Install
$ agentstack add mcp-dontmesswithme-cpu-stripe-mcp ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
stripe-mcp
A production-grade Model Context Protocol (MCP) server that safely exposes Stripe API operations to AI agents through a strict policy and approval middleware.
System Architecture
All mutating operations are routed through a centralized middleware pipeline that enforces compliance, risk scoring, and audit requirements before interacting with the Stripe API. Read-only operations bypass this pipeline.
Request Input -> Schema Validation (Zod) -> Middleware Pipeline
|
v
[Read-Only Mode] -> [Idempotency Enforcement] -> [Risk Engine] -> [Approval Gate] -> [Stripe Execution]
| |
v v
[Audit Log (SQLite)] "
Tool Registry
| Domain | Read-Only Tools | Mutating Tools | | :--- | :--- | :--- | | Customers | retrieve_customer, list_customers | create_customer, update_customer, delete_customer, archive_customer, purge_expired_customers | | Payments | retrieve_payment_intent, list_payment_intents | create_payment_intent, confirm_payment_intent, cancel_payment_intent | | Subscriptions | retrieve_subscription, list_subscriptions | create_subscription, update_subscription, cancel_subscription | | Products | list_products, list_prices | create_product, create_price | | Invoices | retrieve_invoice, list_invoices | pay_invoice | | Balance | retrieve_balance | - | | Refunds | list_refunds | create_refund | | Audit | get_audit_log | - |
Local Development & Deployment
The server relies on better-sqlite3 and standard TypeScript build processes.
# Install dependencies
npm install
# Compile TypeScript
npm run build
# Start the MCP server process
npm start
Deploy the compiled distribution output into secure infrastructure capable of connecting via standard I/O streams (stdio). Ensure the internal ./data/ directory maintains appropriate filesystem write permissions for SQLite persistence.
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: dontmesswithme-cpu
- Source: dontmesswithme-cpu/stripe-mcp
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.