FinCobra MCP
FinCobra MCP — криптовалютный checkout для Claude, Cursor и Codex
Model Context Protocol (MCP) — сервер для криптовалютного checkout и платежей FinCobra. Создавайте хостируемые инвойсы для BTC, USDT и USDC (расчётные активы берутся из платёжных методов панели управления; суммы указаны в USD). Работает с Claude Code, Cursor и Codex. Доступ к Watchlist — только для чтения. Пока нет на npm — установите из GitHub.
Документация: FinCobra Checkout MCP
fincobra-mcp 0.1.0 ещё не опубликован в npm. Пока не опубликован, устанавливайте из GitHub:
npx -y github:dexstandard/fincobra-mcpЗафиксируйте релиз из исходного кода с помощью npx -y github:dexstandard/fincobra-mcp#v0.1.0. Требуется Node.js 20+.
Checkout: создание хостируемого платёжного инвойса и чтение его статуса
Watchlist: список источников только для чтения и ручная разбивка чистой стоимости
Это не платёжная платформа и не API для записи в Watchlist.
Инструменты (v0)
Checkout
Инструмент | Что делает |
| Создаёт инвойс в USD. Возвращает |
| Находит известный инвойс по |
Инструмента list_invoices нет. API-ключи Checkout не могут выводить список инвойсов.
Суммы инвойсов указаны в USD. Расчётные активы берутся из платёжных методов панели управления:
Сеть | Активы |
Bitcoin (xpub) | BTC |
Ethereum mainnet | USDT, USDC |
Solana | USDT, USDC |
Arbitrum One | USDC |
Base | USDC |
Watchlist (только для чтения)
Инструмент | Что делает |
| Итоги по ручным банкам / наличным / недвижимости в USD. |
| Кошельки, биржи и ручные активы из существующих list API. |
| Один источник по id ( |
У Watchlist нет публичного API-ключа. Аутентификация — это cookie session Identity, используемая веб-приложением Watchlist.
Банки, наличные и недвижимость — это ручные записи продукта, а не живые банковские потоки или потоки данных о правах собственности. Актуальные балансы криптовалют в USD вычисляются в интерфейсе Watchlist и отсутствуют в list API. Сервер не выдумывает итог cryptoUsd.
Инструменты Watchlist не добавляют кошельки, не редактируют банки, не изменяют биллинг и не экспортируют налоги.
Related MCP server: Yolfi MCP Server
Переменные окружения
Переменная | Обязательность | Описание |
| Один из двух модулей | API-ключ панели управления Checkout ( |
| Нет | Оригин Checkout. По умолчанию — |
| Один из двух модулей | Значение cookie |
| Нет | Оригин Watchlist. По умолчанию — |
Настройте Checkout, Watchlist или оба. Инструменты для отсутствующего модуля возвращают ошибку конфигурации.
Оригины для разработки: https://dev.fincobra.com и https://watch.dev.fincobra.com.
Cursor
Добавьте в .cursor/mcp.json (проект) или ~/.cursor/mcp.json (пользователь):
{
"mcpServers": {
"fincobra": {
"command": "npx",
"args": ["-y", "github:dexstandard/fincobra-mcp"],
"env": {
"FINCOBRA_CHECKOUT_API_KEY": "fc_live_...",
"FINCOBRA_CHECKOUT_BASE_URL": "https://fincobra.com",
"FINCOBRA_WATCHLIST_SESSION_TOKEN": "<session-cookie-value>",
"FINCOBRA_WATCHLIST_BASE_URL": "https://watch.fincobra.com"
}
}
}
}Claude Code
claude mcp add fincobra \
--env FINCOBRA_CHECKOUT_API_KEY=fc_live_... \
--env FINCOBRA_WATCHLIST_SESSION_TOKEN=<session-cookie-value> \
-- npx -y github:dexstandard/fincobra-mcpИли добавьте тот же объект mcpServers в .mcp.json / ~/.claude.json.
