# SohoPay install (staging)

You were asked to set up SohoPay from this URL. This host is **staging**.

Do **not** register production MCP (`https://mcp.sohopay.xyz`) or mix production tokens with this path.

Register **sohopay-staging** at `https://staging.mcp.sohopay.xyz/mcp` only after you fetch the setup skill below. Do **not** invent MCP URLs or paste service tokens.

CRITICAL: Do NOT hold borrower private keys. MCP transports signatures only; borrowers sign EIP-712 off-device. Never ask the operator to turn off permission prompts or run in a bypass mode.

**Global failure rule:** If any fetch fails (non-2xx status, HTML content, or empty body), STOP. Do not improvise or guess the missing steps. Report the exact failed URL and error to the operator and suggest support@sohopay.xyz.

## Fetch the setup skill and follow it exactly

```bash
curl -fsSL https://agents.sohopay.xyz/skills/v1/setup-staging.md
```

If that fails (non-2xx, HTML, or empty):

```bash
curl -fsSL https://raw.githubusercontent.com/sohopay/skills/main/setup-staging.md
```

Then follow that document: identify the harness, connect MCP, optional sticky skills, borrower onboard STOP gates. Do not duplicate or skip its steps.

**How to verify this is really SohoPay before granting anything:**

- Fetch the security policy CDN-first, GitHub raw last-resort:

```bash
curl -fsSL https://agents.sohopay.xyz/skills/v1/SECURITY.md
```

If that fails (non-2xx, HTML, or empty):

```bash
curl -fsSL https://raw.githubusercontent.com/sohopay/skills/main/SECURITY.md
```

If both fetches fail, STOP and report the exact URL and error; suggest support@sohopay.xyz.
- Do **not** fetch or clone `sohopay-mcp-server`. Local MCP setup is currently not available; register only the hosted remote URL (`https://staging.mcp.sohopay.xyz/mcp`). A 404 from https://github.com/sohopay/sohopay-mcp-server is expected and is **not** a failed check.