Skip to main content
Glama
gabrielmahia

mpesa-mcp

by gabrielmahia

mpesa-mcp

用于东非金融科技 API 的 MCP 服务器 — M-Pesa (Safaricom Daraja) 和 Africa's Talking

让你的 AI 智能体具备触发 M-Pesa 支付、检查交易状态、发送短信以及为 20 多个非洲电信网络充值话费的能力。

Tests PyPI License: MIT Glama Score Glama

mpesa-mcp MCP server

为什么存在这个项目

M-Pesa 在非洲每天处理的交易量超过了 PayPal。Africa's Talking 通过短信和 USSD 在 20 多个国家/地区触达使用基础手机的用户。目前两者都没有 MCP 服务器。

这意味着当今构建的每一个 AI 智能体(无论是 Claude、GPT、Gemini 还是任何兼容 MCP 的运行时)如果不进行自定义集成工作,都无法触发 M-Pesa 支付或发送斯瓦希里语短信。

mpesa-mcp 通过一次 pip install 填补了这一空白。

Related MCP server: M-Pesa MCP Server

工具

工具

描述

mpesa_stk_push

在客户的 M-Pesa 手机上触发 STK 推送支付提示

mpesa_stk_query

检查 STK 推送请求的状态

mpesa_transaction_status

通过收据编号查询任何 M-Pesa 交易

sms_send

向非洲各网络的 1 到 1,000 名收件人发送短信

airtime_send

向任何订阅者发送话费充值(KES、NGN、GHS、UGX 等)

覆盖范围

  • M-Pesa: 肯尼亚 (Safaricom Daraja v3) — STK 推送、C2B、交易状态

  • 短信/话费: 肯尼亚、尼日利亚、加纳、坦桑尼亚、乌干达、卢旺达、南非以及通过 Africa's Talking 覆盖的 15 多个国家/地区

Glama (托管 MCP)

mpesa-mcp 可作为托管 MCP 服务器在 Glama 上使用:

mpesa-mcp MCP server mpesa-mcp score

安装

pip install mpesa-mcp

或者直接使用 uvx 运行:

uvx mpesa-mcp

配置

在启动服务器之前设置这些环境变量:

# M-Pesa (Safaricom Daraja)
MPESA_CONSUMER_KEY=your_consumer_key
MPESA_CONSUMER_SECRET=your_consumer_secret
MPESA_SHORTCODE=174379               # sandbox test shortcode
MPESA_PASSKEY=your_passkey
MPESA_CALLBACK_URL=https://yourdomain.com/mpesa/callback
MPESA_SANDBOX=true                   # set false for production

# Africa's Talking
AT_USERNAME=sandbox                  # your AT username (sandbox for testing)
AT_API_KEY=your_at_api_key

沙盒凭据

M-Pesa 沙盒: https://developer.safaricom.co.ke — 创建一个免费应用以获取测试凭据。

  • 测试短代码: 174379

  • 测试密钥: bfb279f9aa9bdbcf158e97dd71a467cd2e0c893059b10f78e6b72ada1ed2c919

Africa's Talking 沙盒: https://account.africastalking.com — 使用 username=sandbox,以及任意 API 密钥。

与 Claude Desktop 一起使用

添加到 ~/Library/Application Support/Claude/claude_desktop_config.json (macOS):

{
  "mcpServers": {
    "mpesa": {
      "command": "uvx",
      "args": ["mpesa-mcp"],
      "env": {
        "MPESA_CONSUMER_KEY": "your_key",
        "MPESA_CONSUMER_SECRET": "your_secret",
        "MPESA_SHORTCODE": "174379",
        "MPESA_PASSKEY": "your_passkey",
        "MPESA_CALLBACK_URL": "https://yourdomain.com/mpesa/callback",
        "MPESA_SANDBOX": "true",
        "AT_USERNAME": "sandbox",
        "AT_API_KEY": "your_at_key"
      }
    }
  }
}

与 Claude Code 一起使用

claude mcp add mpesa -- uvx mpesa-mcp

在运行 claude 之前在你的 shell 中设置环境变量。

示例提示词

连接后,你可以询问你的 AI 智能体:

"Send KES 500 STK Push to +254712345678 for order #1234"

"Check if the payment QKL8ABC123 has been received"

"Send an SMS to these 50 farmers with today's maize price: [list]"

"Top up KES 50 airtime for our field agents: [list of numbers]"

现实场景

外勤人员支付调度

"Send KES 300 STK Push to each of these 12 field agents for today's data collection: [list]"

智能体触发 12 次连续的 STK 推送,跟踪每个 checkout_request_id,并轮询确认结果 — 无需你编写任何代码。

农民提醒 + 话费充值

"SMS these 200 Garissa farmers that the river is rising. Then top up KES 20 airtime each so they can call in reports."