Codex
codex mcp add fincobra \
--env FINCOBRA_CHECKOUT_API_KEY=fc_live_... \
--env FINCOBRA_WATCHLIST_SESSION_TOKEN=<session-cookie-value> \
-- npx -y github:dexstandard/fincobra-mcpИли в ~/.codex/config.toml:
[mcp_servers.fincobra]
command = "npx"
args = ["-y", "github:dexstandard/fincobra-mcp"]
[mcp_servers.fincobra.env]
FINCOBRA_CHECKOUT_API_KEY = "fc_live_..."
FINCOBRA_WATCHLIST_SESSION_TOKEN = "<session-cookie-value>"Запуск локально
npm install
FINCOBRA_CHECKOUT_API_KEY=fc_live_... \
FINCOBRA_WATCHLIST_SESSION_TOKEN=... \
npm startПроцесс общается по MCP через stdio. Не выводите журналы приложения в stdout.
Смоук-тест
FINCOBRA_CHECKOUT_API_KEY=fc_live_... \
FINCOBRA_WATCHLIST_SESSION_TOKEN=... \
npm run smokeМодульные тесты имитируют API и не требуют учётных данных:
npm testАутентификация
Модуль | Учётные данные | Заголовок / cookie |
Checkout | API-ключ панели управления ( |
|
Watchlist | Cookie сессии Identity ( |
|
Скопируйте cookie session Watchlist из браузера, в котором выполнен вход (DevTools → Application → Cookies). Храните ключи и токены сессии в окружении MCP-сервера, а не в чате.
API
Checkout:
POST /api/checkout/invoicesGET /api/checkout/invoices/:idАутентификация:
X-Api-Key
Watchlist:
GET /api/watchlist/walletsGET /api/watchlist/exchangesGET /api/watchlist/manual-assetsGET /api/watchlist/fx-ratesАутентификация:
Cookie: session=...
Отправляйте плательщика на paymentUrl. Считайте confirmed и paid_out_of_band оплаченными. Считайте payment_detected ожидающим оплаты, если только вы не принимаете неподтверждённые криптовалютные платежи.
Лицензия
Available Tools
5 toolscreate_invoiceCreate Checkout invoiceA
Create a FinCobra Checkout invoice in USD and return the hosted payment URL. Payment methods (Bitcoin, Ethereum USDT/USDC, Solana USDT/USDC, Arbitrum One USDC, Base USDC) are those enabled in the merchant dashboard.
| Name | Required | Description | Default |
|---|---|---|---|
| amountUsd | Yes | Invoice amount in USD. Minimum 0.01. Settlement coins and chains come from the merchant Checkout payment methods, not this field. | |
| description | No | Product or service description shown on the invoice. | |
| customerEmail | No | Customer email for reconciliation. | |
| merchantReference | No | Your order or internal reference. |
Output Schema
| Name | Required | Description |
|---|---|---|
| id | Yes | |
| status | Yes | |
| amountUsd | Yes | |
| paymentUrl | Yes | |
| productName | Yes | |
| paymentCoverage | Yes | |
| merchantReference | Yes | |
| receivedAmountUsd | Yes | |
| confirmedAmountUsd | Yes | |
| remainingAmountUsd | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses the core side effect (creates an invoice), the return value (hosted payment URL), and an important behavioral constraint (payment methods come from the merchant dashboard, not from parameters). This adds meaningful context beyond the annotations, which only indicate readOnly, idempotent, and destructive hints are all false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no filler. The primary action and return value are front-loaded, and the payment-method caveat is included compactly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a create operation with a 100%-covered schema, an output schema, and non-destructive annotations, the description and schema together give an agent everything needed to invoke the tool correctly. The key operational fact—that payment methods come from the merchant dashboard—is explicitly stated.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents every parameter, including the minimum amount and field purposes. The description adds no new parameter-level meaning beyond stating that the invoice is in USD and that payment methods are dashboard-controlled.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: 'Create a FinCobra Checkout invoice in USD' and clearly names the return value ('hosted payment URL'). This distinguishes it from sibling tools like get_invoice and list_sources, which are retrieval operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly implies this tool is for creating checkout invoices and explains that payment methods are controlled by the merchant dashboard rather than caller input. It does not explicitly say 'use this instead of get_invoice', but the creation-versus-read distinction makes the intended use clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_invoiceGet Checkout invoiceARead-onlyIdempotent
Look up a known FinCobra Checkout invoice by id. Returns status, hosted payment URL, and amounts.
