Stripe ServerSAFE
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://smithery.ai/server/@atharvagupta2003/mcp-stripe)
A Model Context Protocol (MCP) server implementation that integrates with Stripe for handling payments, customers, and refunds. This server provides a structured API to manage financial transactions securely.
Demo
Requirements
- Python 3.8+
- MCP SDK 0.1.0+
- Stripe Python SDK
- dotenv
Components
Resources
The server provides audit logging of all Stripe operations:
- Stores audit logs of customer, payment, and refund operations
- Supports structured logging for better traceability
- Uses MCP resource endpoints to retrieve audit data
Tools
The server implements Stripe API operations, including:
Customer Management
- customer_create: Create a new customer
- customer_retrieve: Retrieve a customer's details
- customer_update: Update customer information
Payment Operations
- payment_intent_create: Create a payment intent for processing payments
- charge_list: List recent charges
Refund Operations
- refund_create: Create a refund for a charge
Features
- Secure Payments: Integrates with Stripe for robust payment handling
- Audit Logging: Keeps track of all Stripe transactions
- Error Handling: Comprehensive error handling with clear messages
- MCP Integration: Supports MCP-compatible tools and resource listing
Installation
Installing via Smithery
To install Stripe Server for Claude Desktop automatically via Smithery:
npx -y @smithery/cli install @atharvagupta2003/mcp-stripe --client claude
Install dependencies
python -m venv venv source venv/bin/activate # On macOS/Linux venv\Scripts\activate # On Windows pip install -e .
Configuration
Set
a3cfd5c4cf54OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add mcp-stripe --env STRIPE_API_KEY=${STRIPE_API_KEY} -- uvx mcp-stripe{
"mcpServers": {
"mcp-stripe": {
"command": "uvx",
"args": [
"mcp-stripe"
],
"env": {
"STRIPE_API_KEY": "${STRIPE_API_KEY}"
}
}
}
}Exposed tools (6)
2 read · 4 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
charge_list | read | List recent charges |
customer_create | write | Create a new customer in Stripe |
customer_retrieve | read | Retrieve a customer |
customer_update | write | Update customer information |
payment_intent_create | write | Create a payment intent for processing payments |
refund_create | write | Create a refund for a charge |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
a3cfd5c4cf54full audit observations/trust-audit/mcp-server/atharvagupta2003__stripe-server.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | a3cfd5c4cf54 | SAFE | B | 89 | first audit |
Questions
What tools does Stripe Server expose?
6 in total: 2 read-only, 4 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Stripe Server safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Stripe Server need?
It reads STRIPE_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Stripe Server run?
It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as mcp-stripe.
How current is this page?
The grade is for one exact copy of the source (a3cfd5c4cf54), read on 2026-10-08. The repository is watched and re-audited when it changes.