一个提示词 → 在 Safaricom、Airtel 和 Telkom 网络上发送 200 条短信并进行 200 次话费充值。

支付对账

"Check whether receipt OKL8M3B2HF was a successful payment and how much it was for"

对于使用 Claude 实时验证 M-Pesa 交易的支持人员非常有用。

工具注解

所有工具都声明了 MCP 工具注解,以便客户端可以适当地控制调用:

工具

只读

破坏性

幂等

mpesa_stk_push

mpesa_stk_query

mpesa_transaction_status

sms_send

airtime_send

Claude Desktop 和其他 MCP 客户端会在触发支付、短信或话费操作前请求确认。

服务器发现

功能通过 .well-known/mcp.json 进行通告 — 这是新兴的 MCP 服务器卡片标准。注册表和浏览器可以在不连接的情况下索引此服务器的工具。

# Check capabilities
curl https://raw.githubusercontent.com/gabrielmahia/mpesa-mcp/main/.well-known/mcp.json

测试与准确性

MCP 生态系统基准测试 (CData, 2026) 发现,大多数 MCP 服务器在复杂查询上的准确率为 60–75% — 特别是在写入操作的静默失败和部分参数应用方面。

mpesa-mcp 针对所有三种肯尼亚电话号码格式、边界金额值和缺失的可选字段进行了测试:

pytest tests/ -v  # run full suite
pytest tests/test_phone_formats.py  # format normalization
pytest tests/test_boundary_amounts.py  # min/max amount edge cases

写入操作(STK 推送、短信、话费)在进行任何 API 调用之前都有明确的验证。

生态系统背景 — Mojaloop + MCP

Mojaloop(由盖茨基金会资助)处理支付互操作性 — 连接东非及其他地区的银行、移动钱包和商户。

mpesa-mcp 处理* AI 智能体工具层* — 使 AI 编码助手能够以编程方式触发和查询 M-Pesa 支付。

它们是互补的:

  • Mojaloop:金融提供商之间的互操作性轨道

  • mpesa-mcp:将 AI 智能体连接到这些轨道的 MCP 接口层

有关此模式的更多信息,请参阅 Mojaloop 文档贡献

MCP 与 A2A — 两种不同的协议

mpesa-mcp 实现了 MCP (模型上下文协议) — AI 智能体如何与工具对话。

还有一个互补协议 A2A (智能体到智能体),它处理智能体如何相互对话。它们解决不同的问题并协同工作:

  • MCP: 你的 AI 智能体 → mpesa-mcp → Daraja API / Africa's Talking

  • A2A: 编排智能体 ↔ 支付子智能体 ↔ 通知子智能体

对于大多数集成,你只需要 MCP。当你构建多智能体系统,其中支付工作流需要与其他专业智能体协调时,A2A 才会变得相关。


开发

git clone https://github.com/gabrielmahia/mpesa-mcp
cd mpesa-mcp
pip install -e ".[dev]"
pytest tests/ -v

安全

不要提交 API 密钥。请使用环境变量或密钥管理器。 报告漏洞请联系:contact@aikungfu.dev

许可证

MIT — © 2026 Gabriel Mahia

保持更新

获取新版本和东非 API 开发的通知: 订阅更新 →

或者在 GitHub 上关注此仓库以获取发布通知。

同系列包

安装

描述

wapimaji-mcp

pip install wapimaji-mcp

肯尼亚干旱情报 MCP 服务器

civic-agent-kit

pip install civic-agent-kit

东非公民 AI SDK

相关包

均为 MIT 协议 · 均为东非公民 AI 技术栈的一部分

安装

描述

wapimaji-mcp

pip install wapimaji-mcp

肯尼亚干旱情报 MCP 服务器

kenya-health-mcp

pip install kenya-health-mcp

肯尼亚健康数据 MCP — NHIF、设施、孕产、权利

civic-agent-kit

pip install civic-agent-kit

东非公民 AI SDK

完整作品集:gabrielmahia.github.io

Available Tools

5 tools
airtime_sendSend AirtimeA
Destructive

Send airtime top-up to any MTN/Safaricom/Airtel/Vodafone subscriber. Common use: NGO field incentives, survey rewards, agent payouts. No real airtime sent in sandbox mode.

