RevClamp MCP Server

com.revclampPublished by revclamp.comOfficial publisherv1.20.24Updated Nov 7, 2026

Zero-take-rate Stripe 2025-03-31.basil, Visa CE 3.0 & EU/XI VIES VAT guardrails MCP server.

VerifiedStreamable HTTPWeb executableFinanceSecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

Deterministic, mostly local tools for auditing Stripe revenue leakage, staging Visa CE 3.0 dispute evidence, checking EU VAT IDs and reconciling B2B net terms.

What you can do
  • Audit Stripe subscriptions, usage events and open disputes for revenue leakage and chargeback readiness
  • Evaluate ghost usage per customer and reconcile Net-15/30/60 deposits, partial payments and credit notes in integer cents
  • Stage non-destructive Visa CE 3.0 dispute evidence drafts and lint evidence logs against the 18,000 UTF-16 limit
  • Normalize and check EU-27 and Northern Ireland VAT IDs, with optional live VIES consultation
  • Generate and verify Stripe, Shopify and RevClamp webhook signatures and simulate out-of-order webhook replay
  • Calculate margin savings and plan fit against contingency chargeback agency fees
When to use it
Useful when you want an assistant to sanity-check Stripe billing and dispute data, prepare CE 3.0 evidence, validate EU/XI VAT identifiers, or test webhook signature and idempotency logic without touching live Stripe records.
Requirements
Runs locally via npx with Node.js and needs no API key by default. An optional REVCLAMP_API_KEY enables the hosted workspace at api.revclamp.com for a durable ledger, autonomous dispute actions and live VIES lookups; REVCLAMP_MCP_URL overrides the endpoint. A webhook secret is needed for signature checks.
Before you install
With REVCLAMP_API_KEY set, tool arguments are sent over TLS to RevClamp's cloud, which can then perform Stripe dispute updates and signed entitlement-revocation webhooks. The key is a live workspace credential. Local mode is read-only and returns submit: false drafts, but review any cloud-mode action before enabling it.

Installation

In SourceWeft

  1. Open RevClamp MCP Server in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.revclamp%2Frevclamp-mcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "revclamp": {
      "type": "http",
      "url": "https://revclamp.com/api/mcp"
    }
  }
}

README

RevClamp MCP Server & CLI (revclamp-mcp)

[RevClamp Enterprise — B2B Revenue & Compliance Guardrails]

[mcptry]

revclamp-mcp is a standalone, zero-dependency Open-Source Model Context Protocol (MCP) Server & CLI (index.mjs + local_engine.mjs) implementing 9 deterministic B2B FinOps, Stripe 2025-03-31.basil, Visa CE 3.0, EU/XI VIES VAT, Shopify Plus B2B Net-15/30/60, and Webhook Security tools in pure Node.js.

  • 100% Local In-Process Execution (Default — Zero Network / Zero API Key Required): All 9 MCP tools (initialize, tools/list, and tools/call) execute locally in-process inside local_engine.mjs using pure Node.js (node:crypto HMAC-SHA256 verification, integer-cent double-entry accounting, 72-hour webhook replay state machines, and 18,000 UTF-16 code unit CE 3.0 linting). Zero network calls are ever made unless REVCLAMP_API_KEY or REVCLAMP_MCP_URL is explicitly configured.
  • Optional Hosted Cloud Workspace Sync (REVCLAMP_API_KEY): When REVCLAMP_API_KEY (rg_live_...) is configured, revclamp-mcp connects to RevClamp Enterprise (https://api.revclamp.com/api/mcp) to unlock the 90-day durable transactional usage & audit ledger, 24/7 autonomous Stripe dispute & entitlement webhook outbox, and real-time EU Commission VIES SOAP gateway consultation numbers.

