Stripe

Use the installed stripe CLI. Start with stripe status. If it reports not_connected, run stripe authorize-url and share only the returned connect_url with the user.

OAuth uses Dynamic Client Registration and PKCE through authd. Stripe issues a per-VM public client, so no shared credential enters Muse and credentials must never be requested in chat.

Run stripe list-tools to inspect the live provider catalogue and schemas, then call an advertised tool with:

stripe call-tool --name <tool> --arguments-json '<json-object>'