Provides integration with Stripe for payment processing, enabling product catalog, cart, checkout, and order tracking with multi-currency support.
Agent commerce protocol MCP — product catalog, cart management, checkout, order tracking
Agent commerce protocol MCP — product catalog, cart management, checkout, order tracking. MIT.
# Install via pip
pip install agent_commerce_payments_mcp
# Or install via Smithery
npx -y @smithery/cli@latest install agent-commerce-payments-mcp --client claudeRelated MCP server: Ecommerce AI MCP
Product catalog management
Cart & checkout
Stripe integration
x402 protocol support
Multi-currency
This MCP server is built with EU AI Act compliance built-in:
✅ Article 9 — Risk Management System
✅ Article 13 — Transparency & Instructions for Use
✅ Article 15 — Bias Detection & Testing
✅ Article 26 — FRIA Support (where applicable)
✅ Article 50 — AI Content Watermarking (where applicable)
Need help getting compliant? Book a free 15-min diagnostic →
Need custom development, SLA guarantees, or white-label deployment?
Pro: $99/mo — Full MCP suite + EU AI Act tracking
Enterprise: $499/mo — Custom dev + SLA + Dedicated support
View Pricing → | Contact Sales →
This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.
Domain | Purpose |
EU AI Act compliance marketplace | |
AI safety & monitoring | |
Sovereign AI platform | |
Legacy modernization |
MIT © CSOAI-ORG
Tier | Price | What you get | Stripe |
Smoke test | £1 | Signed sample MCP-Hardening report + Article 50 PDF | |
Quick Kit | £9 | EU AI Act Article 50 implementation guide (C2PA + EU-Icon) | |
Founder Call | £29 | 30-min 1-on-1 with the founder |
Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.
Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:
{
"mcpServers": {
"agent-commerce-payments-mcp": {
"command": "uvx",
"args": ["agent-commerce-payments-mcp"]
}
}
}Or: pip install agent-commerce-payments-mcp then run the agent-commerce-payments-mcp command (stdio transport).
Once configured, ask your assistant, for example:
"Use create_invoice to …"
"Use process_payment to …"
"Use escrow_funds to …"
Create a detailed invoice with line items, tax calculation, fees, and payment terms.
Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: from_agent (str): The from agent to analyze or process. to_agent (str): The to agent to analyze or process. amount (float): The amount to analyze or process. currency (str): The currency to analyze or process. description (str): The description to analyze or process. line_items (list): The line items to analyze or process. due_days (int): The due days to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| amount | Yes | ||
| api_key | No | ||
| currency | No | GBP | |
| due_days | No | ||
| to_agent | Yes | ||
| from_agent | Yes | ||
| line_items | No | ||
| description | No |
| Name | Required | Description |
|---|---|---|
| result | Yes |
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description internally contradicts itself: it claims to create an invoice but also states it is read-only with no side effects. This is a serious inconsistency that misleads the agent about the tool's true behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is lengthy and repetitive, with the 'Behavioral Transparency' section echoing information already in 'Behavior'. It lacks front-loading and contains irrelevant generic content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite providing details on rate limits and error handling, the description fails to explain the actual invoice creation process, output format, or side effects, leaving critical gaps for a tool that claims to create an invoice.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All parameter descriptions in the 'Args' section are generic placeholders ('The X to analyze or process') that do not add any meaning beyond the parameter names, offering zero value given 0% schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description initially states 'Create a detailed invoice', which matches the name, but later contradicts it by claiming the tool is read-only and produces no side effects, undermining purpose clarity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'When to use' section suggests using the tool for structured analysis or classification, which is not aligned with invoice creation, and fails to differentiate from siblings like process_payment or release_escrow.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Place funds in escrow between two agents with conditions and expiry.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: agent_a (str): The agent a to analyze or process. agent_b (str): The agent b to analyze or process. amount (float): The amount to analyze or process. currency (str): The currency to analyze or process. condition (str): The condition to analyze or process. expiry_hours (int): The expiry hours to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| amount | Yes | ||
| agent_a | Yes | ||
| agent_b | Yes | ||
| api_key | No | ||
| currency | No | GBP | |
| condition | No | ||
| expiry_hours | No |
| Name | Required | Description |
|---|---|---|
| result | Yes |
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Although the description includes a detailed 'Behavioral Transparency' section, it incorrectly claims the tool is read-only and idempotent, which contradicts the escrow action. This misleads the agent about side effects and state changes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is repetitive (e.g., the 'Behavior' bullet list and the 'Behavioral Transparency' section overlap) and contains boilerplate that does not earn its place. Shorter, tool-specific content would be more effective.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having an output schema and sibling tools, the description fails to explain how the escrow works, what the output contains, or how to use the tool correctly. The generic analysis framing is incomplete for a financial escrow operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema description coverage, the description must compensate but only provides generic, unhelpful descriptions like 'The agent a to analyze or process.' No specifics about parameters like 'condition', 'expiry_hours', or 'currency' in the context of escrow are given.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The first sentence 'Place funds in escrow between two agents with conditions and expiry' clearly indicates a financial action, but subsequent statements claim it is 'read-only and stateless' producing 'analysis output', creating a major contradiction that undermines purpose clarity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'When to use' and 'When NOT to use' sections are generic and seem copied from a different tool (e.g., 'structured analysis or classification'). They do not differentiate from sibling tools like 'release_escrow' or provide context for using this escrow tool specifically.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Get payment history for an agent with filtering, totals, and transaction summary.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: agent_id (str): The agent id to analyze or process. status_filter (str): The status filter to analyze or process. limit (int): The limit to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| api_key | No | ||
| agent_id | Yes | ||
| status_filter | No |
| Name | Required | Description |
|---|---|---|
| result | Yes |
