PayHere MCP Server
The PayHere MCP Server enables developers to integrate, debug, and manage PayHere (Sri Lanka's payment gateway) payments directly from MCP-aware clients like Claude Code or Claude Desktop.
Generate checkout payloads: Build correctly signed form fields and an HTML snippet needed to POST a payment request to PayHere, including automatic MD5 hash computation and amount formatting.
Retrieve payment records: Look up all payment attempts (successful, refunded, chargebacked) associated with a given
order_idto check status or attempt history.Issue refunds: Refund a payment by
payment_id, either fully or partially, with a required description/reason for the refund.Generate or verify signatures: Compute PayHere MD5 hashes for both checkout submissions and notify URL callbacks, and optionally verify an incoming notify signature against an expected value — useful for debugging hash mismatches.
Verify credentials: Health-check your environment configuration and confirm that your App credentials can successfully fetch an OAuth token from PayHere's Merchant API.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@PayHere MCP ServerGenerate a checkout payload for order 12345 with amount 1500 LKR"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
@lk-pay/payhere-mcp
A Model Context Protocol server for PayHere, Sri Lanka's payment gateway. It exposes PayHere's Merchant API and checkout flow as tools any MCP-aware client can call.
Status
v0.1 — early preview. All five tools have been validated end-to-end against the PayHere sandbox. The transport is stdio only.
Related MCP server: PayFast MCP
What this is
This is an MCP server for developers integrating PayHere. It lets you retrieve payments, issue refunds, generate signed checkout payloads, and compute or verify PayHere hashes directly from Claude Code, Claude Desktop, or any other MCP client.
The audience is developers, not merchants. It helps you debug an integration, pull a payment record, issue a refund, and get a checkout signature right — it is not a dashboard replacement.
PayHere uses snake_case fields and MD5-based hashes throughout its API. The tools here mirror that surface exactly and handle the parts that are easy to get wrong, like amount formatting and signature computation.
Quick start
Requires Node 18 or newer. If you already have a PayHere Business App and a whitelisted domain, run it directly:
npx @lk-pay/payhere-mcpIt reads configuration from the environment. The minimum is:
PAYHERE_MODE=sandbox
PAYHERE_MERCHANT_ID=your_merchant_id
PAYHERE_MERCHANT_SECRET=your_domain_bound_secret
PAYHERE_APP_ID=your_app_id
PAYHERE_APP_SECRET=your_app_secretIn Claude Code, add it to ~/.claude/mcp.json (or a project-local .claude/mcp.json):
{
"mcpServers": {
"payhere": {
"command": "npx",
"args": ["-y", "@lk-pay/payhere-mcp"],
"env": {
"PAYHERE_MODE": "sandbox",
"PAYHERE_MERCHANT_ID": "your_merchant_id",
"PAYHERE_MERCHANT_SECRET": "your_domain_bound_secret",
"PAYHERE_APP_ID": "your_app_id",
"PAYHERE_APP_SECRET": "your_app_secret"
}
}
}
}Setup
The Merchant API calls (get_payment, issue_refund, verify_credentials) need a Business App and a whitelisted domain. The checkout and signature tools work with just your merchant credentials.
Step 1 — Create a PayHere Business App
Log in to sandbox.payhere.lk (or www.payhere.lk for live). Go to Settings → Business Apps → Create API Key. Name the app, fill in the Allowed Domains field, and enable at least the Payment Retrieval API permission. Enable the Refund API permission too if you plan to issue refunds.
Step 2 — How PayHere binds credentials to domains
This is the part that trips most people up, so it's worth stating plainly.
PayHere generates a separate merchant_secret for each domain you whitelist. A Merchant API call only succeeds when the merchant_secret you send is tied to a domain that PayHere can currently verify is reachable. If the domain can't be reached, the secret is rejected.
It is not a Referer check and not a source-IP check. It is a binding between the secret and a verifiable domain. So the secret in your environment and a live, reachable whitelisted domain have to line up at request time.
Step 3 — Configure your domain
Local development. Use ngrok or any similar publicly reachable tunnel. VS Code dev tunnels don't work here because their auth interstitial stops PayHere from verifying the domain. Run:
ngrok http <your-port>Whitelist the ngrok URL in PayHere's Allowed Domains, then copy the merchant_secret PayHere generates for that domain into your .env. Keep the tunnel running the whole time you use the MCP server — if it stops, the domain stops being reachable and calls start failing.