| Name | Required | Description | Default |
|---|---|---|---|
| invoiceId | Yes | Invoice id returned by create_invoice. |
Output Schema
| Name | Required | Description |
|---|---|---|
| id | Yes | |
| status | Yes | |
| amountUsd | Yes | |
| paymentUrl | Yes | |
| productName | Yes | |
| paymentCoverage | Yes | |
| merchantReference | Yes | |
| receivedAmountUsd | Yes | |
| confirmedAmountUsd | Yes | |
| remainingAmountUsd | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, covering the safety profile. The description adds behavioral value by specifying the returned data (status, URL, amounts), which is not expressed in the annotations. No contradictions or undisclosed side effects are present.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that front-loads the core action ('Look up'), specifies the resource, and lists the key outputs. Every word earns its place, with no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a simple single-parameter read operation, the annotations fully cover its side-effect profile, an output schema exists to describe return values, and the description states the essential return fields. Nothing material is missing for an agent to select and invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% — the only parameter, invoiceId, is already documented with 'Invoice id returned by create_invoice.' The description adds no additional parameter meaning beyond saying lookup is by id, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Look up') and a specific resource ('a known FinCobra Checkout invoice by id'), clearly distinguishing it from sibling tools like create_invoice or list_sources. It also states the key return contents (status, hosted payment URL, amounts), leaving no ambiguity about the tool's function.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'a known invoice by id' makes it clear this tool is for retrieving an existing invoice, not for creating or listing. It implies the invoice id comes from a prior create_invoice call, which sets context. However, it does not explicitly name alternatives or exclusion conditions, so it stops short of full guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_net_worthGet Watchlist net worthARead-onlyIdempotent
Read Watchlist net worth from existing list APIs. Banks, cash, and property are manual entries. Live crypto USD balances are not on the list API and come back as null.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| notes | Yes | |
| cashUsd | Yes | |
| banksUsd | Yes | |
| cryptoUsd | Yes | |
| propertyUsd | Yes | |
| sourceCounts | Yes | |
| manualTotalUsd | Yes | |
| unpricedManualAssetCount | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, and non-destructive behavior. The description adds valuable context beyond those annotations by revealing that banks, cash, and property are manual entries and that live crypto USD balances are null on the list API. This prepares the agent for null values and the nature of the underlying data.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no filler. The first sentence front-loads the core purpose and data source, and the second provides essential caveats about manual entries and null crypto balances. Every sentence contributes useful information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no parameters, a read-only annotation set, and an output schema present, the description is complete for practical use. It explains the two most important behavioral caveats — manual entries and null crypto values — that an agent would need to interpret results correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters, so the schema already fully covers input semantics. The description is not required to add parameter details, and it doesn't attempt to invent any — the baseline of 4 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Read') and resource ('Watchlist net worth'), and clarifies that it aggregates from existing list APIs. This makes the tool's purpose immediately distinguishable from invoice and source siblings like get_invoice and list_sources.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this is the tool to call when the agent needs a watchlist net worth figure, and it gives caveats about manual entries and crypto nulls. However, it does not explicitly state when to prefer this over alternatives such as list_sources, nor does it state when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_sourceGet Watchlist sourceARead-onlyIdempotent
Look up one Watchlist source by the id returned from list_sources.
