Iron Law

NO STRIPE API CALL WITHOUT WEBHOOK VERIFICATION — every payment mutation must have a corresponding webhook handler; never trust client-side payment confirmation alone

Stripe Payment Integration Skill

MCP Server

The Stripe MCP server is configured in .mcp.json using the official @stripe/mcp npm package (stdio transport).

Setup command (already configured in .mcp.json):

claude mcp add stripe -- npx -y @stripe/mcp --tools=all --api-key=${STRIPE_SECRET_KEY}

Alternative — Remote HTTP mode (OAuth, no API key in config):

claude mcp add --transport http stripe https://mcp.stripe.com