Back to search
C
73 /100

Billium

Author BilliumHQ
Scanned 19d ago

Official Billium MCP server: manage crypto invoices, payments, and webhooks from any MCP host.

Versions

0.1.3scored
first seen Jun 30, 2026

Trust breakdown

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 23

create_invoice
annotations: none low

Create a new crypto payment invoice for the merchant and return it,

name string description string customerName string customerEmail string customerAddress string customerPhoneNumber string
get_invoice
annotations: none low

Fetch a single invoice by ID, including its current status,

invoiceId string
list_invoices
annotations: none low

List the merchant’s invoices with pagination and optional search.

page number
cancel_invoice
annotations: none low

Cancel an invoice that has not yet been paid. Returns the updated

invoiceId string
create_webhook
annotations: none low

Register a webhook endpoint that Billium will POST events to. Use

url string timeout number isActive boolean retryCount number description string
list_webhooks
annotations: none low

List all webhook endpoints configured for the merchant.

update_webhook
annotations: none low

Update an existing webhook endpoint (URL, subscribed events, active

url string events array timeout number isActive boolean webhookId string retryCount number description string
delete_webhook
annotations: none low

Permanently delete a webhook endpoint.

webhookId string
ping_webhook
annotations: none low

Send a test event to a webhook endpoint to verify it is reachable

webhookId string
list_customers
annotations: none low

List the merchant’s customers (auto-created from invoices) with

customerId string
get_customer
annotations: none low

Fetch a single customer by ID, including derived location when known.

customerId string
get_customer_stats
annotations: none low

Get a customer’s aggregate spend and invoice stats: total revenue

customerId string
update_customer
annotations: none low

Update a customer’s name, address, or phone number. Email cannot be

name string address string customerId string phoneNumber string
create_product
annotations: none low

Create a product the merchant can sell through a hosted checkout

name string currency enum isActive boolean askForName boolean description string askForAddress boolean askForPhoneNumber boolean
get_product
annotations: none low

Fetch a single product by ID (with a presigned image URL).

productId string
list_products
annotations: none low

List the merchant’s products with pagination and optional search.

name string image string price number currency enum isActive boolean productId string askForName boolean description string askForAddress boolean askForPhoneNumber boolean
update_product
annotations: none low

Update a product. Only the fields you pass are changed.

name string image string price number currency enum isActive boolean productId string askForName boolean description string askForAddress boolean askForPhoneNumber boolean
delete_product
annotations: none low

Delete a product.

productId string
list_wallets
annotations: none low

List the merchant’s crypto wallet configurations (DIRECT_WALLET /

get_wallet
annotations: none low

Fetch a single wallet configuration by ID.

walletId string
create_wallet
annotations: none low

Add a receiving wallet for a (cryptocurrency, network) pair. Pass

network enum isEnabled boolean walletType enum cryptocurrency enum derivationPath string requiredConfirmations number
update_wallet
annotations: none low

Update a wallet’s mutable config (address, xpub, enabled state,

xpub string address string walletId string isEnabled boolean derivationPath string requiredConfirmations number
delete_wallet
annotations: none low

Delete a wallet. Rejected if it still has active payments against it.

walletId string

Permissions 2

network Server uses network capabilities via: fetch()
medium
env_vars Server uses env_vars capabilities via: process.env
low

Scan Findings 64

low
Tool 'create_invoice' has no annotations annotation_checker · 100%
low
Tool 'get_invoice' has no annotations annotation_checker · 100%
low
Tool 'list_invoices' has no annotations annotation_checker · 100%
low
Tool 'cancel_invoice' has no annotations annotation_checker · 100%
low
Tool 'create_webhook' has no annotations annotation_checker · 100%
low
Tool 'list_webhooks' has no annotations annotation_checker · 100%
low
Tool 'update_webhook' has no annotations annotation_checker · 100%
low
Tool 'delete_webhook' has no annotations annotation_checker · 100%
low
Tool 'ping_webhook' has no annotations annotation_checker · 100%
low
Tool 'list_customers' has no annotations annotation_checker · 100%
low
Tool 'get_customer' has no annotations annotation_checker · 100%
low
Tool 'get_customer_stats' has no annotations annotation_checker · 100%
low
Tool 'update_customer' has no annotations annotation_checker · 100%
low
Tool 'create_product' has no annotations annotation_checker · 100%
low
Tool 'get_product' has no annotations annotation_checker · 100%
low
Tool 'list_products' has no annotations annotation_checker · 100%
low
Tool 'update_product' has no annotations annotation_checker · 100%
low
Tool 'delete_product' has no annotations annotation_checker · 100%
low
Tool 'list_wallets' has no annotations annotation_checker · 100%
low
Tool 'get_wallet' has no annotations annotation_checker · 100%
low
Tool 'create_wallet' has no annotations annotation_checker · 100%
low
Tool 'update_wallet' has no annotations annotation_checker · 100%
low
Tool 'delete_wallet' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: tsup@8.0.0 (GHSA-3mv9-4h5g-vhg3) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@1.5.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@1.5.0 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-22jm-h49p-29qw) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-46jr-4wx8-v453) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-6prh-2h8m-c8cw) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-6qxp-vccf-f47h) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-rvq5-wwqv-78pq) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@3.23.0 (GHSA-mrhx-c7xc-m3w5) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: create_invoice manifest_parser · 85%
info
Tool: get_invoice manifest_parser · 85%
info
Tool: list_invoices manifest_parser · 85%
info
Tool: cancel_invoice manifest_parser · 85%
info
Tool: create_webhook manifest_parser · 85%
info
Tool: list_webhooks manifest_parser · 85%
info
Tool: update_webhook manifest_parser · 85%
info
Tool: delete_webhook manifest_parser · 85%
info
Tool: ping_webhook manifest_parser · 85%
info
Tool: list_customers manifest_parser · 85%
info
Tool: get_customer manifest_parser · 85%
info
Tool: get_customer_stats manifest_parser · 85%
info
Tool: update_customer manifest_parser · 85%
info
Tool: create_product manifest_parser · 85%
info
Tool: get_product manifest_parser · 85%
info
Tool: list_products manifest_parser · 85%
info
Tool: update_product manifest_parser · 85%
info
Tool: delete_product manifest_parser · 85%
info
Tool: list_wallets manifest_parser · 85%
info
Tool: get_wallet manifest_parser · 85%
info
Tool: create_wallet manifest_parser · 85%
info
Tool: update_wallet manifest_parser · 85%
info
Tool: delete_wallet manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (2) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 272 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%