ParametersJSON Schema
NameRequiredDescriptionDefault
phoneYesRecipient phone in E.164 format e.g. '+254712345678'
amountYesAmount as string e.g. '50' (KES 50). Minimum KES 10 in production.
currency_codeNoISO currency code: KES, NGN, GHS, UGX, TZS, RWF, ZARKES

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructive/destructiveHint=true. Description adds valuable sandbox behavior disclosure. Does not discuss other aspects like auth or rate limits, but the added sandbox note is useful beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, each adding distinct value: action, use cases, sandbox note. No fluff, highly efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that an output schema exists (return values not needed), the description covers purpose, common usage, and sandbox behavior. Lacks prerequisites or error scenarios, but sufficient for a simple tool with good annotations.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and already describes each parameter in detail (including minimum amount in production). Description does not add new parameter information beyond what's in the schema, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states action (send airtime top-up) and target (specific network subscribers). Common use cases provided. Distinguishes from siblings like mpesa_stk_push which are for money transfers.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Lists common use cases (NGO incentives, survey rewards, agent payouts) and mentions sandbox mode behavior. Does not explicitly compare to alternatives, but given sibling tools, context is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mpesa_stk_pushM-Pesa STK PushA
Destructive

Trigger an M-Pesa STK Push — sends a payment prompt to the customer's phone. The customer enters their M-Pesa PIN to complete payment. Returns a CheckoutRequestID to track the transaction with mpesa_stk_query. Async: use mpesa_stk_query after 10-30 seconds to check completion.

ParametersJSON Schema
NameRequiredDescriptionDefault
phoneYesCustomer phone number (any Kenyan format: +254..., 07..., 254...)
amountYesAmount in KES (whole number, minimum 1)
account_refYesAccount reference shown to customer on their phone (max 12 chars)
descriptionNoTransaction description (max 13 chars)Payment

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds significant behavioral context beyond annotations: it explains that the tool is async, that the customer enters their PIN to complete payment, and that a CheckoutRequestID is returned for follow-up. This aligns with destructiveHint=true and provides useful actionable information.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise with four short sentences, all of which provide necessary information. It front-loads the primary action and sequentially covers process, return value, and follow-up. There is no wasted text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the essential aspects of a payment initiation tool: what it does (trigger STK push), the user interaction (customer enters PIN), the result (CheckoutRequestID), and the asynchronous follow-up (use mpesa_stk_query after 10-30 seconds). With an output schema present, the description does not need to detail return fields.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 100% coverage with descriptions for all parameters. The tool description does not add additional meaning beyond the schema (e.g., no examples or format clarification). Baseline 3 applies as schema already documents parameters adequately.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states that the tool triggers an M-Pesa STK Push, sends a payment prompt to the customer's phone, and returns a CheckoutRequestID for tracking. It distinguishes itself from sibling tools like mpesa_stk_query by noting that the query tool is for checking completion.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit guidance on when to use the sibling tool mpesa_stk_query (after 10-30 seconds) to check completion. It implies that this tool is for initiating payments, but does not explicitly state when not to use it or mention alternatives like airtime_send.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mpesa_stk_queryM-Pesa STK QueryA
Read-onlyIdempotent

Check the status of an STK Push request. Poll this 10-30 seconds after calling mpesa_stk_push. ResultCode 0 = success, 1032 = cancelled by user, 1037 = timed out.

ParametersJSON Schema
NameRequiredDescriptionDefault
checkout_request_idYesCheckoutRequestID from mpesa_stk_push response

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond annotations (readOnlyHint, idempotentHint), the description adds polling timing and result code meanings, disclosing behavioral traits like non-immediate result and cancellation handling.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three concise sentences, each essential: purpose, timing advice, and result interpretation. No extraneous text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read-only tool with one parameter and existing output schema, the description fully covers polling strategy, result codes, and usage context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the description merely restates the parameter's purpose ('CheckoutRequestID from mpesa_stk_push response') without adding additional meaning or constraints.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Check the status of an STK Push request' with a specific verb and resource, distinguishing it from siblings like mpesa_stk_push (initiates) and mpesa_transaction_status.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says to poll 10-30 seconds after calling mpesa_stk_push, and interprets result codes (0=success, 1032=cancelled, 1037=timed out), providing clear when-to-use and expected outcomes.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mpesa_transaction_statusM-Pesa Transaction StatusA
Read-onlyIdempotent

Query the status of any M-Pesa transaction by receipt number. Requires MPESA_INITIATOR_NAME and MPESA_SECURITY_CREDENTIAL env vars.