Local Open-Core (local_engine.mjs) vs. Hosted Cloud (REVCLAMP_API_KEY)

CapabilityLocal Open-Core Default (Zero API Key)Hosted Cloud (REVCLAMP_API_KEY)
Execution & Network100% in-process (local_engine.mjs), zero network callsHTTPS JSON-RPC to https://api.revclamp.com/api/mcp (redirect: "error")
Usage & Audit StorageStateless evaluation of caller-supplied JSON snapshotsPersistent 90-day durable transactional ledger + Stripe historical backfill
Dispute & Entitlement ActionReturns non-destructive submit: false draft & revoke_entitlement decision24/7 autonomous Stripe webhook outbox (disputes.update & signed revoke webhooks)
EU & XI B2B VAT (VIES)Deterministic syntax & GR -> EL normalization (FORMAT_ONLY default, valid: null)Live EU Commission VIES SOAP consultation IDs + circuit-breaker retry queue (viesMode: "LIVE" + REVCLAMP_API_KEY)
Monthly Event TiersUnlimited local in-process evaluations (0 network cost)Free Sandbox (5,000 events/mo) · Starter $19/mo (100k) · Growth $59/mo (1M) · Scale $199/mo (5M)
Data Minimization & PrivacyNothing ever leaves your machineOnly explicit tools/call arguments are sent over TLS after local live-secret scrubbing (blocks sk_live_, non-test whsec_, and shpat_ locally before any network request)

Open-Source MCP Tools Implemented in local_engine.mjs (9)

Tool NameDomainLocal In-Process Implementation (local_engine.mjs)Execution Mode
revclamp_audit_revenue_leakageStripe Billing & UsageEvaluates caller-supplied customer/usage arrays (demo: true for synthetic sample) and returns upgrade hooks when no workspace ledger is connectedLocal In-Process (or Optional Cloud Key)
revclamp_evaluate_ghost_usageStripe 2025-03-31.basilEvaluates multi-subscription customer snapshots (has_more: false enforced) and 0–14d dunning grace windows for unpaid API/LLM bleedLocal In-Process (or Optional Cloud Key)
revclamp_stage_stripe_dispute_ce3Visa 10.4 / CE 3.0Evaluates 120d–365d prior undisputed charges (ip_subnet/device_id overlap) against caller-supplied usageEvents (demo: true for sample) and stages a non-destructive submit: false draft (<= 18,000 UTF-16 code units)Local In-Process (or Optional Cloud Key)
revclamp_validate_eu_vat_viesEU & XI B2B VATNormalizes 27 EU member states + Northern Ireland (XI) VAT IDs (GR -> EL), supports split (buyerCountryCode + vatNumber including numeric VAT IDs) or combined (buyerVatId / vatId) aliases with fail-closed CONFLICTING_PARAMETER_ALIASES guards, checks syntax locally (FORMAT_ONLY, valid: null), simulates errorWrappers (demo: true), or queries live EU VIES (viesMode: "LIVE" + REVCLAMP_API_KEY)Local In-Process (or Optional Live VIES)
revclamp_reconcile_b2b_net_termsB2B Wholesale Net-30Reconciles Net-15/30/60 upfront deposits and credit notes using integer EUR-cent double-entry accountingLocal In-Process (or Optional Cloud Key)
revclamp_verify_webhook_signatureWebhook HMAC-SHA256Generates and verifies Stripe-Signature, X-Shopify-Hmac-Sha256, and X-RevClamp-Signature over raw UTF-8 bytes (node:crypto) with 300s replay checksLocal In-Process (or Optional Cloud Key)
revclamp_calculate_roi_and_plan_fit0% Take-Rate ROI & Plan FitCalculates monthly and annual B2B margin savings in integer USD cents vs. 25%–30% chargeback agencies and recommends the optimal tierLocal In-Process (or Optional Cloud Key)
revclamp_simulate_webhook_replayWebhook Replay & FSMSimulates subscription lifecycle webhooks against a 72h deduplication Set and monotonic createdSec guard vs. naive arrival-order handlersLocal In-Process (or Optional Cloud Key)
revclamp_lint_dispute_evidenceDispute Evidence UTF-16 & CE 3.0Lints evidence[access_activity_log] payloads against the 18,000 UTF-16 code unit ceiling, non-destructive CE 3.0 markers, and merchant note preservationLocal In-Process (or Optional Cloud Key)

