theFinanceStack home

Stripe MCP server and Claude connector: what it does, what it can change, how to connect

Stripe hosts a read/write MCP server (mcp.stripe.com) behind its Claude connector and ChatGPT plugin, plus a local npm proxy. OAuth or agent API keys. Verified 21 Oct 2026.

  • Official MCP serverOfficial MCP server · read & write (hosted, with local proxy)
  • Official Claude or ChatGPT connectorClaude connector · read & write (11 tools listed)
  • Official Claude or ChatGPT connectorChatGPT plugin · read & write (per Stripe docs)
Hosting
Remote HTTP at https://mcp.stripe.com, hosted by Stripe. The open-source @stripe/mcp package runs locally but forwards every call to that server.
Auth
OAuth with per-account, per-environment consent, or an agent API key as a Bearer header. Other API keys stop working after 30 Nov 2026.
Read / write
Read and write: generic tools call any listed GET, POST, PATCH, PUT or DELETE method. Most writes post at once. Over OAuth, Stripe holds certain writes, such as refunds and outbound payments, for approval; agent API keys use Dashboard approval rules.
Works with
Claude.ai, Claude Desktop, Claude Code, ChatGPT, Codex, Cursor, VS Code and any MCP client that supports HTTP transport
Plan requirement
Not documented as plan-gated. Admins can switch MCP off for live mode or sandboxes. Analytics SQL needs Stripe Sigma, which has its own subscription; Treasury tools are in preview. Your Claude or ChatGPT plan must support connectors.
Last changed
2026-10 (agent API key migration announced)
Verification
Verified 21 Oct 2026 by theFinanceStack · confidence: high

What can an agent do with Stripe through MCP?

Most of what the Stripe API allows, on the methods Stripe lists. Stripe's docs list 15 tools, and two of them read or write across that whole list of API methods. The Claude directory listing shows 11.

Stripe groups the tools by job: search, details, read and write. One tool can work on many kinds of object.

How writes behave

CaseWhat happens
Most writesPost immediately, with no draft step.
Over OAuthStripe holds certain writes, such as refunds and outbound payments, until a person approves a link. Stripe doesn't publish the full list.
Agent API keysUse Stripe's approval rules instead. A designated reviewer approves in the Dashboard.
Preview Treasury toolsStripe doesn't say whether they use the same approval step.

Tools that move or commit money

  • Refunds
  • Subscription creation and updates. Updates prorate by default, which can add charges.
  • Invoice finalisation, which can trigger a charge, depending on invoice settings
  • Payment links and Checkout Sessions, which collect money from customers
  • Tax registration creation
  • The preview Treasury tools send_money, transfer_money, convert_currency and setup_recipient (which sets up a payee for send_money)

Claude directory listing

  • Stripe's docs list the Treasury money-movement and Atlas tools for the hosted server. They don't appear in the Claude directory listing.
  • That listing adds list_available_accounts_or_orgs and manage_stripe_accounts. It doesn't describe what manage_stripe_accounts does.

Can

  • Read customers, charges, refunds, invoices, credit notes, subscriptions, payouts, balance transactions and disputes
  • Create or update customers, products, prices, coupons and payment links; delete coupons; create Checkout Sessions (posts immediately)
  • Create, finalise, void or mark invoices uncollectible; create, update or cancel subscriptions (posts immediately, though on agent keys Stripe's default approval rule holds a cancellation for a reviewer; a void can't be undone, per Stripe)
  • Update disputes (posts immediately)
  • Create refunds (held for human approval over OAuth, per Stripe)
  • Read and update tax settings; read, create and update tax registrations (posts immediately)
  • Create webhook endpoints and event destinations (posts immediately)
  • Run metrics and financial reports (preview); Sigma SQL from plain English
  • Treasury balance summary (hosted server and Claude listing); send money, transfers, currency conversion and payee setup (public preview, hosted server; not in the Claude listing)
  • Search Stripe docs; start an Atlas company formation (hosted server; not in the Claude listing)

Cannot

  • Call API methods outside Stripe's supported list
  • Complete a refund or outbound payment over OAuth without a person approving it (per Stripe, for stripe_api_write; requests expire after 24 hours). Stripe doesn't say whether this covers the Treasury send_money and transfer_money tools
  • Act for Connect connected accounts over OAuth; Stripe says that needs an agent API key
  • Exceed the permissions granted at consent or on the key

What access does it get?

Only what you grant. With OAuth you pick accounts or sandboxes and set permissions for each. An agent API key carries the permissions set when it was created.

WhereScopes and permissions (as documented)Admin requirement
Hosted server (mcp.stripe.com), OAuthNot documented by the vendor as named scopes. The consent page lets you grant live accounts or sandboxes with different permissions for each.An administrator can enable or disable MCP for the team in the Dashboard (dashboard.stripe.com/settings/mcp-and-cli-access), separately for live mode and sandboxes. Revoke sessions in user settings › OAuth sessions; admins can revoke others' in Team and security. Revoking covers only the account and environment you're viewing, so repeat it in each live account and sandbox.
Hosted server or @stripe/mcp proxy, agent API keyThe restricted key's permissions. Stripe says agent-tagged keys are subject to approval rules, where a designated reviewer approves sensitive actions. Its approvals page lists default rules for refund creation and subscription cancellation; its key docs mention payouts, refunds and account configuration changes. The proxy's old --tools flag is removed.Stripe doesn't say which roles can create agent keys. When creating a restricted key, choose Authorizing agent access to your account. Stripe recommends an access policy (IP addresses, or ASN and country) on live keys.
Claude connector and ChatGPT pluginSame OAuth consent as the hosted server.Claude Team/Enterprise: an owner adds the connector first (per Stripe). ChatGPT Business/Enterprise: an admin must allow the app.

