PCI Pal launches MCP server for secure AI payments

PCI Pal has launched a Model Context Protocol server for secure AI payments, allowing conversational AI platforms and AI agents to access its payment functions.

The feature sits within PCI Pal's cloud platform and targets banks, financial services groups, and other businesses that want to connect AI-led customer interactions to payment processing without exposing sensitive card data.

Model Context Protocol, or MCP, is emerging as a standard way for AI systems to connect with external tools and services. PCI Pal is using the framework so AI applications can access payment services through a common interface rather than a bespoke integration.

The setup allows customers to make payments through conversational banking channels. The vendor-agnostic middleware also lets companies change large language model providers while keeping payment data outside those systems and maintaining PCI-DSS compliance.

The move reflects a broader shift in financial services and customer support, where companies are testing whether AI systems can do more than answer questions and instead complete transactions. Payment handling remains a sensitive area because firms must meet strict security and compliance standards while avoiding exposure of cardholder data to third-party systems.

PCI Pal's MCP server extends the reach of its existing platform across voice, chat, and digital channels. It supports both human-led and AI-led interactions, giving clients a single route for secure payment processing across different forms of customer contact.

The launch also expands access to other parts of PCI Pal's payments infrastructure, including orchestration functions and integrations with communications software providers already connected to its platform.

AI and payments

Financial institutions and contact centre operators have been under pressure to show practical returns from AI spending. One challenge has been linking language models and conversational systems to regulated back-end processes without creating new compliance risks.

By putting an MCP layer in front of its payment services, PCI Pal is targeting that gap. It is positioning the product as a bridge between AI interfaces and secure transaction systems, aiming to let businesses add payment collection to automated service journeys.

Mufti Monim, Chief Technology Officer at PCI Pal, outlined the company's view of that shift.

"Organisations are moving from AI experimentation to execution, and while that journey is still evolving, conversational AI is becoming more sophisticated and increasingly capable of taking action. As that happens, payments will become a more natural part of these interactions, and we expect volumes will grow.

"With our MCP Server, we're opening the breadth of PCI Pal's global platform to AI platforms and AI agents through a standardized framework. That means access to far more than secure payment capture. It brings PCI Pal's payment orchestration capabilities, our seamless integrations with the breadth of the business communications market, along with the highest levels of security and compliance provided across our mature and proven platform, to the next generation of customer engagement."

PCI Pal is listed in London and focuses on secure payment technology for customer communications environments. Its platform is designed so sensitive payment data does not enter or pass through a client's own systems, reducing compliance exposure for organisations taking payments across call centres, chat services, social channels, and email.

The addition of MCP support shows how payment technology suppliers are adapting their products for the rise of agentic AI, where software systems are expected to perform tasks as well as generate responses. In regulated sectors, the challenge is to fit into new AI workflows without loosening the controls required for payment security.

The standardised interface gives customers and partners a way to bring transactional functions into AI-driven interactions at scale while preserving the security safeguards built into PCI Pal's existing platform.