Stripe MCP Integration

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill integrates with official Stripe infrastructure. The Model Context Protocol (MCP) server URL (https://mcp.stripe.com/v1/sse) and the npm package (@stripe/mcp) are verified official resources from Stripe.
  • [EXTERNAL_DOWNLOADS]: The documentation provides standard installation procedures for the Stripe CLI from packages.stripe.dev and the MCP server via npm. These are well-known, trusted sources for the intended functionality.
  • [COMMAND_EXECUTION]: The skill includes instructions for common developer tasks such as installing CLI tools and running test scripts. These are documented for local development and testing purposes.
  • [CREDENTIALS_UNSAFE]: The skill actively promotes secure credential management by instructing users to use environment variables (STRIPE_SECRET_KEY) and secrets managers instead of hardcoding sensitive API keys.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 04:20 PM
Security Audit — agent-trust-hub — Stripe MCP Integration