Quick Start (Claude Desktop / Cursor / Windsurf)

Add revclamp-mcp to your claude_desktop_config.json or .cursor/mcp.json. By default, revclamp-mcp runs 100% locally in-process with zero network calls and zero API keys required:

json
{  "mcpServers": {    "revclamp": {      "command": "npx",      "args": ["-y", "github:lhphong09t2/revclamp-mcp"]    }  }}

(Optional) To connect to a live workspace on https://revclamp.com/dashboard, pass REVCLAMP_API_KEY in env or use the hosted Streamable HTTP endpoint (POST https://api.revclamp.com/api/mcp):

bash
curl -sS -X POST https://api.revclamp.com/api/mcp \  -H "Content-Type: application/json" \  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}'

CLI Usage & <60s Local Smoke Check (--self-test)

bash
# Run a <60s local CLI smoke check (verifies all 9 tool schemas & executes a local_engine.mjs sample audit with zero API key)npx -y github:lhphong09t2/revclamp-mcp#v1.20.24 --self-test
# Provision a free Cloud Workspace instantly (zero email required; saves to ~/.revclamp/credentials.json) or bind a work email via 6-digit OTPnpx -y [email protected] --init-workspacenpx -y [email protected] --init-workspace [email protected]
# Verify the 6-digit OTP using REVCLAMP_API_KEY from environmentREVCLAMP_API_KEY="rg_live_..." npx -y [email protected] --verify-otp [email protected] 123456
# List all 9 MCP tools and JSON schemas (runs locally in-process)node index.mjs --list-tools
# Validate an EU or Northern Ireland (XI) B2B VAT ID (auto-converts Greece GR -> EL)node index.mjs --check-vat GR123456789 DE
# Calculate 0% take-rate ROI and optimal flat-rate plan fit (runs locally in-process)node index.mjs --calc-roi 10000 600 25 250000
# Simulate out-of-order webhook replay and 72-hour deduplication state machine (runs locally)node index.mjs --sim-replay out_of_order_stale_update_after_cancel
# Lint Stripe dispute evidence UTF-16 code units and non-destructive CE 3.0 markers (runs locally)node index.mjs --lint-evidence valid_ce3_non_destructive
# Verify webhook HMAC-SHA256 using REVCLAMP_WEBHOOK_SECRET from environment (runs locally)REVCLAMP_WEBHOOK_SECRET="whsec_test_secret_revclamp_sandbox_2026" node index.mjs --verify-webhook stripe
# Invoke Visa CE 3.0 readiness staging locally (pass demo: true for synthetic sample or usageEvents for real logs)node index.mjs --call revclamp_stage_stripe_dispute_ce3 '{"disputeId":"du_1Qxyz01","customerId":"cus_ent_88","disputeReason":"fraudulent","demo":true}'

Architecture & Engineering Deep-Dives (7 Post-Mortems & 8 Interactive Browser Tools)

1. Stripe 2025-03-31.basil Entitlement Guard & Visa CE 3.0 Two-Tier Routing

[Stripe basil entitlement and CE 3.0 flowchart]

2. EU VIES HTTP 200 OK Soft-Failure Circuit Breaker & B2B Net-Terms Reconciliation

[EU VIES circuit breaker flowchart]

