HitPay MCP Server

com.hit-payPublished by hit-pay.comOfficial publisherv1.0.0Updated Nov 2, 2026

Official HitPay MCP: sales, payouts, balances; create payment links and invoices. OAuth; no refunds.

VerifiedStreamable HTTPWeb executableFinanceBusiness & Commerce

Overview

AI-generated overview

Official HitPay MCP server that lets an assistant read sales, balances and customers and create payment links, invoices and recurring plans in a live HitPay…

What you can do
  • Read account status, balances, charges, payment requests, customers, invoices, subscription plans and static QR codes
  • Create payment requests with checkout URLs, invoices, customers, embedded and static QR codes, webhook registrations and recurring billing
  • Query sales, transactions, payouts and balances of the live business
  • Sign in through the HitPay login over OAuth instead of an API key
When to use it
Useful when you want an assistant to look up HitPay sales, payouts and balances, or to create payment links, invoices, customers and recurring plans directly in your HitPay business account.
Requirements
Remote MCP endpoint at mcp.hit-pay.com over streamable HTTP; OAuth sign-in with a HitPay account, and only business owners and admins can authorize it. No API key or environment variables are needed for the hosted server.
Before you install
It acts on your live HitPay business account: creating payment requests, invoices, customers, webhooks and recurring billing changes real data and can move money. Only owners and admins can authorize it, so grant access deliberately. Refunds are not offered, and the README notes that destructive or financial operations such as refunds, deletions, transfers and cancellations are excluded.

Installation

In SourceWeft

  1. Open HitPay MCP Server in the dashboard and add it to a workspace.
  2. Connect the required credentials. They are stored privately and never shown on public pages.
  3. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.hit-pay%2Fmcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.

{
  "mcpServers": {
    "hitpay": {
      "type": "http",
      "url": "https://mcp.hit-pay.com/"
    }
  }
}

README

HitPay Plugin for Claude Code

Zero-config SEA payment integration for Claude Code. Gives Claude deep knowledge of HitPay's payment gateway plus live API access — so when developers ask for payment integration, Claude scaffolds production-ready code with the right payment methods, webhook handling, and checkout flows.

What's Inside

LayerWhat It DoesFiles
MCP ServerLive API access — create payments, check statuses, query account.mcp.json
SkillsTeach Claude correct code patterns for HitPay integrationskills/ (5 skills)
CommandsDeveloper actions — scaffold, lookup, test, QR checkoutcommands/ (4 commands)

Installation

Via Marketplace (recommended)

/plugin marketplace add hit-pay/claude-code-plugin/plugin install hitpay@hitpay-plugins

Local Development

bash
git clone https://github.com/hit-pay/claude-code-plugin.git hitpay-pluginclaude --plugin-dir ./hitpay-plugin

Setup

Set your HitPay API credentials:

bash
export HITPAY_API_KEY=your_api_key_hereexport HITPAY_SALT=your_webhook_salt_here

Get these from your HitPay Dashboard under Settings > Payment Gateway > API Keys.

Skills

Skills are auto-invoked when Claude detects relevant context in your conversation.

SkillTriggers OnWhat It Teaches
payment-integration"add HitPay", "payment checkout", "accept payments"API routes, redirect/QR/selector flows, auth headers, test cards
webhook-handler"webhook signature", "payment notification", "verify webhook"HMAC-SHA256 verification, event types, IP allowlisting, idempotency
payment-methods"methods in Malaysia", "which payment methods", "supported methods"Country-to-method mapping, API values, currencies, unavailable methods
drop-in-ui"embed payment form", "HitPay.js", "checkout popup"HitPay.js script, init options, Next.js integration, event handling
qr-checkout"QR checkout page", "QR payment page", "show QR code for PayNow"Pre-rendered QR images, local HTML page, offline-capable, no CDN

Commands

CommandDescriptionExample
/hitpay:initScaffold a complete integration/hitpay:init nextjs sg,my
/hitpay:methodsLook up payment methods by country/hitpay:methods ph
/hitpay:webhook-testGenerate test webhook payload + curl/hitpay:webhook-test charge.created
/hitpay:qr-checkoutGenerate QR payment page with scannable codes/hitpay:qr-checkout 100 sgd paynow

MCP Tools

When HITPAY_API_KEY is set, Claude can use these tools during development:

Read Operations

  • get_account_status — Check KYC and enabled providers
  • get_balances — Current account balances
  • get_payment_request — Payment request details
  • list_payment_requests — List payment requests
  • list_charges — List charges with filters
  • get_charge_detail — Charge details
  • list_customers — List customers
  • get_customer — Customer details
  • list_invoices — List invoices
  • list_subscription_plans — Subscription plans
  • list_static_qrs — Static QR codes
  • get_supported_qr_methods — Available QR methods
  • get_account_info — Account summary

Create Operations

  • create_payment_request — Create payment with checkout URL
  • create_customer — Create customer record
  • create_invoice — Create invoice
  • create_embedded_qr — Generate QR for payment collection
  • create_static_qr — Create permanent QR (POS)
  • create_webhook_event — Register webhook URL
  • create_recurring_billing — Set up subscription

Hosted HitPay MCP Server

HitPay also runs an official MCP server at https://mcp.hit-pay.com/ for querying and acting on your live HitPay business: sales, transactions, payouts and balances, plus creating payment links, invoices, products and recurring plans. It signs you in with your HitPay login over OAuth, so there is no API key to set. Only business owners and admins can authorize it.

bash
claude mcp add --transport http hitpay https://mcp.hit-pay.com/

Then run /mcp and choose hitpay to sign in. See the MCP server docs.

Supported Markets

MarketCurrencyKey Methods
SingaporeSGDPayNow, GrabPay, ShopeePay, Cards
MalaysiaMYRGrabPay, ShopeePay, Touch 'n Go, FPX
PhilippinesPHPQR Ph, GCash, ShopeePay
ThailandTHBPromptPay, TrueMoney
VietnamVNDVietQR, ZaloPay
IndiaINR→SGDUPI
AustraliaAUDPayTo
Cross-borderAuto FX9 borderless QR methods

Security

This plugin follows a safe-by-default approach:

  • Included: Read operations + payment creation (reversible/safe)
  • Excluded from skills: Refunds, deletions, transfers, cancellations (destructive/financial operations)
  • Webhook verification: All generated webhook handlers include HMAC-SHA256 signature checks
  • API keys: Never exposed client-side in generated code

License

MIT

Source: README.md at commit 3f72463

Tools

0
This server asks you to sign in, so SourceWeft could not read its tools without an account and has not indexed them. What a connected account sees can depend on that account and its permissions.

Version history

1
  1. v1.0.0LatestSep 18, 2026

Score

85% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts