Stripe MCP server and Claude connector: what it does, what it can change, how to connect
Stripe hosts a read/write MCP server (mcp.stripe.com) behind its Claude connector and ChatGPT plugin, plus a local npm proxy. OAuth or agent API keys. Verified 21 Oct 2026.
- Official MCP server · read & write (hosted, with local proxy)
- Claude connector · read & write (11 tools listed)
- ChatGPT plugin · read & write (per Stripe docs)
- Hosting
- Remote HTTP at https://mcp.stripe.com, hosted by Stripe. The open-source @stripe/mcp package runs locally but forwards every call to that server.
- Auth
- OAuth with per-account, per-environment consent, or an agent API key as a Bearer header. Other API keys stop working after 30 Nov 2026.
- Read / write
- Read and write: generic tools call any listed GET, POST, PATCH, PUT or DELETE method. Most writes post at once. Over OAuth, Stripe holds certain writes, such as refunds and outbound payments, for approval; agent API keys use Dashboard approval rules.
- Works with
- Claude.ai, Claude Desktop, Claude Code, ChatGPT, Codex, Cursor, VS Code and any MCP client that supports HTTP transport
- Plan requirement
- Not documented as plan-gated. Admins can switch MCP off for live mode or sandboxes. Analytics SQL needs Stripe Sigma, which has its own subscription; Treasury tools are in preview. Your Claude or ChatGPT plan must support connectors.
- Last changed
- 2026-10 (agent API key migration announced)
- Verification
- Verified 21 Oct 2026 by theFinanceStack · confidence: high
What can an agent do with Stripe through MCP?
Most of what the Stripe API allows, on the methods Stripe lists. Stripe's docs list 15 tools, and two of them read or write across that whole list of API methods. The Claude directory listing shows 11.
Stripe groups the tools by job: search, details, read and write. One tool can work on many kinds of object.
How writes behave
| Case | What happens |
|---|---|
| Most writes | Post immediately, with no draft step. |
| Over OAuth | Stripe holds certain writes, such as refunds and outbound payments, until a person approves a link. Stripe doesn't publish the full list. |
| Agent API keys | Use Stripe's approval rules instead. A designated reviewer approves in the Dashboard. |
| Preview Treasury tools | Stripe doesn't say whether they use the same approval step. |
Tools that move or commit money
- Refunds
- Subscription creation and updates. Updates prorate by default, which can add charges.
- Invoice finalisation, which can trigger a charge, depending on invoice settings
- Payment links and Checkout Sessions, which collect money from customers
- Tax registration creation
- The preview Treasury tools
send_money,transfer_money,convert_currencyandsetup_recipient(which sets up a payee forsend_money)
Claude directory listing
- Stripe's docs list the Treasury money-movement and Atlas tools for the hosted server. They don't appear in the Claude directory listing.
- That listing adds
list_available_accounts_or_orgsandmanage_stripe_accounts. It doesn't describe whatmanage_stripe_accountsdoes.
Can
- Read customers, charges, refunds, invoices, credit notes, subscriptions, payouts, balance transactions and disputes
- Create or update customers, products, prices, coupons and payment links; delete coupons; create Checkout Sessions (posts immediately)
- Create, finalise, void or mark invoices uncollectible; create, update or cancel subscriptions (posts immediately, though on agent keys Stripe's default approval rule holds a cancellation for a reviewer; a void can't be undone, per Stripe)
- Update disputes (posts immediately)
- Create refunds (held for human approval over OAuth, per Stripe)
- Read and update tax settings; read, create and update tax registrations (posts immediately)
- Create webhook endpoints and event destinations (posts immediately)
- Run metrics and financial reports (preview); Sigma SQL from plain English
- Treasury balance summary (hosted server and Claude listing); send money, transfers, currency conversion and payee setup (public preview, hosted server; not in the Claude listing)
- Search Stripe docs; start an Atlas company formation (hosted server; not in the Claude listing)
Cannot
- Call API methods outside Stripe's supported list
- Complete a refund or outbound payment over OAuth without a person approving it (per Stripe, for stripe_api_write; requests expire after 24 hours). Stripe doesn't say whether this covers the Treasury send_money and transfer_money tools
- Act for Connect connected accounts over OAuth; Stripe says that needs an agent API key
- Exceed the permissions granted at consent or on the key
What access does it get?
Only what you grant. With OAuth you pick accounts or sandboxes and set permissions for each. An agent API key carries the permissions set when it was created.
| Where | Scopes and permissions (as documented) | Admin requirement |
|---|---|---|
| Hosted server (mcp.stripe.com), OAuth | Not documented by the vendor as named scopes. The consent page lets you grant live accounts or sandboxes with different permissions for each. | An administrator can enable or disable MCP for the team in the Dashboard (dashboard.stripe.com/settings/mcp-and-cli-access), separately for live mode and sandboxes. Revoke sessions in user settings › OAuth sessions; admins can revoke others' in Team and security. Revoking covers only the account and environment you're viewing, so repeat it in each live account and sandbox. |
| Hosted server or @stripe/mcp proxy, agent API key | The restricted key's permissions. Stripe says agent-tagged keys are subject to approval rules, where a designated reviewer approves sensitive actions. Its approvals page lists default rules for refund creation and subscription cancellation; its key docs mention payouts, refunds and account configuration changes. The proxy's old --tools flag is removed. | Stripe doesn't say which roles can create agent keys. When creating a restricted key, choose Authorizing agent access to your account. Stripe recommends an access policy (IP addresses, or ASN and country) on live keys. |
| Claude connector and ChatGPT plugin | Same OAuth consent as the hosted server. | Claude Team/Enterprise: an owner adds the connector first (per Stripe). ChatGPT Business/Enterprise: an admin must allow the app. |
How do I connect it?