3. Webhook HMAC-SHA256 Raw-Body Security, 72h Replay FSM & 0% Take-Rate ROI

Golden Trio B2B Intelligence Companion MCP Suite

Companion MCP Server & Apify ActorPrimary B2B Intelligence SignalLocal MCP Stdio CommandApify Store & npm
RevClamp AdPulse (@revclamp/google-ads-transparency-mcp)Zero-browser Google Ads Transparency Center (AR... entity disambiguation, CR... creatives, static content.js ad copy, regional disclosures)npx -y @revclamp/google-ads-transparency-mcp --mcp-stdioApify Store · npm
RevClamp TalentPulse (@revclamp/unified-ats-jobs-mcp)Zero-browser 5-in-1 B2B ATS Job & Hiring Signal Feed across Greenhouse, Workday CXS, Ashby, Lever, and SmartRecruitersnpx -y @revclamp/unified-ats-jobs-mcp --mcp-stdioApify Store · npm
RevClamp ContactPulse (@revclamp/b2b-domain-contact-enricher-mcp)Zero-browser B2B Domain Contact, RFC 9116 /.well-known/security.txt, Schema.org ContactPoint, and DoH MX / SPF / _dmarc Enrichernpx -y @revclamp/b2b-domain-contact-enricher-mcp --mcp-stdioApify Store · npm

Security & Resource Bounds

  • Local-First Deterministic Execution: Runs all 9 tools locally in-process inside local_engine.mjs with zero external npm dependencies.
  • Strict Origin Pinning (Cloud Mode): When REVCLAMP_API_KEY is provided, only connects to https://api.revclamp.com/api/mcp or https://revclamp.com/api/mcp over TLS (redirect: "error").
  • Bounded Execution: Enforces a hard 10,000ms request timeout (AbortSignal.timeout) and a 32,768-byte request/response payload cap.
  • Full LLM Reference: https://revclamp.com/llms-full.txt

License

MIT © RevClamp Enterprise

Source: README.md at commit 3febf12

Tools

9

revclamp_audit_revenue_leakage

Audit B2B Revenue Leakage & Dispute Readiness

Run a deterministic 90-day B2B revenue leakage and chargeback readiness audit across Stripe subscriptions, AI/API usage telemetry events, and open disputes. Executes as a 100% read-only, stateless diagnostic with zero external Stripe mutations. Returns structuredContent containing ok, mode, statelessEphemeralAudit, tenantId, dunningGracePeriodDays, costPerEventCents, and audit (scannedCustomers, scannedEvents, ghostLeakEventsCount, affectedCustomersCount, estimatedBleedUsd, disputesEligibleForAutoEvidence). Use this tool for portfolio-wide multi-customer audits; use revclamp_evaluate_ghost_usage for single-customer entitlement checks or revclamp_stage_stripe_dispute_ce3 to build a single dispute's Visa CE 3.0 evidence bundle.

ParametersdemodisputescustomersusageEventscostPerEventCentsdunningGracePeriodDays

revclamp_evaluate_ghost_usage

Evaluate Single-Customer Stripe Basil Ghost Usage

Evaluate whether a specific customer's AI or API usage event constitutes unpaid ghost usage across multi-subscription Stripe 2025-03-31.basil state, enforcing fail-closed pagination (has_more must be explicitly false) and configurable 0-14 day dunning grace windows. Executes as a stateless, read-only entitlement evaluator with zero side effects. Returns structuredContent containing ok, mode, statelessEphemeralAudit, tenantId, and evaluation (isGhostLeak, isGhostUsage, reason). Use this tool for real-time per-customer entitlement gating; use revclamp_audit_revenue_leakage for batch multi-customer portfolio audits.

ParametersdemocustomerIdusageEventoccurredAtSecsubscriptionsrequiredusageTimestampSecsubscriptionsHasMoredunningGracePeriodDays

revclamp_stage_stripe_dispute_ce3

Stage Visa CE 3.0 Stripe Dispute Evidence Draft

Evaluate Visa Compelling Evidence 3.0 (CE 3.0) qualification across 120-to-365-day historical charges (requiring at least 2 settled, non-refunded, non-disputed prior transactions sharing IP address, device fingerprint, or billing email) and assemble a non-destructive Stripe dispute evidence draft with submit hardcoded to false. Executes as a pure read-only staging computation that never auto-submits to card networks. Returns structuredContent containing ok, mode, statelessEphemeralAudit, tenantId, submitForcedFalse, ce3Qualification, and drawer (including stripeUpdateParams with submit: false and merged access_activity_log). Use this tool for single-dispute CE 3.0 qualification and evidence staging; use revclamp_audit_revenue_leakage for portfolio-wide dispute readiness counts.