ParametersJSON Schema
NameRequiredDescriptionDefault
transaction_idYesM-Pesa receipt number e.g. QKL8XXXXXX

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate read-only, idempotent, non-destructive. Description adds valuable prerequisite info (env vars) beyond annotations. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, both essential. Front-loaded with purpose, then prerequisite. No redundant information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given simple tool with output schema and rich annotations, description is mostly complete. Missing rate limits or side-effect details, but not critical.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Input schema covers 100% of parameter with example. Description adds no new semantics, so baseline 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clear specific verb (Query) and resource (transaction status) with receipt number. Distinguishes from sibling tools like airtime_send and sms_send.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Mentions required environment variables but does not explicitly state when to use this tool vs alternatives like mpesa_stk_query. Usage is implied by name and description.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

sms_sendSend SMSA
Destructive

Send SMS to one or many recipients via Africa's Talking. Supports up to 1,000 recipients per call. Works across Kenya, Nigeria, Ghana, Tanzania, Uganda, and 15+ African markets. Returns per-recipient status and cost.

ParametersJSON Schema
NameRequiredDescriptionDefault
messageYesSMS message text. Unicode supported (Kiswahili, etc.)
sender_idNoOptional pre-registered alphanumeric sender ID
recipientsYesList of phone numbers in E.164 format e.g. ['+254712345678']

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and idempotentHint=false. The description adds valuable behavioral details: the maximum recipient limit, geographic coverage, and that it returns per-recipient status and cost. No contradictions with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences long, each serving a distinct purpose: what the tool does, its capacity and scope, and its return value. No wasted words, and the most critical information is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with three well-documented parameters and an existing output schema, the description covers the essential aspects: operation, capacity, geographic scope, and return format. It is sufficiently complete for an agent to understand and use the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema itself clearly documents all three parameters. The description adds no additional parameter-level meaning beyond what is in the schema (e.g., it mentions Unicode support which is already in the message description). Baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool sends SMS via Africa's Talking, specifies the maximum recipients (1,000), mentions geographic coverage, and indicates return of per-recipient status and cost, distinguishing it from sibling tools like airtime_send or mpesa_stk_push which perform different operations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context for when to use the tool (sending SMS to one or many recipients) and includes practical limits (1,000 recipients). It does not explicitly mention when not to use it or compare to alternatives, but the sibling tools are sufficiently different that no confusion arises.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 5 tool updatesv0.1.0
    • First observedairtime_send
    • First observedmpesa_stk_push
    • First observedmpesa_stk_query
    • First observedmpesa_transaction_status
    • First observedsms_send

TDQS

A4.2/5.0

Scored across 5 tools

Disambiguation5/5

Each tool targets a distinct function: airtime sending, STK push initiation, STK push status query, transaction status by receipt, and SMS sending. There is no overlap or ambiguity.

Naming Consistency4/5

Most tools follow a verb_noun or noun_verb pattern (e.g., airtime_send, sms_send, mpesa_stk_push), but mpesa_transaction_status lacks a verb, breaking the pattern slightly.

Tool Count5/5

With 5 tools, the server is well-scoped for its purpose, covering core M-Pesa and SMS operations without being too few or too many.

Completeness3/5

The set covers STK push initiation/query and basic transaction status, but lacks airtime status, B2C/C2B transfers, or account balance queries, leaving notable gaps for a full M-Pesa integration.

Maintenance

ActivityActive
ResponsivenessSlow

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    D
    maintenance
    Open-source MCP server that streamlines payment integration for AI agents and financial apps in Africa, providing unified tools for providers like M-Pesa.
    1
    -
  • F
    license
    Not graded
    quality
    D
    maintenance
    A Model Context Protocol (MCP) server that integrates Safaricom's M-PESA Daraja API with Claude, enabling natural language payment processing and real-time transaction notifications.
    3
    -
  • A
    license
    C
    quality
    D
    maintenance
    An MCP server that enables AI assistants to interact with Interswitch APIs for payments, transfers, VAS, cardless paycodes, Transaction Search, Card 360, lending, payouts, agency banking, and fintech card-processing utilities.
    74
    58 npm
    1
    MIT