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It thoroughly details side effects (read-only, stateless), authentication (none for basic), rate limits (10/day free), error handling (structured errors), idempotency, and data privacy. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with purpose but becomes verbose with repeated information (e.g., behavioral traits listed twice in different sections). Could be more concise without losing clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 4 parameters and an output schema, the description explains return values (structured errors) and covers authentication, rate limits, and idempotency. Missing detailed parameter descriptions but overall sufficient for context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, but the parameter list in description merely repeats names with generic 'to analyze or process' for each. This adds no meaningful semantics beyond the schema itself. For instance, status_filter and limit are not explained.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Get payment history for an agent with filtering, totals, and transaction summary.' It uses specific verbs and resources, and the tool is distinct from mutation siblings like create_invoice and process_payment.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Includes explicit 'When to use' and 'When NOT to use' sections. However, the guidance is somewhat generic (e.g., 'structured analysis') instead of being specific to payment history. Still provides clear context on when it is appropriate.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Process payment for an invoice with fraud checks, fee calculation, and settlement.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: invoice_id (str): The invoice id to analyze or process. payment_method (str): The payment method to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| api_key | No | ||
| invoice_id | Yes | ||
| payment_method | No | agent_balance |
| Name | Required | Description |
|---|---|---|
| result | Yes |
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The Behavioral Transparency section is detailed, covering side effects, authentication, rate limits, error handling, idempotency, and data privacy. However, the core contradiction between the tool's name (process_payment) and its claimed read-only nature undermines trust in the description.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is verbose with redundant sections (e.g., 'Behavior' and 'Behavioral Transparency' overlap). While front-loaded with purpose, the structure could be tightened to reduce repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite detailed behavioral aspects, the description fails to coherently explain the tool's core functionality, leaving ambiguity about whether it actually processes payments or performs read-only analysis. This gap is critical given the tool's name and expected use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, and the description's 'Args' section provides only generic phrases like 'The invoice id to analyze or process,' adding little meaning beyond the parameter names. No allowed values or constraints are specified for payment_method.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description initially claims 'Process payment for an invoice with fraud checks, fee calculation, and settlement,' but later contradicts itself by stating 'This tool is read-only and stateless — it produces analysis output without modifying any external systems.' This fundamental inconsistency makes the tool's actual function unclear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'When to use' and 'When NOT to use' sections are generic and do not specifically guide selection between this tool and siblings like escrow_funds or release_escrow. The guidance about 'structured analysis' does not align with the payment processing implied by the name.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Release escrowed funds to the designated agent after condition verification.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: escrow_id (str): The escrow id to analyze or process. to_agent (str): The to agent to analyze or process. release_reason (str): The release reason to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| api_key | No | ||
| to_agent | Yes | ||
| escrow_id | Yes | ||
| release_reason | No |
| Name | Required | Description |
|---|---|---|
| result | Yes |
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The behavioral transparency section is detailed but describes an idempotent, read-only analysis tool. If the tool actually releases escrowed funds (as implied by the name), these claims are false. The description does not reconcile the contradiction or provide accurate side effects, authentication requirements, or error handling for a fund release operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is structured into sections (Behavior, When to use, etc.), but it is overly long due to repetition (e.g., each parameter has the same generic phrase) and inclusion of irrelevant analysis details. It could be half the length without losing clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the absence of annotations and the existence of an output schema (not described), the description fails to explain the tool's role in the escrow workflow, what the release actually does (e.g., changes state, triggers events), how to handle errors in a real release, or how it differs from siblings like escrow_funds or process_payment. The description is fundamentally incomplete for a mutation tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema description coverage, the description must explain parameters. However, it only copies parameter names with the generic suffix 'to analyze or process', e.g., 'The escrow id to analyze or process.' This adds no meaning beyond the schema titles and fails to clarify what each parameter does in the context of releasing escrow.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The first sentence 'Release escrowed funds to the designated agent after condition verification' clearly states a mutation operation, but the subsequent 'Behavior' section immediately contradicts it by claiming the tool is 'read-only and stateless' and produces analysis output. This internal contradiction makes the actual purpose ambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'When to use' and 'When NOT to use' sections describe an analysis/classification tool, not a fund release tool. They are entirely mismatched with the tool name and the first sentence. No guidance is given on when to use this instead of siblings like escrow_funds or process_payment.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool names are distinct (create_invoice, escrow_funds, etc.), but the descriptions are nearly identical and contain contradictory claims about being read-only, which could confuse an agent trying to differentiate their actual capabilities.
Most tools use a verb_noun pattern, but payment_history breaks this pattern with a noun_noun structure, indicating minor inconsistency.
With 5 tools covering invoicing, escrow, payment processing, and history, the count is well-scoped for a payments MCP server.
The descriptions claim all tools are read-only and stateless, which fundamentally contradicts the expected actions of creating invoices, processing payments, and managing escrow, leaving major gaps in a realistic payments workflow.
Agent Orchestrator MCP Server by MEOK AI Labs
Agent Negotiation MCP Server by MEOK AI Labs
Agent Delegation MCP Server by MEOK AI Labs
Agent Commerce Protocol MCP — bridges Stripe ACP + Google AP2 + Coinbase x402 for agent payments
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/CSOAI-ORG/agent-commerce-payments-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server