Add Stripe from the Claude directory or ChatGPT, or point any MCP client at https://mcp.stripe.com and sign in to Stripe; start with a sandbox.
- Team/Enterprise: an owner adds the Stripe connector to the workspace first.
- Open the Stripe listing (https://claude.ai/directory/de127013-63f1-43d0-8dd2-b6cb5b4e5d1b) and select Connect to Claude.
- Sign in to Stripe and grant a sandbox first; add live accounts only with the permissions you need.
- In a chat, select +, then Connectors, and switch Stripe on.
Web and Claude Desktop. Marked Anthropic verified.
What should a finance team watch for?
Writes land in Stripe at once, and only some actions get Stripe's own approval step. Keep tool approval on and grant live access narrowly.
- Over OAuth, Stripe holds certain writes, such as refunds and outbound payments, for approval and doesn't publish the full list. Assume invoice voids and subscription, price and tax-setting changes post at once. After you approve, you tell the agent to retry, and that retry runs without another check, so read the request before clicking Approve. On agent API keys, Stripe's approval rules apply instead: a reviewer approves in the Dashboard, the action then completes, and requests expire after 14 days.
- Stripe recommends your client's tool-approval setting and care when mixing Stripe with other MCP servers. Customer names, memos and dispute text are free text; an injected instruction there could push the agent to refund, void or send money. It could also get the agent to create a webhook endpoint or event destination pointing at an outside web address, which would send customer and payment event data there. Leave webhook and event-destination write permission off the agent key or OAuth grant where you can, and check any such tool call.
- Assume tax and subscription writes post at once over OAuth, since Stripe doesn't name them among the writes it holds. On agent keys, Stripe's default rules hold only subscription cancellation, and an admin can add a rule for subscription creation. A new tax registration or tax-settings change can affect the tax Stripe calculates on invoices, and subscription updates prorate by default, which can add charges.
- Non-agent API keys get a 401 after 30 Nov 2026. The proxy README still shows a secret key; use an agent key.
- A key in a client config or .env file sits in plain text, often in a synced folder. Stripe says don't commit keys; use a secrets vault or environment variables, or OAuth.
- Treasury and analytics tools are in preview. Stripe documents no MCP rate limits; Workbench logs tool calls.
- Stripe's MCP page says nothing on retention or training; check Stripe's privacy policy and your AI provider's terms.
How could finance teams and accounting firms use it?
Read access suits revenue, payout and dispute questions. With write access you can prepare invoice or refund actions for a person to approve.
Inside a company
- Ask for the month's charges, refunds, fees and payouts, and compare payouts with a bank statement you provide.
- List open disputes and past-due invoices for the AR meeting.
- Prepare a refund from a support ticket for a person to approve at Stripe's confirmation link. An invoice void posts at once and can't be undone, so a person approves that tool call in Claude or ChatGPT first.
- Summarise subscription changes and cancellations for the revenue review.
At an accounting firm
- Pull balance transactions and payouts for a client's month-end reconciliation.
- Check a client's tax registrations before a sales-tax review, with a qualified person deciding.
- List uncollectible or voided invoices for a bad-debt review.
- Answer client questions on fees or payout timing from Stripe's docs search.
Keep a person approving anything that changes Stripe or your ledger, and keep money movement behind Stripe's confirmation step.
Want Stripe connected to Claude for your team?
We configure scoped connections and a review step before anything changes your books. Fixed fee.
Book a 30-minute setup callChange log
| Date | Change | Source |
|---|---|---|
| 2026-10-21 | Repository found at github.com/stripe/ai (old URL redirects); @stripe/mcp is a proxy to the hosted server, --tools removed | github.com/stripe/ai/tree/main/tools/modelcontextprotocol |
| 2026-10 | Non-agent API keys to stop working on MCP after 30 Nov 2026 | docs.stripe.com/mcp |
| 2025-11 | Stripe connector added to the Claude directory (Anthropic verified, 11 tools listed) | claude.com/connectors/stripe |
FAQ
Is this official?
Yes. Stripe hosts and documents the server and publishes the Claude connector, which is marked Anthropic verified.
Is it free?
Stripe doesn't document a charge for MCP. Normal Stripe fees apply to what the agent does. Analytics SQL needs Stripe Sigma, which has its own subscription. Check that your Claude or ChatGPT plan supports connectors.
Does it change data in Stripe?
Yes. Most writes, such as creating or updating customers, invoices and subscriptions, take effect immediately. Over OAuth, Stripe holds certain writes, such as refunds and outbound payments, for a person's approval. Agent API keys use Stripe's approval rules.
Is my data used to train models?
Stripe's MCP page doesn't say. Check Stripe's privacy policy and your AI provider's terms before connecting.
Can my accountant use it on my behalf?
Stripe doesn't document accountant access. Stripe says OAuth acts on behalf of the Stripe user who signs in, so an accountant would connect with their own login on your Stripe account, and the permissions granted at consent limit what the agent can do.
Sources
- Stripe Docs: Model Context Protocol (tools, auth, setup, approvals)
- Stripe Docs: API keys, including agent API keys
- Stripe Docs: approval rules, including defaults for agent-tagged keys
- Stripe API reference: void an invoice
- Stripe API reference: update a subscription (prorations)
- GitHub: stripe/ai (formerly stripe/agent-toolkit), MIT
- GitHub: @stripe/mcp local proxy README and source
- Claude directory: Stripe connector
- Claude.ai directory: Stripe listing
- ChatGPT: Stripe plugin
- Stripe privacy policy
- Stripe Sigma pricing
Verified by theFinanceStack, 21 Oct 2026. Vendor list on the CFO Software Market Map courtesy of Jason Staats; AI connectivity data by theFinanceStack. Not tax, compliance or financial advice.