Stripe MCP server (official): setup, tools and safety

• Looks up your customers, payments, invoices, subscriptions, payouts and balance

  Runs any read-only (GET) Stripe API call: customers, charges, invoices, subscriptions, payouts, disputes, balance and more from Stripe's supported-methods list.

  Try: “List my 10 most recent failed PaymentIntents and the customer email on each.”

  Network · stripe_api_read

• Answers revenue and billing questions you ask in plain words (in preview)

  Answers revenue and billing questions in plain language by building and running the query for you. In preview.

  Try: “What was my MRR churn last month, broken down by plan?”

  Read · stripe_analytics

• Shows your Stripe and Treasury balances in one view

  Shows your balances across the Stripe balance and any Treasury accounts in one view. Treasury tools are in public preview.

  Try: “Show my balance summary across Stripe and Treasury.”

  Read · get_balance_summary

• Shows which Stripe account you are connected to

  Returns details of the Stripe account the session is connected to, so you can check you are working in the account you meant before any write.

  Try: “Which Stripe account am I connected to?”

  Read · get_stripe_account_info

• Searches Stripe's help docs for answers, without touching your account

  Searches Stripe's docs and support articles and returns relevant answers. Touches no account data.

  Try: “How do I handle a failed subscription renewal webhook in Node.js?”

  Read · search_stripe_documentation

• Creates or changes customers, prices, invoices and subscriptions; refunds need your OK

  Runs any write call in Stripe's supported list: create customers, products, prices, invoices, coupons, payment links and subscriptions, cancel subscriptions, void invoices, delete coupons, issue refunds. Refunds need confirmation in the Stripe Dashboard first.

  Try: “Create a $49 monthly price for the product 'Pro plan' and give me a payment link for it.”

  Delete · stripe_api_write

• Saves a recipient you can send Treasury money to later

  Adds a recipient so you can later send Treasury money to them. It does not move money by itself.

  Try: “Set up Acme Design as a Treasury payment recipient.”

  Write · setup_recipient

• Sends money from your Treasury account to a saved recipient (needs your approval)

  Sends money out of a Treasury account to a recipient you set up. Stripe requires Dashboard approval before it goes through.

  Try: “Send 500 USD from Treasury to the recipient Acme Design.”

  Write · send_money

• Moves money between your Stripe balances (needs your approval)

  Moves money between your supported Stripe balances. Needs Dashboard approval.

  Try: “Move 1,000 USD from my Stripe balance to my Treasury account.”

  Write · transfer_money

• Converts money between currencies in your Treasury account (needs your approval)

  Converts money between currencies inside a Treasury account. Stripe requires you to approve each request in the Dashboard.

  Try: “Convert 2,000 USD to EUR in my Treasury account.”

  Write · convert_currency

• Helps you pick the right Stripe products for what you are building

  Walks you through which Stripe products fit what you are building (one-off payments, a store, subscriptions) and how to integrate them.

  Try: “I sell a SaaS with seat-based pricing. Plan my Stripe Billing integration.”

  Read · stripe_implementation_planner

• Starts or resumes a Stripe Atlas application to form a Delaware company

  Starts or picks up a Stripe Atlas application to form a Delaware C corporation or LLC.

  Try: “Resume my Stripe Atlas Delaware C corp application and tell me what is left.”

  Write · atlas_company_formation

• Sends your feedback on a Stripe product to Stripe

  Sends your feedback on a Stripe product to Stripe.

  Try: “Send Stripe feedback that the invoice PDF template needs a custom footer field.”

  Write · send_stripe_feedback

• Used by the assistant behind the scenes

  Finds the right Stripe action for your request before running it

  Finds which Stripe API method does what you asked for, so the agent can pick the right call before reading or writing anything.

  Try: “Which Stripe API method lists the refunds on a charge?”

  Read · stripe_api_search

• Checks what details a Stripe action needs so it fills them in correctly

  Returns the parameters a given API method accepts, so the agent fills in a call correctly instead of guessing field names.

  Try: “What parameters does creating a payment link take?”

  Read · stripe_api_details

Watch out for

• It can refund and send real money in live mode

  Connect to a sandbox first, where no real payments happen. In live mode, give it only the permissions the job needs. docs.stripe.com

• Only some actions ask for your approval first

  Refunds and Treasury money moves wait for your OK in the Stripe Dashboard, and the request expires after 24 hours. Other changes, like voiding an invoice, run right away, so turn on your app's setting that asks before each tool runs. docs.stripe.com

• Old Stripe keys stop working after November 30, 2026

  From December 2026, full secret keys (sk_) and restricted keys without the Agent tag are rejected, including through the local @stripe/mcp package. Switch to an agent API key before then. docs.stripe.com

• Text in emails or web pages can trick it into acting

  If your assistant also reads email or the web, hidden instructions there could push it toward Stripe actions. Stripe advises turning on your app's setting that asks before each tool runs. docs.stripe.com

• Agent keys come with approval rules switched on

  With an agent key, a second person must approve refunds, cancelled subscriptions, payouts, transfers and currency conversions. An admin can change or delete these rules. docs.stripe.com

• A full secret key can do anything in your account

  Use a restricted key with only the permissions you need instead of an sk_ key. The local package shows a warning if you give it an sk_ key. docs.stripe.com

• Test and live accounts are kept apart

  Test keys (rk_test_) cannot reach live data, and no payments happen in a sandbox. When you sign in, you can grant test and live accounts separately. docs.stripe.com

• Admins can switch it off and sign people out

  In Team and security, an admin can turn access on or off for live mode and sandboxes separately and end any member's sessions. docs.stripe.com

Security advisories

In their words