Production. Deploy to a server with a stable domain or static IP. For sandbox, whitelist the domain through the dashboard. For live, PayHere whitelists by IP — email support@payhere.lk with your production server IP and they'll add it.
Step 4 — Note your credentials
From the dashboard, collect:
Merchant ID
App ID and App Secret (from the Business App you created)
The merchant_secret tied to your whitelisted domain
Step 5 — Install and configure
Install globally, or skip this and use npx:
npm install -g @lk-pay/payhere-mcpSet these environment variables:
Variable | Required | Description |
| Yes |
|
| Yes | Your Merchant ID from the dashboard. |
| Yes | The per-domain secret tied to your whitelisted domain. Used for checkout and notify hashes. |
| Yes | Business App ID, used to fetch OAuth tokens for the Merchant API. |
| Yes | Business App secret, paired with |
| Optional | Bare domain (no scheme, no path), e.g. |
Step 6 — Wire into your MCP client
Add all the variables to your client config:
{
"mcpServers": {
"payhere": {
"command": "npx",
"args": ["-y", "@lk-pay/payhere-mcp"],
"env": {
"PAYHERE_MODE": "sandbox",
"PAYHERE_MERCHANT_ID": "your_merchant_id",
"PAYHERE_MERCHANT_SECRET": "your_domain_bound_secret",
"PAYHERE_APP_ID": "your_app_id",
"PAYHERE_APP_SECRET": "your_app_secret",
"PAYHERE_DOMAIN": "your-tunnel.ngrok.app"
}
}
}
}Once connected, run verify_credentials first to confirm your environment and OAuth token resolve correctly.
Tools
Tool | Purpose | When to reach for it |
| Generate form fields + hash for a | You're building a payment form and need a correctly signed payload. |
| Retrieve all payment attempts for an | You want to check an order's status or attempt history. |
| Refund a payment by | A customer needs money back. |
| Compute or verify PayHere MD5 hashes (checkout + notify) | You're validating a notify callback or debugging a hash mismatch. |
| Health-check env vars and fetch an OAuth token | You're setting up and want to confirm your config works. |
Troubleshooting
The four errors you're most likely to see, and what they mean:
{"status":-1,"msg":"Access denied for the domain"}— Themerchant_secretis bound to a domain PayHere can't currently verify. Check that (a) your ngrok tunnel is up, (b) themerchant_secretin.envmatches the whitelisted domain, and (c) you haven't mixed sandbox and live values.{"status":-2,"msg":"Authentication error"}— The App ID or App Secret is wrong, or the token belongs to a different Business App. RecheckPAYHERE_APP_IDandPAYHERE_APP_SECRET.{"error":"invalid_token"}— The access token is expired or malformed, which usually means the App credentials don't match what PayHere expects. Confirm the App ID and secret, then retry.{"status":-1,"msg":"No payments found"}— Not an error. Theorder_idhas no payments yet.get_paymentreturnsattempts: []with anotefield explaining there's nothing on record.
Design notes
No
list_payments. PayHere's Retrieval API only accepts anorder_id— there is no date-range or status filter endpoint.get_paymentreturns the array of attempts for one order.generate_signatureis the differentiator. Most PayHere integration bugs come from incorrect hash computation. This tool exposes the exact algorithm the gateway uses, with constant-time verification for notify URL validation.stdio transport only in v0.1. That's the supported transport for this release.
Development
git clone https://github.com/lakshitha0526/payhere-mcp.git
cd payhere-mcp
npm install
npm run test # vitest
npm run typecheck # tsc --noEmit
npm run lint # biome check
npm run build # tsupLicense
MIT — see LICENSE.
Part of the lk-* family of Sri Lanka-focused developer tooling.