How do I connect it?

Add Stripe from the Claude directory or ChatGPT, or point any MCP client at https://mcp.stripe.com and sign in to Stripe; start with a sandbox.

  1. Team/Enterprise: an owner adds the Stripe connector to the workspace first.
  2. Open the Stripe listing (https://claude.ai/directory/de127013-63f1-43d0-8dd2-b6cb5b4e5d1b) and select Connect to Claude.
  3. Sign in to Stripe and grant a sandbox first; add live accounts only with the permissions you need.
  4. In a chat, select +, then Connectors, and switch Stripe on.

Web and Claude Desktop. Marked Anthropic verified.

What should a finance team watch for?

Writes land in Stripe at once, and only some actions get Stripe's own approval step. Keep tool approval on and grant live access narrowly.

  • Over OAuth, Stripe holds certain writes, such as refunds and outbound payments, for approval and doesn't publish the full list. Assume invoice voids and subscription, price and tax-setting changes post at once. After you approve, you tell the agent to retry, and that retry runs without another check, so read the request before clicking Approve. On agent API keys, Stripe's approval rules apply instead: a reviewer approves in the Dashboard, the action then completes, and requests expire after 14 days.
  • Stripe recommends your client's tool-approval setting and care when mixing Stripe with other MCP servers. Customer names, memos and dispute text are free text; an injected instruction there could push the agent to refund, void or send money. It could also get the agent to create a webhook endpoint or event destination pointing at an outside web address, which would send customer and payment event data there. Leave webhook and event-destination write permission off the agent key or OAuth grant where you can, and check any such tool call.
  • Assume tax and subscription writes post at once over OAuth, since Stripe doesn't name them among the writes it holds. On agent keys, Stripe's default rules hold only subscription cancellation, and an admin can add a rule for subscription creation. A new tax registration or tax-settings change can affect the tax Stripe calculates on invoices, and subscription updates prorate by default, which can add charges.
  • Non-agent API keys get a 401 after 30 Nov 2026. The proxy README still shows a secret key; use an agent key.
  • A key in a client config or .env file sits in plain text, often in a synced folder. Stripe says don't commit keys; use a secrets vault or environment variables, or OAuth.
  • Treasury and analytics tools are in preview. Stripe documents no MCP rate limits; Workbench logs tool calls.
  • Stripe's MCP page says nothing on retention or training; check Stripe's privacy policy and your AI provider's terms.

How could finance teams and accounting firms use it?

Read access suits revenue, payout and dispute questions. With write access you can prepare invoice or refund actions for a person to approve.

Inside a company

  • Ask for the month's charges, refunds, fees and payouts, and compare payouts with a bank statement you provide.
  • List open disputes and past-due invoices for the AR meeting.
  • Prepare a refund from a support ticket for a person to approve at Stripe's confirmation link. An invoice void posts at once and can't be undone, so a person approves that tool call in Claude or ChatGPT first.
  • Summarise subscription changes and cancellations for the revenue review.

At an accounting firm

  • Pull balance transactions and payouts for a client's month-end reconciliation.
  • Check a client's tax registrations before a sales-tax review, with a qualified person deciding.
  • List uncollectible or voided invoices for a bad-debt review.
  • Answer client questions on fees or payout timing from Stripe's docs search.

Keep a person approving anything that changes Stripe or your ledger, and keep money movement behind Stripe's confirmation step.

Want Stripe connected to Claude for your team?

We configure scoped connections and a review step before anything changes your books. Fixed fee.

Book a 30-minute setup call

Change log

DateChangeSource
2026-10-21Repository found at github.com/stripe/ai (old URL redirects); @stripe/mcp is a proxy to the hosted server, --tools removedgithub.com/stripe/ai/tree/main/tools/modelcontextprotocol
2026-10Non-agent API keys to stop working on MCP after 30 Nov 2026docs.stripe.com/mcp
2025-11Stripe connector added to the Claude directory (Anthropic verified, 11 tools listed)claude.com/connectors/stripe

FAQ

Is this official?

Yes. Stripe hosts and documents the server and publishes the Claude connector, which is marked Anthropic verified.

Is it free?

Stripe doesn't document a charge for MCP. Normal Stripe fees apply to what the agent does. Analytics SQL needs Stripe Sigma, which has its own subscription. Check that your Claude or ChatGPT plan supports connectors.

Does it change data in Stripe?

Yes. Most writes, such as creating or updating customers, invoices and subscriptions, take effect immediately. Over OAuth, Stripe holds certain writes, such as refunds and outbound payments, for a person's approval. Agent API keys use Stripe's approval rules.

Is my data used to train models?

Stripe's MCP page doesn't say. Check Stripe's privacy policy and your AI provider's terms before connecting.

Can my accountant use it on my behalf?

Stripe doesn't document accountant access. Stripe says OAuth acts on behalf of the Stripe user who signs in, so an accountant would connect with their own login on your Stripe account, and the permissions granted at consent limit what the agent can do.

Something wrong or out of date? Tell us and we'll email you when it's fixed.

Sources

Verified by theFinanceStack, 21 Oct 2026. Vendor list on the CFO Software Market Map courtesy of Jason Staats; AI connectivity data by theFinanceStack. Not tax, compliance or financial advice.