| Name | Required | Description | Default |
|---|---|---|---|
| sourceId | Yes | Source id from list_sources, such as wallet:12, exchange:binance, or manual:3. |
Output Schema
| Name | Required | Description |
|---|---|---|
| id | Yes | |
| kind | Yes | |
| label | Yes | |
| value | Yes | |
| currency | Yes | |
| provider | Yes | |
| tokenPnl | Yes | |
| valueUsd | Yes | |
| blockchain | Yes | |
| accountType | Yes | |
| displayAddress | Yes | |
| mortgageBalance | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is covered. The description adds little behavioral context beyond the id provenance, and it does not contradict the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One clean sentence with no filler or repeated schema content. The key constraint, that the id comes from list_sources, is front-loaded and immediately actionable.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With a single required parameter, full schema coverage, comprehensive annotations, and an output schema present, nothing essential for calling this tool correctly is missing. The description is fully adequate for the tool's low complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema fully documents sourceId at 100% coverage, including examples like wallet:12, exchange:binance, and manual:3. The description merely restates the provenance relationship already present in the schema, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description says 'Look up one Watchlist source by the id returned from list_sources.' This uses a specific verb, names the resource, and clearly indicates singular lookup behavior, distinguishing it from list_sources without needing to inspect schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly states that the id comes from list_sources, establishing a clear call sequence for the agent. It does not explicitly enumerate exclusions or alternatives, but the 'one ... by id' phrasing sufficiently implies the contrast with listing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_sourcesList Watchlist sourcesARead-onlyIdempotent
List Watchlist wallets, exchanges, and manual bank/cash/property sources. Includes stored token PnL cost-basis rows when the API has them. Does not add wallets or edit assets.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| sources | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint, covering the safety profile. The description adds useful behavioral nuance: the response conditionally includes stored token PnL cost-basis rows when the API has them, and the operation never mutates data. This complements the annotations without contradicting them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two crisp sentences lead with the primary action, then add a conditional inclusion detail, then close with a scope boundary. There is no filler and every sentence contributes information an agent needs to invoke the tool correctly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter, read-only listing tool with an output schema available, the description covers what is listed, the conditional PnL inclusion, and the non-mutating nature. Nothing essential is missing for an agent to decide on and execute this tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool accepts no parameters, so the input schema is already complete. Per the baseline for zero-parameter tools, there is nothing further the description needs to compensate for, and it introduces no parameter-related ambiguity.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('List') and a defined resource ('Watchlist wallets, exchanges, and manual bank/cash/property sources'), which immediately clarifies what is returned. The boundary clause 'Does not add wallets or edit assets' distinguishes the tool from mutation-focused siblings like create_invoice. This makes the tool's scope unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly establishes when to use the tool: to retrieve a read-only list of watchlist sources, including PnL cost-basis rows when available. It also states a when-not boundary: it does not add wallets or edit assets. However, it never names sibling alternatives such as get_source for a single source, so it stops short of full 5 guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v0.2.0- First observed
create_invoice - First observed
get_invoice - First observed
get_net_worth - First observed
get_source - First observed
list_sources
TDQS
Scored across 5 tools
All five tools have clearly distinct responsibilities: invoice lookup/creation are separate, and net-worth/source actions are separate. get_source and list_sources follow the standard item-vs-collection pattern. There is no meaningful overlap.
Names consistently follow a verb_noun pattern: get_invoice, create_invoice, list_sources, get_source, and get_net_worth. The convention is uniform and predictable across both subdomains.
Five tools is a compact, appropriate size for a server covering Checkout invoices and Watchlist reads. Each tool serves a distinct need without redundancy.
The invoice side covers create and lookup but not list, cancel, or update operations, and the Watchlist side is read-only with no way to add or edit sources. These are notable lifecycle gaps, though the core read and checkout workflows are present.
Maintenance
Related MCP Connectors
Manage Apollo invoices and customers with entity-scoped OAuth and optional read/write access.
Create and manage checkout pages, event ticketing, forms, customers, payments and subscriptions.
Read payment settings, orders and receipts, create payment links and API keys.
Query and manage Mercoa AP/AR bill-pay: entities, invoices, transactions and payment methods.
Related MCP Servers
FlicenseAqualityDmaintenanceEnables interaction with the Conekta payment API to manage orders, customers, subscriptions, and financial transactions. It provides a comprehensive suite of tools for core payment operations like processing refunds, creating checkouts, and monitoring account balances.322-- FlicenseNot gradedqualityAmaintenanceEnables AI coding agents to integrate stablecoin checkout, payment links, payment status checks, webhook verification, and webhook-based entitlement logic into applications.-
- FlicenseNot gradedqualityAmaintenanceEnables AI coding agents and MCP hosts to add stablecoin checkout, payment links, payment status checks, webhook verification, and webhook-based access logic to applications.-
- FlicenseNot gradedqualityAmaintenanceEnables AI coding agents to set up crypto checkout integration by registering workspaces, creating paylinks and public payment invoices, configuring webhook endpoints, verifying webhook signatures, and checking stablecoin payment status.-