Available Tools
5 toolscreate_checkout_payloadCreate PayHere checkout payloadA
Generates the form data needed to POST a checkout request to PayHere, including the MD5 hash. Returns action URL, form fields, and an HTML snippet.
| Name | Required | Description | Default |
|---|---|---|---|
| orderId | Yes | Unique order identifier for this payment | |
| amount | Yes | Payment amount (will be formatted to 2dp) | |
| currency | Yes | ISO 4217 currency code, e.g. LKR, USD | |
| items | Yes | Item description shown on the checkout page | |
| customer | Yes | ||
| returnUrl | Yes | URL to redirect to after successful payment | |
| cancelUrl | Yes | URL to redirect to if payment is cancelled | |
| notifyUrl | Yes | Public URL PayHere will POST the payment result to |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, description carries full burden. It discloses the tool generates form data and hash, and returns specific outputs. However, it does not clarify if this is a pure computation or involves external calls, nor does it specify required authorizations or side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single, well-structured sentence that front-loads the verb 'Generates' and lists outputs. No redundant information, but could be more concise by splitting into two sentences.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description outlines return types (action URL, form fields, HTML snippet), which is helpful. It implies usage (POST the form data) but does not address prerequisites like merchant credentials. Overall adequate for a moderately complex tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is high (88%), so the description adds little beyond schema. It mentions MD5 hash but doesn't tie it to a specific parameter. Baseline 3 is appropriate as the schema already documents parameters well.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the tool generates form data for posting a checkout request, including MD5 hash, and specifies outputs (action URL, form fields, HTML snippet). This distinguishes it from siblings like generate_signature or issue_refund.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives. No mention of prerequisites (e.g., requiring API credentials) or exclusions. The description only states what it does, not when it's appropriate.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
generate_signatureGenerate or verify a PayHere signatureA
Computes a PayHere MD5 hash for either checkout submission (mode='checkout') or notify URL validation (mode='notify'). For notify mode, pass expectedMd5Sig to verify an incoming signature in one shot. Uses the merchant secret from the server's environment — never include the secret in tool arguments.
| Name | Required | Description | Default |
|---|---|---|---|
| mode | Yes | Which hash variant to compute | |
| merchantId | No | Merchant ID. Defaults to PAYHERE_MERCHANT_ID env var. | |
| orderId | Yes | ||
| amount | No | Required for mode='checkout'. Formatted to 2dp internally. | |
| currency | No | Required for mode='checkout'. ISO 4217 (e.g. LKR). | |
| payhereAmount | No | Required for mode='notify'. As sent by PayHere. | |
| payhereCurrency | No | Required for mode='notify'. As sent by PayHere. | |
| statusCode | No | Required for mode='notify'. PayHere status_code value. | |
| expectedMd5Sig | No | Optional for mode='notify'. If provided, returns verification result instead of just the hash. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It reveals that the tool uses a merchant secret from the server environment and never requires it in arguments. It describes conditional behavior for notify mode with verification. However, it does not discuss side effects or performance, but as a pure computation, this is acceptable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences long, front-loads the core purpose, and contains no filler. Every sentence provides essential information about modes, verification, and security. It is highly efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
While the description covers modes and verification well, it does not specify the return type or structure. For a tool with no output schema, describing whether the output is a hash string, a boolean, or an object would be helpful for an AI agent to interpret results correctly. This omission makes it slightly incomplete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 89%, so the schema already documents most parameters. The description adds value by explaining conditional requirements (e.g., amount and currency for checkout, payhereAmount/Currency/statusCode for notify) and the role of expectedMd5Sig. This goes beyond the schema's individual descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states that the tool computes a PayHere MD5 hash for checkout submission or notify URL validation, using specific verbs and resources. It distinguishes between two modes and a verification feature, making its purpose unambiguous and distinct from sibling tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains when to use each mode (checkout vs notify) and how to verify incoming signatures by passing expectedMd5Sig. It also warns against including the secret in arguments. However, it does not explicitly contrast with sibling tools, though the different operations imply appropriate usage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_paymentGet PayHere payment(s) by order IDA
Returns all payment attempts (success, refunded, chargedback) associated with the given order_id. PayHere does not support listing by date range or status — only by order_id.
| Name | Required | Description | Default |
|---|---|---|---|
| orderId | Yes | The order_id used when initiating the payment |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It specifies the types of payment attempts returned (success, refunded, chargedback), which adds transparency. However, it does not discuss permissions, rate limits, or whether the data is mutable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences with no superfluous information. Every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simplicity (one parameter, no output schema, no annotations), the description covers the essential return value and API limitation. It is adequately complete for a straightforward retrieval tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% as there is only one parameter. The description repeats the schema's description ('order_id used when initiating the payment'), adding minimal additional meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states that the tool returns all payment attempts (success, refunded, chargedback) for a given order_id. This is distinct from sibling tools like issue_refund or create_checkout_payload.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly states that PayHere does not support listing by date range or status—only by order_id. This provides clear guidance on when to use the tool and what not to expect, though it does not mention alternative tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
issue_refundIssue a PayHere refundA
Refunds a payment by payment_id. Omit amount for a full refund, or set it for a partial refund. Returns the PayHere refund status.
