Stripe MCP Server: Tools, Setup and Security

The Stripe MCP server lets an AI app such as Claude, ChatGPT, Cursor or VS Code read and write data in your Stripe account. It can also search Stripe's documentation. Stripe publishes and hosts it at mcp.stripe.com.

Checked against: Stripe's MCP documentation on 28 October 2026. eSEOspace did not install or test this server.

At a glance

What it can do

Stripe's docs list these tools as of October 2026:

• API tools: stripe_api_search (find API methods by keyword), stripe_api_details (parameter details), stripe_api_read (any supported GET method) and stripe_api_write (supported POST, PATCH, PUT and DELETE methods).
• Account: get_stripe_account_info.
• Atlas: atlas_company_formation, which starts or resumes a Delaware C corporation or LLC formation.
• Analytics: stripe_analytics (preview). Stripe says building SQL from plain language requires Sigma.
• Treasury (public preview): get_balance_summary, convert_currency, send_money, setup_recipient and transfer_money.
• Other: search_stripe_documentation, stripe_implementation_planner and send_stripe_feedback.

The supported API methods cover customers, charges, refunds, PaymentIntents, Checkout Sessions, invoices, subscriptions, coupons, promotion codes, products, prices, payment links, disputes, webhooks, tax, balance transactions, payouts and Issuing records. The list includes write actions such as "Create refund", "Cancel a subscription", "Void an invoice" and "Delete a coupon".

How to connect it

Stripe recommends its agent plugin, which sets up the server and Stripe's skills for you:

npm install -g @stripe/cli@latest
stripe agent setup

To add the server to Claude Code by hand, Stripe gives this command. Then run /mcp inside Claude Code to sign in with OAuth:

claude mcp add --transport http stripe https://mcp.stripe.com/

For Codex, Stripe documents:

codex mcp add stripe --url https://mcp.stripe.com

For VS Code, add this to .vscode/mcp.json:

{
 "servers": {
   "stripe": {
     "type": "http",
     "url": "https://mcp.stripe.com"
   }
 }
}

VS Code's MCP server docs still support .vscode/mcp.json "for compatibility" but label it deprecated in the guided setup flow, as of October 2026. Servers that prompt for values with ${input:...} aren't forwarded to Copilot harness sessions.

Stripe also lists an official connector in Claude's directory and an official plugin in ChatGPT. On Claude Team and Enterprise, an owner must add the connector to the workspace first. If your client cannot do OAuth, pass an agent API key in the Authorization header as a bearer token.

Security notes

Stripe builds in more guardrails than most MCP servers. Still, this server can change real money records, so treat it as high risk.

• Human confirmation. Stripe "requires human confirmation before it takes certain stripe_api_write actions, such as refunds and outbound payments." You click a link from the agent, review the request and approve it. Then you tell the agent to retry. Approvals expire after 24 hours.
• Key deadline. Stripe says to migrate by 30 November 2026. From December, the server rejects full-access secret keys and restricted keys without the Agent tag. Use OAuth or a new agent API key with only the permissions the agent needs.
• Per-environment consent. The OAuth consent page lets you grant access to live mode or sandboxes, with different permissions for each.
• Admin controls. Admins can enable or disable MCP access for the team, separately for live mode and sandboxes. Users and admins can revoke OAuth sessions.
• Prompt injection. Stripe tells you to turn on your client's tool-approval setting and to be careful when combining Stripe with other servers. Read prompt injection through MCP tool results to see why.
• Connected accounts. Connect platforms can act for connected accounts with an agent API key and the Stripe-Account header. OAuth is not supported for that.
• What the spec says. The MCP tools specification says there SHOULD always be a human in the loop who can deny tool calls. The spec's security best practices also recommend scope minimization.

Stripe's MCP page also points to MCP tool call logs in Stripe Workbench, so you can review what agents did. For a wider checklist, see the MCP security center and excessive permissions in MCP servers.

Alternatives

• PayPal MCP server: local or remote, with invoicing, orders, refunds and subscriptions.
• Square MCP server: beta, with a read-only switch on the local version.
• Paddle MCP server: local server for Paddle Billing with read-only and non-destructive tool filters.

Next step

Before you give any agent payment access, map which actions it truly needs. Our MCP readiness audit reviews your tools, keys and approval rules. For more servers in this space, browse the MCP server directory or our MCP for ecommerce guide.

Frequently asked questions