Stripe Agent Toolkit MCP Server

mcp.stripe.com · Agent-Commerce Infrastructure modeIntegrated

Last probed 2026-08-09 23:47 UTC · Provisional

Stripe Agent Toolkit MCP Server — Official remote MCP server exposing Stripe payments/billing tools to agents.

69 / 100triageInterrupt Score(range 38–88 · 10 properties unassessed)How much automated use this service interrupts — the badge-driving metric. Unassessed properties are provisionally scored at 50%; evidence-graded successes at 25%.

Custody / RiskUnknown

ConfidenceProvisional

Verdict: Partially — an AI agent can use Stripe Agent Toolkit MCP Server, but activate is blocked — A CAPTCHA blocks automated signup.

DiscoverEasy
ActivateBlocked
OperateNot assessedgated by Activate
ManageNot assessedgated by Activate

Capability parity

Each stage answers one question about what an agent can do unattended. Stages are ordered by the credential-gateway dependency: Activate issues the keys that unlock Operate and Manage.

Discover

Can an agent find and read it, no account?

Easy

Be found by a retrieval agentEasy
Retrieval access present.
Evidence
Path tried
robots.txt / sitemap / discovery headers
Where it stalled
completed
Evidence tier
Tier 1 (unauth probe)
Verification
Evidence-only — graded from passive signal, not live-verified.
Backing checks
retrieval_bot_access, sitemap_xml, link_header_discovery
Read what it does and how to use itEasy
Machine-readable docs present.
Evidence
Path tried
llms.txt / AGENTS.md / schema.org / docs
Where it stalled
completed
Evidence tier
Tier 1 (unauth probe)
Verification
Evidence-only — graded from passive signal, not live-verified.
Backing checks
llms_txt, markdown_content, content_signals
Read pricing & limits without loginNot assessed

Activate

Can an agent sign up and walk away with the keys it needs?

Blocked

Create an account self-serveBlocked
A CAPTCHA blocks automated signup.
CAPTCHA / bot-challenge blocks this.
Evidence
Path tried
signup flow
Where it stalled
verification step
Evidence tier
Tier 1 (unauth probe)
Verification
Evidence-only — graded from passive signal, not live-verified.
- CAPTCHA / bot-challengeSignupSignup page embeds a hcaptcha CAPTCHA/bot-challenge (matched: script:https://js.hcaptcha.com/1/api.js?render=explicit&onload=hcaptchaOnLoad&recaptchacompat=off).
Obtain an API / MCP access credentialEasy
Self-serve credential path detected.
Evidence
Path tried
docs → key issuance
Where it stalled
completed
Evidence tier
Tier 1 (unauth probe)
Verification
Evidence-only — graded from passive signal, not live-verified.
Backing checks
api_key_self_serve
Obtain a management / admin keyNot assessed
Accept the terms without a bot-banEasy
No bot-prohibition signal found.
Evidence
Path tried
ToS / policy scan
Where it stalled
completed
Evidence tier
Tier 0 (passive scan)
Verification
Evidence-only — graded from passive signal, not live-verified.

Operate

Can an agent do the service's actual jobs — call, transact, pay?

Not assessed

Gated by Activate — the credential this stage needs isn't issued unattended, so these rows may be unreachable even where they read Easy.

Call the primary service over MCP / APINot assessed
Gated by Activate — the credential this needs isn't issued unattended.
Complete a transaction / checkoutNot applicable
Integrated tool — the API call is the transaction, no separate checkout.
Gated by Activate — the credential this needs isn't issued unattended.
Pay via an agent rail (x402 / ACP / AP2)Not assessed
Gated by Activate — the credential this needs isn't issued unattended.

Manage

Can an agent administer the account and provision resources?

Not assessed

Gated by Activate — the credential this stage needs isn't issued unattended, so these rows may be unreachable even where they read Easy.

Provision / scale / tear down a serviceNot assessed
Gated by Activate — the credential this needs isn't issued unattended.
Change account details / set budget / rotate keysNot assessed
Gated by Activate — the credential this needs isn't issued unattended.
View usage & billingNot assessed
Gated by Activate — the credential this needs isn't issued unattended.
Cancel / export / delete (offboard)Not assessed
Gated by Activate — the credential this needs isn't issued unattended.

Findings

How scoring works →

Interrupt tier: Moderate-Interrupt — derived from 1 finding; interrupt score 69 / 100 — the badge-driving metric. (range 38–88 · 10 unassessed)

Every tool starts at 100. Each interrupt found subtracts a penalty of base weight × timing × hardness × evidence — the multiplier values below come from the same rubric tables the score is computed with. New snapshots also provisionally subtract 50% of the full worst-case tax for each unassessed property and 25% for evidence-graded successes not live-verified by Tier 2.

