions with deposits/direct debit, refunds, cancellations, splits, discount codes) and a payments simulator via the MCP engine; webhook-driven GST invoices; and a floating Remi assistant.
  • Fixes to make it work: marketplace radius + category visibility (primaryGeohash + runtime categoryIds), Pinch reference types on the tenant/plan, and availability-collection alignment.