| Name | Required | Description | Default |
|---|---|---|---|
| paymentId | Yes | PayHere payment_id (from get_payment or notify) | |
| description | Yes | Reason / note for the refund — visible to the merchant | |
| amount | No | Partial refund amount. Omit for a full refund. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description must cover all behavior. It states returns refund status, but does not detail potential errors, side effects, or idempotency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the action, no redundant information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Minimally complete: explains return value but lacks context on error handling, prerequisites, or performance implications. No output schema to rely on.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, but description adds value by clarifying the conditional use of 'amount' (omit for full, set for partial refund), beyond schema details.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the verb 'Refunds' and the resource 'payment by payment_id', distinguishing it from sibling tools like create_checkout_payload or get_payment.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit guidance on when to omit or set 'amount' for full vs partial refund, but lacks explicit instructions on when not to use or alternative tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_credentialsVerify PayHere credentialsA
Health check that confirms env vars are loaded and (once implemented) that the App credentials can fetch an OAuth token. Useful first call when setting up an integration.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It discloses that the tool checks env vars and OAuth token fetch, indicating a read-only, non-destructive behavior. Does not detail error conditions or output format, but is sufficient for a health check.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences: first defines functionality, second provides usage guidance. No unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is complete for a zero-parameter health check tool. It explains purpose and usage. Could mention expected response format, but overall adequate given no output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has no parameters, so no additional semantic information is needed. Baseline score of 4 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it is a health check for credentials, specifying the verb 'confirm' and the resource 'env vars' and 'OAuth token'. It distinguishes from sibling tools like create_checkout_payload or issue_refund.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states it is useful as a first call when setting up an integration, providing clear usage context. Does not mention when not to use, but sibling tool names imply different purposes.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v0.1.0- First observed
create_checkout_payload - First observed
generate_signature - First observed
get_payment - First observed
issue_refund - First observed
verify_credentials
TDQS
Scored across 5 tools
Each tool serves a distinct purpose: creating checkout payloads, generating signatures, retrieving payments by order ID, issuing refunds, and verifying credentials. No overlapping responsibilities.
All tool names follow a consistent verb_noun pattern in snake_case (e.g., create_checkout_payload, issue_refund), making the API predictable and easy to navigate.
With 5 tools covering checkout creation, signature generation, payment retrieval, refunds, and credential verification, the number is well-scoped for a payment gateway integration without unnecessary clutter.
Covers essential payment operations: creating checkouts, refunding, retrieving payment status by order ID, and signature validation. Missing list payments endpoint aligns with PayHere's API limitations, but a tool for direct payment retrieval by payment_id would enhance completeness.
Maintenance
Related MCP Connectors
Official HitPay MCP: sales, payouts, balances; create payment links and invoices. OAuth; no refunds.
Remote MCP for ifthenpay payments: Multibanco, MB WAY and Payshop.
Unified MCP server for 70+ eCommerce platforms: products, orders, customers, and more.
MCP server for Modern Treasury — payment orders, transactions, counterparties and ledgers.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceCentralizes payment gateway integrations for Pagar.me (customers, recipients, Pix, credit card, splits, charges) and Woovi/OpenPix (Pix charges, refunds, webhook verification) through MCP tools.6 npmMIT
- AlicenseBqualityDmaintenanceEnables interaction with the South African PayFast payment gateway to manage transactions, subscriptions, and refunds. It allows users to create payments, query transaction statuses, and check settlement balances through the MCP protocol.816 npmMIT
- AlicenseNot gradedqualityDmaintenanceProvides AI-ready documentation for the PayHere payment gateway, enabling access to API references, SDK guides, and documentation search through MCP tools.MIT
- AlicenseNot gradedqualityDmaintenanceEnables interaction with Paystack via MCP tools to get total transactions, create checkout links, and verify transactions.3,246 npm4MIT