Property coverage

A check only counts as clean when a probe tier capable of detecting that interrupt actually ran and found nothing. Not tested ≠ clean.

Property	Stage	State	Evidence	Required
CAPTCHA / bot-challenge	activate	failed	Active finding — itemized in the penalty matrix below. Tier 0 assesses this property.	no
Email OTP verification	activate	unassessed	Tier 1 (unauth probe) ran but did not gather enough evidence to claim clean. Tier 1 assesses this property.	no
SMS / phone OTP verification	activate	unassessed	Tier 1 (unauth probe) ran but did not gather enough evidence to claim clean. Tier 1 assesses this property.	no
Mandatory phone verification call	activate	unassessed	No probe tier that can detect this has run yet — unknown, not clean. Tier 2 assesses this property.	no
Mailed physical code (postal)	activate	unassessed	No probe tier that can detect this has run yet — unknown, not clean. Tier 2 assesses this property.	no
“Contact sales” wall (no self-serve path)	activate	unassessed	No probe tier that can detect this has run yet — unknown, not clean. Tier 2 assesses this property.	no
Manual approval queue	activate	unassessed	No probe tier that can detect this has run yet — unknown, not clean. Tier 2 assesses this property.	no
Rate-limit-triggered manual review	manage	unassessed	No probe tier that can detect this has run yet — unknown, not clean. Tier 2 assesses this property.	no
One-time account / payment-method provisioning	manage	unassessed	No probe tier that can detect this has run yet — unknown, not clean. Tier 2 assesses this property.	no
Identity / KYC verification	activate	unassessed	No probe tier that can detect this has run yet — unknown, not clean. Tier 2 assesses this property.	no
Crypto wallet / key-custody setup	operate	unassessed	No probe tier that can detect this has run yet — unknown, not clean. Tier 2 assesses this property.	no
ToS clause banning automated/bot access	discover	success	None found — checked at Tier 0 (passive scan) (evidence-graded; not yet live-verified by a Tier 2 probe) Tier 0 assesses this property.	no
Mandatory redirect to vendor’s own site	operate	success	None found — checked at Tier 1 (unauth probe) (evidence-graded; not yet live-verified by a Tier 2 probe) Tier 1 assesses this property.	no
SSO-only signup, no API-key issuance	activate	success	None found — checked at Tier 1 (unauth probe) (evidence-graded; not yet live-verified by a Tier 2 probe) Tier 1 assesses this property.	no
No Machine Interface	operate	success	None found — checked at Tier 1 (unauth probe) (evidence-graded; not yet live-verified by a Tier 2 probe) Tier 1 assesses this property.	yes

Interrupt found	Base weight	× Timing	× Hardness	× Evidence	= Penalty
Starting score					100
CAPTCHA / bot-challengeSignupSignup page embeds a hcaptcha CAPTCHA/bot-challenge (matched: script:https://js.hcaptcha.com/1/api.js?render=explicit&onload=hcaptchaOnLoad&recaptchacompat=off).	6	×1one-time setup	×2.5hard	×0.8Tier 1 (unauth probe)	−12
Total penalty					−12
Full unknown tax 108.2 — capped at 25 (point score uses 50% of the capped value)					−108.2
Evidence-graded tax (successes not live-verified by a Tier 2 probe) 139.2 — capped at 25 (point score uses 25% of the capped value)					−139.2
Raw score = 100 − 12 = 88 Point score = 88 − 50% × 25 − 25% × 25 = 69.3 → 69					69

What would make this Easy

One concrete change per blocker found. These are the diffs between this listing's current parity and an unattended agent path.

Activate — CAPTCHA / bot-challengeDrop the CAPTCHA, or gate it behind a documented bot-detection signal a well-behaved agent can pass.

