← Back to search

io.github.CSOAI-ORG/meok-stripe-acp-checkout-mcp

CSOAI-ORG streamable_http Scanned 21d ago

MEOK Stripe ACP Checkout MCP — ChatGPT shopping bridge. Issues + verifies + signs Stripe Agentic

MCP Registry ↗
B
89.9 / 100

Versions

No versions found.

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

list_acp_catalogue
annotations: none low

Scaffold for fetching a merchant's ACP product catalogue. Args: merchant_id: ACP merchant identifier. category: Optional category filter. Returns: {merchant_id, products, fetch_hint}

category string merchant_id str
create_checkout_intent
annotations: none low

Create a Stripe ACP checkout intent. Args: cart: List of {product_id, qty, unit_amount_minor} dicts. customer_did: W3C DID of the customer. merchant_id: ACP merchant identifier. currency: ISO 4217 currency code (default GBP). ap2_mandate_id: Optional AP2 mandate from meok-ap2-mandate-mcp. shipping_address: Optional ship-to address dict. Returns: {intent_id, total_minor, currency, signature}

cart string currency str merchant_id str customer_did str ap2_mandate_id string shipping_address string
verify_intent_against_mandate
annotations: none low

Cross-check a Stripe ACP intent against an AP2 mandate. Args: intent_id: From create_checkout_intent(). mandate_id: From meok-ap2-mandate-mcp issue_mandate(). mandate_remaining_eur: Remaining cap on the mandate. Returns: {allowed, reason, total_in_eur_estimate}

intent_id str mandate_id str mandate_remaining_eur float
request_delegated_payment
annotations: none low

Request Stripe-hosted delegated payment for an ACP intent. Args: intent_id: From create_checkout_intent(). payment_method_id: Stripe payment method ID (pm_xxx). sca_method: PSD2 SCA method (see meok-ap2-mandate-mcp). Returns: {redirect_url, intent_id, status}

intent_id str sca_method str payment_method_id str
emit_signed_receipt
annotations: none low

Emit an HMAC-signed receipt after successful charge. Args: intent_id: From create_checkout_intent(). stripe_charge_id: Stripe charge ID (ch_xxx). Returns: {receipt_id, signature, verify_url}

intent_id str stripe_charge_id str
list_acp_partners
annotations: none low

Return the known list of ACP-enabled merchants (refresh quarterly).

Permissions 3

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: open(), os
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 21

low
Tool 'list_acp_catalogue' has no annotations annotation_checker · 100%
low
Tool 'create_checkout_intent' has no annotations annotation_checker · 100%
low
Tool 'verify_intent_against_mandate' has no annotations annotation_checker · 100%
low
Tool 'request_delegated_payment' has no annotations annotation_checker · 100%
low
Tool 'emit_signed_receipt' has no annotations annotation_checker · 100%
low
Tool 'list_acp_partners' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: list_acp_catalogue manifest_parser · 90%
info
Tool: create_checkout_intent manifest_parser · 90%
info
Tool: verify_intent_against_mandate manifest_parser · 90%
info
Tool: request_delegated_payment manifest_parser · 90%
info
Tool: emit_signed_receipt manifest_parser · 90%
info
Tool: list_acp_partners manifest_parser · 90%
info
Required env vars (2) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%