sumup-mcp
Warn
Audited by Snyk on Nov 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill provides instructions for wiring the SumUp MCP server, which offers tool-based access to SumUp APIs including creating checkouts (direct financial operations such as "Create a sandbox checkout for 12.34 EUR"). Access to these APIs is gated by OAuth or API-key authentication (established control via OAuth authorization and validated API credentials).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata