Use this server for local-first B2B FinOps, Stripe/Visa CE 3.0, EU VAT, Shopify B2B net-terms, webhook security, and ROI checks via 9 MCP tools or CLI commands.
Audit 90-day revenue leakage and Visa CE 3.0 readiness from Stripe customer/usage/dispute data.
Detect ghost usage after cancellation or dunning grace under Stripe 2025-03-31.basil.
Stage non-destructive Stripe dispute CE 3.0 drafts with 120d–365d IP/device overlap checks.
Format-check and normalize EU + Northern Ireland VAT IDs, with optional live VIES mode via API key.
Reconcile Shopify Plus B2B Net-15/30/60 invoices, deposits, credit notes, and tolerances in integer cents.
Generate and verify Stripe, Shopify, and RevClamp webhook HMAC-SHA256 signatures with replay protection.
Calculate chargeback ROI and recommend a flat-rate plan tier.
Simulate 72-hour webhook replay, duplicates, stale events, and out-of-order state machines.
Lint Stripe dispute evidence for the 18,000 UTF-16 limit and CE 3.0 safeguards.
Run fully locally with zero dependencies/network by default, or optionally sync to hosted RevClamp with REVCLAMP_API_KEY.
Provides tools for Shopify and Shopify Plus B2B merchants: generates and verifies X-Shopify-Hmac-Sha256 webhook signatures over raw UTF-8 bodies with 300s replay protection, and reconciles Net-15/30/60 upfront deposits and credit notes using integer-cent accounting.
Provides tools for auditing and reconciling Stripe billing data: runs 90-day B2B revenue leakage and dispute-readiness audits over subscriptions, usage events and disputes; evaluates multi-subscription customer snapshots and 0–14d dunning grace windows for unpaid API/LLM usage (with Stripe 2025-03-31.basil entitlement handling); stages submit:false Visa CE 3.0 dispute drafts from prior undisputed charges; lints dispute evidence payloads against the 18,000 UTF-16 code unit limit; verifies Stripe-Signature webhook HMACs over raw bodies with replay checks; and simulates subscription lifecycle webhook replays.
Supports Visa Compelling Evidence 3.0 (CE 3.0) dispute readiness: identifies qualifying prior undisputed charges in the 120d–365d window via ip_subnet/device_id overlap, stages non-destructive draft evidence responses within the 18,000 UTF-16 code unit ceiling, and lints evidence payloads for CE 3.0 markers and merchant note preservation.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@RevClamp MCP Server Run a 90-day revenue leakage audit on our Stripe billing data."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
revclamp-mcp)
revclamp-mcp is a standalone, zero-dependency Open-Source Model Context Protocol (MCP) Server & CLI (index.mjs + local_engine.mjs) implementing 9 deterministic B2B FinOps, Stripe 2025-03-31.basil, Visa CE 3.0, EU/XI VIES VAT, Shopify Plus B2B Net-15/30/60, and Webhook Security tools in pure Node.js.
100% Local In-Process Execution (Default — Zero Network / Zero API Key Required): All 9 MCP tools (initialize, tools/list, and tools/call) execute locally in-process inside local_engine.mjs using pure Node.js (node:crypto HMAC-SHA256 verification, integer-cent double-entry accounting, 72-hour webhook replay state machines, and 18,000 UTF-16 code unit CE 3.0 linting). Zero network calls are ever made unless REVCLAMP_API_KEY or REVCLAMP_MCP_URL is explicitly configured.
Optional Hosted Cloud Workspace Sync (REVCLAMP_API_KEY): When REVCLAMP_API_KEY (rg_live_...) is configured, revclamp-mcp connects to RevClamp Enterprise (https://api.revclamp.com/api/mcp) to unlock the 90-day SQLite WAL usage & audit ledger, 24/7 autonomous Stripe dispute & entitlement webhook outbox, and real-time EU Commission VIES SOAP gateway consultation numbers.
local_engine.mjs) vs. Hosted Cloud (REVCLAMP_API_KEY)Capability | Local Open-Core Default (Zero API Key) | Hosted Cloud ( |
Execution & Network | 100% in-process ( | HTTPS JSON-RPC to |
Usage & Audit Storage | Stateless evaluation of caller-supplied JSON snapshots | Persistent 90-day SQLite WAL ledger + Stripe historical backfill |
Dispute & Entitlement Action | Returns non-destructive | 24/7 autonomous Stripe webhook outbox ( |
EU & | Deterministic syntax & | Live EU Commission VIES SOAP consultation IDs + circuit-breaker retry queue ( |
Monthly Event Tiers | Unlimited local in-process evaluations (0 network cost) | Free Sandbox ( |
Data Privacy ( | Nothing ever leaves your machine | Only explicit |
Related MCP server: Agent Bazaar
local_engine.mjs (9)Tool Name | Domain | Local In-Process Implementation ( | Execution Mode |
| Stripe Billing & Usage | Evaluates caller-supplied customer/usage arrays ( | Local In-Process (or Optional Cloud Key) |
| Stripe | Evaluates multi-subscription customer snapshots ( | Local In-Process (or Optional Cloud Key) |
| Visa 10.4 / CE 3.0 | Evaluates 120d–365d prior undisputed charges ( | Local In-Process (or Optional Cloud Key) |
| EU & | Normalizes 27 EU member states + Northern Ireland ( | Local In-Process (or Optional Live VIES) |
| B2B Wholesale Net-30 | Reconciles Net-15/30/60 upfront deposits and credit notes using integer EUR-cent double-entry accounting | Local In-Process (or Optional Cloud Key) |
| Webhook HMAC-SHA256 | Generates and verifies | Local In-Process (or Optional Cloud Key) |
| 0% Take-Rate ROI & Plan Fit | Calculates monthly and annual B2B margin savings in integer USD cents vs. 25%–30% chargeback agencies and recommends the optimal tier | Local In-Process (or Optional Cloud Key) |
| Webhook Replay & FSM | Simulates subscription lifecycle webhooks against a 72h deduplication | Local In-Process (or Optional Cloud Key) |
| Dispute Evidence UTF-16 & CE 3.0 | Lints | Local In-Process (or Optional Cloud Key) |
Add revclamp-mcp to your claude_desktop_config.json or .cursor/mcp.json. By default, revclamp-mcp runs 100% locally in-process with zero network calls and zero API keys required:
{
"mcpServers": {
"revclamp": {
"command": "npx",
"args": ["-y", "github:revclamp/revclamp-mcp"]
}
}
}(Optional) To connect to a live workspace on https://revclamp.com/dashboard, pass REVCLAMP_API_KEY in env or use the hosted Streamable HTTP endpoint (POST https://api.revclamp.com/api/mcp):
curl -sS -X POST https://api.revclamp.com/api/mcp \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}'<60s Local Smoke Check (--self-test)# Run a <60s local CLI smoke check (verifies all 9 tool schemas & executes a local_engine.mjs sample audit with zero API key)
npx -y github:revclamp/revclamp-mcp#v1.20.7 --self-test
# List all 9 MCP tools and JSON schemas (runs locally in-process)
node index.mjs --list-tools
# Validate an EU or Northern Ireland (XI) B2B VAT ID (auto-converts Greece GR -> EL)
node index.mjs --check-vat GR123456789 DE
# Calculate 0% take-rate ROI and optimal flat-rate plan fit (runs locally in-process)
node index.mjs --calc-roi 10000 600 25 250000
# Simulate out-of-order webhook replay and 72-hour deduplication state machine (runs locally)
node index.mjs --sim-replay out_of_order_stale_update_after_cancel
# Lint Stripe dispute evidence UTF-16 code units and non-destructive CE 3.0 markers (runs locally)
node index.mjs --lint-evidence valid_ce3_non_destructive
# Verify webhook HMAC-SHA256 using REVCLAMP_WEBHOOK_SECRET from environment (runs locally)
REVCLAMP_WEBHOOK_SECRET="whsec_test_secret_revclamp_sandbox_2026" node index.mjs --verify-webhook stripe
# Invoke Visa CE 3.0 readiness staging locally (pass demo: true for synthetic sample or usageEvents for real logs)
node index.mjs --call revclamp_stage_stripe_dispute_ce3 '{"disputeId":"du_1Qxyz01","customerId":"cus_ent_88","disputeReason":"fraudulent","demo":true}'2025-03-31.basil Entitlement Guard & Visa CE 3.0 Two-Tier Routing
Engineering Post-Mortem #1: Stripe's basil API broke my grace-period logic, and CE 3.0 turned out to be a routing problem
Engineering Post-Mortem #7: Visa CE 3.0 18,000 UTF-16 Code Unit Evidence Truncation & Non-Destructive Staging
Interactive Tools (No Signup):
HTTP 200 OK Soft-Failure Circuit Breaker & B2B Net-Terms Reconciliation
Engineering Post-Mortem #2: VIES returns HTTP 200 when it's down, and I charged the wrong VAT because of it
Engineering Post-Mortem #3: Shopify Plus B2B Net-15/30/60 Integer-Cent Deposit & Credit-Note Reconciliation
Interactive Tools (No Signup):
Engineering Post-Mortem #4: Why Stripe and Shopify Webhook HMAC-SHA256 Verification Fails on Parsed JSON Bodies
Engineering Post-Mortem #5: Chargeback Contingency Fees (25%–30%) vs. Flat-Rate 0% Commission Automation
Engineering Post-Mortem #6: Webhook Idempotency & Out-of-Order Subscription State Machines
Interactive Tools (No Signup):
Local-First Deterministic Execution: Runs all 9 tools locally in-process inside local_engine.mjs with zero external npm dependencies.
Strict Origin Pinning (Cloud Mode): When REVCLAMP_API_KEY is provided, only connects to https://api.revclamp.com/api/mcp or https://revclamp.com/api/mcp over TLS (redirect: "error").
Bounded Execution: Enforces a hard 10,000ms request timeout (AbortSignal.timeout) and a 32,768-byte request/response payload cap.
Full LLM Reference: https://revclamp.com/llms-full.txt
MIT © RevClamp Enterprise
Runs a deterministic 90-day B2B revenue leakage and Visa CE 3.0 readiness audit across caller-supplied Stripe subscriptions (2025-03-31.basil item-level periods), usage events, and disputes.
Inputs: demo, disputes, customers, usageEvents, +2 more.
Calculates monthly and annual B2B margin savings in integer USD cents comparing 0% take-rate flat pricing against 25%-30% chargeback contingency agencies and recommends the optimal tier.
Inputs: monthlyUsageEvents, monthlyGhostBleedUsd, monthlyWonDisputeUsd, contingencyTakeRatePercent.
Evaluates whether a metered API/SaaS usage event belongs to an entitled customer or represents post-cancellation / post-grace ghost usage under Stripe 2025-03-31.basil.
Inputs: usageEvent (required), subscriptions (required), dunningGracePeriodDays.
Lints Stripe dispute evidence[access_activity_log] payloads against the 18,000 UTF-16 code unit ceiling, non-destructive RevClamp CE 3.0 block markers, merchant note preservation, and Visa CE 3.0 two-identifier overlap.
Inputs: demo, preset, accessActivityLog, priorTransactions, +1 more.
Reconciles Shopify Plus B2B Net-15/30/60 wholesale invoices, upfront deposits, credit notes, and rounding tolerances using integer EUR-cent double-entry accounting.
Inputs: orderTotalCents (required), paidAmountCents (required), paymentTermsDays (required), requiredDepositPercent (required), +3 more.
Simulates out-of-order and duplicate subscription lifecycle webhooks against a 72-hour deduplication Set and monotonic createdSec watermark vs. a naive arrival-order handler.
Inputs: events, scenarioPreset, idempotencyWindowSec.
Evaluates Visa Compelling Evidence 3.0 (CE 3.0) 120d-365d historical footprint overlap (IP / device_id) and builds a non-destructive access_activity_log draft (<= 18,000 UTF-16 code units, submit: false).
Inputs: disputeId (required), customerId (required), demo, usageEvents, +4 more.
Normalizes 27 EU member states + Northern Ireland (XI) B2B VAT IDs (auto-converting Greece GR -> EL) and checks cross-border reverse-charge format eligibility locally (or simulates VIES states when demo: true).
Inputs: buyerVatId (required), demo, viesMode, sellerCountry, +1 more.
Generates and verifies raw-UTF8 HMAC-SHA256 webhook signatures for Stripe (Stripe-Signature t=,v1=), Shopify (X-Shopify-Hmac-Sha256 base64), and RevClamp (X-RevClamp-Signature) with 300s timestamp replay protection.
Inputs: secret (required), provider (required), rawPayload (required), timestampSec, +2 more.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Scored across 9 tools
Most tools target clearly distinct operations (VAT validation, ROI calculation, signature verification, reconciliation). The main overlap is between revclamp_lint_dispute_evidence and revclamp_stage_stripe_dispute_ce3, which both operate on access_activity_log payloads under the same 18,000 UTF-16 code unit and CE 3.0 constraints, so an agent could occasionally misselect between linting vs. staging.
All tool names use a consistent revclamp_verb_noun pattern with predictable verbs (simulate, validate, audit, calculate, evaluate, lint, reconcile, stage, verify). This consistency makes the surface highly predictable.
Nine tools is well within the appropriate range and each tool maps to a distinct billing/revenue-audit concern. No tools appear redundant or padding the surface.
The surface covers a broad lifecycle: webhook simulation and signature verification, VAT validation, leakage auditing, ghost-usage evaluation, dispute linting/staging, and net-terms reconciliation. Minor gaps exist, such as actually submitting a dispute (only a submit: false draft is staged) and no explicit tool for creating or correcting invoices.
One MCP endpoint for your company's tools, with per-person sign-in, policy and audit.
A paid remote MCP for hosted MCP server, built to return verdicts, receipts, usage logs, and audit-r
A paid remote MCP for CLI tool MCP, built to return verdicts, receipts, usage logs, and audit-ready
Read-only MCP over your own revenue and net margin across 14 billing rails
