Index live · v1.7.0 · OCT 6 2026

Stripe

Official
byStripe

Stripe's official MCP server provides full access to the Stripe platform through their Agent Toolkit. Manage payments, customers, subscriptions, invoices, and refunds. Hosted at mcp.stripe.com with comprehensive API coverage.

Streamable HTTPTypeScriptOAuth or token
Agent Toolkit

Configuration

claude mcp add --transport http stripe https://mcp.stripe.com/

Run in a terminal. Copied verbatim from the upstream README.

AgenticSkills Audit

Automated framework checks. Deep code review tracked separately. Read the methodology →

2/2
2 of 2 automated checks passed
Audited Aug 7, 2026
Hosted endpoint
TLS-only (HTTPS) endpoint
Mitigates: Plaintext credential interceptionResponded 401 over HTTPS
Evidence
OAuth 2.1 metadata (RFC 9728)
Mitigates: Token mismanagement, audience confusionRFC 9728 metadata present
Evidence
Repo-level checks
SECURITY.md published
Mitigates: Coordinated disclosure pathHosted server — repo-level check not applicable
Commit in last 90 days
Mitigates: Maintainer abandonmentHosted server — no public commit log
≥2 active contributors
Mitigates: Bus-factor of oneHosted server — no public contributor list
CI pipeline configured
Mitigates: Code health regressionHosted server — no public CI
Dependency lockfile committed
Mitigates: Dependency confusionHosted server — repo-level check not applicable
Signed releases (npm provenance)
Mitigates: Supply-chain backdoorHosted server — supply chain via vendor
Software Bill of Materials (SBOM)
Mitigates: Audit trailHosted server — repo-level check not applicable
License declared
Mitigates: Legal ambiguityHosted server — vendor terms of service apply

Deep framework checks (OAuth 2.1 / PKCE implementation, input validation, sandboxing) require human source review and are tracked separately. This scorecard covers programmatically verifiable signals only.

Quick Stats

Trust LevelOfficial
TransportStreamable HTTP
AuthOAuth or token
LanguageTypeScript
CategoryFinance & Payments
Websitemcp.stripe.com

Author

S

Stripe

Official

Tags

paymentssubscriptionsinvoicingfintech

Used in this workflow

Indie Hacker MVP

Ship fast with four components — design, database, payments, and deployment. No overhead.

2 skills · 2 MCP

Get new MCP servers in your inbox. What we added, what failed the security audit, and why. See a past issue.