How we scored this

Confidence: Provisional (0.55) — Based on Tier 0/1 evidence only (passive checks, no live transaction attempt) — treat the number as a triage signal, not a verified outcome.
Machine-Readability sub-score: 40 / 100 (a separate integration-ease signal — it never enters the Interrupt Score or badge).
Some capability stages are not yet assessed — shown plainly in the spine above, never as a pass.
Rubric, tiers, confidence model, and badge thresholds →

Machine-readability checks 40 / 100

Four check groups, equal weight: machine interfaces, browsing efficiency, element discoverability, and discovery/agent access. Each check carries an evidence grade (proven / plausible / emerging) — an honesty label that never weights the score. What these mean →

llms.txtemergingFound — docs.stripe.com/llms.txt (91.0 KB, 527 links)
llms-full.txtemergingNot provided
AGENTS.mdemergingNot provided
A2A agent cardemergingNot provided
MCP server (well-known or official registry)plausibleNot provided
OpenAPI/Swagger specplausibleNot provided
Rate-limit headersplausibleNot provided
Structured JSON error responsesplausibleNot provided
OAuth authorization-server metadata (RFC 8414)provenNot provided
API catalog (RFC 9727) (emerging)emergingNot provided
Agent-payment discovery (x402 / UCP) (emerging)emergingNot provided
Lean HTML transfer sizeplausibleNot provided
Manageable DOM sizeplausible1070 DOM nodes (threshold 1500)
High content-to-markup densityplausibleNot provided
Content readable without JS executionprovenraw HTML holds 92% of rendered text (4421 vs 4794 chars; threshold 40%)
Clean-content alternate (RSS/Atom/feed/markdown)plausibleNot provided
Serves markdown on Accept: text/markdownplausiblereturned text/markdown; charset=utf-8
Interactive elements are semanticplausibleNot provided
Form fields have accessible namesplausible2/2 named (100%)
Inputs carry autocomplete hintsplausibleNot provided
WebMCP tools (modelContext API)emergingNot provided
AI retrieval/search fetchers allowed (robots.txt)provenno retrieval-fetcher blocks in robots.txt
Sitemap (indexability)plausibleFound — docs.stripe.com/sitemap.xml
schema.org JSON-LD in raw HTMLplausibleNot provided
Content-Signal directives (robots.txt)emergingai-train=yes, search=yes, ai-input=yes
Web Bot Auth key directory (emerging)emergingNot provided
Discovery Link headers on homepage (emerging)emergingrel=service-meta
robots.txt AI-crawler accessplausibleno AI-crawler blocks in robots.txt
Unauthenticated API error is structured JSONplausibleFound — api.stripe.com/ (HTTP 404)
Unauthenticated API returns auth guidance (401/403 or documented)plausibleNot provided
API exposes rate-limit headersplausibleNot provided
API key obtainable without human interactionplausibleAPI documentation host reachable: https://docs.stripe.com/

Evidence & history

Last probed 2026-08-09 23:47 UTC. The raw JSON is the archival record.

Date	Score	Badge	Rubric version
2026-08-09 23:47 UTC	69	Moderate-Interrupt (current)	[email protected]
2026-08-09 23:47 UTC	53	Moderate-Interrupt	[email protected]
2026-08-09 17:13 UTC	51	Moderate-Interrupt	[email protected]
2026-08-09 05:24 UTC	58	Moderate-Interrupt	[email protected]
2026-08-09 05:24 UTC	58	Moderate-Interrupt	[email protected]
2026-08-09 05:16 UTC	58	Moderate-Interrupt	[email protected]
2026-08-09 05:16 UTC	58	Moderate-Interrupt	[email protected]
2026-08-09 05:13 UTC	58	Moderate-Interrupt	[email protected]
2026-08-09 05:13 UTC	88	Low-Interrupt	[email protected]
2026-08-09 03:14 UTC	88	Low-Interrupt	[email protected]
2026-08-09 01:48 UTC	88	Low-Interrupt	[email protected]
2026-08-09 01:45 UTC	88	Low-Interrupt	[email protected]
2026-07-10 07:16 UTC	100	Low-Interrupt	[email protected]

Alternatives in Agent-Commerce Infrastructure

Other Agent-Commerce Infrastructure tools in the same mode (integrated), ranked by Overall LLM-Friendliness (the mean of Interrupt Score and Machine-Readability) — comparable to this listing because they share its usage mode.

Embed this rating

Copy this snippet to display your Interrupt Index seal on your site — the seal image and link stay in sync with your latest probe automatically. Pick the variant that matches your site’s theme.

Light (default)

<a href="https://interruptindex.com/tools/stripe-agent-toolkit-mcp-server"><img src="https://interruptindex.com/badge/stripe-agent-toolkit-mcp-server.svg" alt="Stripe Agent Toolkit MCP Server — Interrupt Index agent-readiness rating" height="64"></a>

Dark

<a href="https://interruptindex.com/tools/stripe-agent-toolkit-mcp-server"><img src="https://interruptindex.com/badge/stripe-agent-toolkit-mcp-server.svg?theme=dark" alt="Stripe Agent Toolkit MCP Server — Interrupt Index agent-readiness rating" height="64"></a>