ParametersdemodisputeIdcustomerIdusageEventsdisputeReasonpriorTransactionsdisputedTransactionexistingAccessActivityLogexistingUncategorizedText

revclamp_validate_eu_vat_vies

Validate EU/XI B2B VAT ID & VIES Reverse-Charge State

Normalize EU-27 and Northern Ireland (XI) B2B VAT identifiers (including mandatory Greece ISO-3166 GR to EL prefix normalization) and evaluate cross-border 0% VAT reverse-charge eligibility, VIES consultation evidence, or MS_UNAVAILABLE circuit-breaker fulfillment hold actions. Read-only and non-destructive; supports deterministic simulation modes ('VALID', 'INVALID', 'MS_UNAVAILABLE') or real-time European Commission VIES SOAP/REST lookup ('LIVE'). Returns structuredContent containing ok, mode, statelessEphemeralAudit, simulatedViesLookup, tenantId, normalizedVat, reverseChargeEligible, and viesDecision (status, action, zeroRateAllowed, consultationId). Use this tool for EU/XI VAT tax compliance; use revclamp_reconcile_b2b_net_terms for wholesale Net-15/30/60 deposit and credit-note accounting.

ParametersdemoviesModebuyerVatIdrequiredsupplyTypesellerCountryconsultationNumber

revclamp_reconcile_b2b_net_terms

Reconcile B2B Wholesale Net-15/30/60 Deposits & Credit Notes

Reconcile B2B wholesale Net-15, Net-30, and Net-60 invoice deposits, partial payments, and credit notes using exact integer minor-unit (EUR/USD cent) arithmetic with zero IEEE-754 floating-point drift. Executes as a pure, stateless, read-only financial reconciliation function. Returns structuredContent containing ok, mode, statelessEphemeralAudit, tenantId, and reconciliation (state, status, fulfillmentHold, releaseHoldAction, requiredDepositCents, remainingBalanceCents, creditDueCents, overpaidWarning, orderTag). Use this tool for B2B wholesale order deposit gating and Net-terms balance calculation; use revclamp_validate_eu_vat_vies for cross-border EU VAT number validation.

ParametersdemoorderIdtoleranceCentscreditNoteCentsorderTotalCentspaidAmountCentsrequiredtotalOrderCentscreditNotesCentspaymentTermsDaysrequiredDepositCentsrequiredDepositPercentdaysElapsedSinceInvoice

revclamp_verify_webhook_signature

Verify Stripe, Shopify & RevClamp Webhook HMAC-SHA256 Signatures

Generate and verify canonical Stripe-Signature (t=<unix>,v1=<hex_sha256>), X-Shopify-Hmac-Sha256 (<base64_sha256>), and X-RevClamp-Signature (t=<unix>,v1=<hex_sha256>) headers over exact UTF-8 webhook payload bytes using crypto.timingSafeEqual and a 300-second replay window guard. Enforces a Zero-Trust guard that blocks known live/production credential patterns (sk_live_, rk_live_, non-test whsec_..., shpss_..., shpat_..., rg_live_, rc_live_, AKIA..., and PEM private keys) with -32602 LIVE_SECRET_FORBIDDEN_IN_SANDBOX. Returns structuredContent containing ok, mode, statelessEphemeralAudit, tenantId, and verification (provider, verificationMode, headerName, generatedHeader, expectedSignature, signatureValid, verificationReason, timingSafeCompared, replayWindowApplicable, timestampSec, timestampSkewSeconds, toleranceSeconds, withinReplayWindow, payloadByteLength, payloadSha256, commonIntegrationTrap). Use this tool to debug webhook signature mismatches and replay skew.

ParametersdemosecretsecretsproviderrawPayloadtimestampSectoleranceSecsignatureHeader

revclamp_calculate_roi_and_plan_fit

Calculate B2B 0% Take-Rate ROI & Optimal Plan Fit

Deterministically calculate monthly and annual B2B margin savings using exact integer USD cents when replacing a 25%-30% contingency chargeback agency with RevClamp flat-rate 0% commission plans ($19 Starter, $59 Growth, $199 Scale). Evaluates monthlyWonDisputeUsd, monthlyGhostBleedUsd, contingencyTakeRatePercent, and monthlyUsageEvents to recommend the optimal tier. Returns structuredContent containing ok, mode, statelessEphemeralAudit, tenantId, recommendedTier, annualNetMarginSavedUsd, roiMultiple, and calculation.

ParametersmonthlyUsageEventsmonthlyGhostBleedUsdmonthlyWonDisputeUsdcontingencyTakeRatePercent

revclamp_simulate_webhook_replay

Simulate Webhook Replay & Out-of-Order State Machine

Deterministically evaluate an ordered or out-of-order sequence of 1-10 Stripe/Shopify/RevClamp subscription lifecycle webhooks against a 72-hour idempotency deduplication Set (eventId), a configurable idempotencyWindowSec (60s-2592000s, default: 259200s / 72h), and a monotonic transition timestamp guard (event.createdSec >= lastAppliedCreatedSec). Compares RevClamp's monotonic FSM against a naive overwrite-on-arrival handler to detect resurrected canceled subscriptions, stale tier downgrades, and duplicate retry side-effects. Returns structuredContent containing ok, mode, statelessEphemeralAudit, tenantId, simulation, steps, finalStatus, finalTier, finalEntitlementDecision, naiveFinalStatus, and naiveHandlerBug.

ParametersdemoeventsnowSecscenarioPresetidempotencyWindowSec

revclamp_lint_dispute_evidence

Stripe Dispute Evidence UTF-16 & CE 3.0 Completeness Linter

Deterministically lint a Stripe dispute evidence[access_activity_log] payload against Stripe's 18,000 UTF-16 code unit (String.prototype.length) ceiling, UTF-8 byte length, non-destructive --- BEGIN REVCLAMP CE3 EVIDENCE --- / --- END REVCLAMP CE3 EVIDENCE --- (or [RevClamp Verified Product Usage Log] / [/RevClamp Verified Product Usage Log]) delimiter markers, existing merchant note preservation, 17,922/17,920-char fixed wrapper capacity threshold (SKIP_POST_PRESERVE_DRAFT), and Visa Compelling Evidence 3.0 (CE 3.0) prior-charge (>= 2) + IP/device overlap qualification. Returns structuredContent containing ok, mode, statelessEphemeralAudit, tenantId, lint, utf16CodeUnits, maxUtf16Ceiling, remainingUtf16Units, withinCeiling, utf8Bytes, nonDestructiveMarkersPresent, merchantNotesPreserved, merchantNotesUtf16CodeUnits, fixedWrapperUtf16CodeUnits, merchantLogAtCapacity, stagingActionWhenAtCapacity, priorMatchedCount, hasIpMatch, hasDeviceMatch, ce3RubricPassed, and overallVerdict.

ParametersdemopresethasIpMatchhasDeviceMatchevidenceLogTextaccessActivityLogpriorMatchedCountpriorTransactionsdisputedTransactionexistingMerchantNotes

Version history

8
  1. v1.20.24LatestNov 7, 2026
  2. v1.20.20Nov 5, 2026
  3. v1.20.19Nov 1, 2026
  4. v1.20.17Nov 1, 2026
  5. v1.20.16Nov 1, 2026
  6. v1.20.14Nov 1, 2026
  7. v1.20.13Oct 31, 2026
  8. v1.20.11Oct 29, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Revclamp integrations

RevClamp MCP Server

Published by GitHub account revclamp

Remote MCP server for read-only Stripe revenue-leakage audits, Visa CE 3.0 dispute evidence drafting, EU VAT/VIES checks and B2B net-terms reconciliation.

Streamable HTTPWeb executable
Finance9 toolsOct 26, 2026