Mcp Openpay

io.github.codespar由 GitHub 帳號 codespar 發布v0.2.2更新於 Oct 24, 2026

MCP server for Openpay — BBVA-owned Mexican gateway (cards, SPEI, OXXO, subscriptions, payouts)

已驗證STDIO僅桌面金融商業與電商

概覽

AI 產生的概覽

針對墨西哥 Openpay 支付閘道的本機 MCP 伺服器，讓助理建立扣款、管理客戶、卡片、訂閱、撥款與 Webhook。

可以做什麼
  • 建立、查詢、請款與退款扣款，可選擇以客戶為範圍呼叫
  • 建立、更新、列出與刪除客戶，並將卡片權杖化、列出或刪除
  • 建立訂閱方案、為客戶訂閱並取消訂閱
  • 建立與列出撥款至銀行帳戶，並儲存或刪除客戶銀行帳戶
  • 註冊、列出與刪除 Webhook 端點
適用情境
適合需要讓助理操作墨西哥 Openpay 商戶帳戶的情境：受理卡片、SPEI 或 OXXO 付款，管理週期性訂閱，撥款至銀行帳戶，或設定 Webhook。可先在沙箱模式驗證流程，再接觸正式環境。
執行需求
透過 npm 套件以 npx 在本機執行，預設使用 stdio（也可用 MCP_HTTP 與 MCP_PORT 啟用 HTTP 模式）。需要以 OPENPAY_MERCHANT_ID 提供商戶編號、以 OPENPAY_PRIVATE_KEY 提供私有 API 金鑰；OPENPAY_ENV 選擇 sandbox（預設）或 production。需要能連線至 Openpay API 的網路。
安裝前請注意
OPENPAY_PRIVATE_KEY 中的私有 API 金鑰是完整商戶憑證，以 HTTP Basic 方式傳送，請勿寫入日誌或共用設定。多個工具會實際動用資金或變更資料：扣款、請款、退款、撥款、訂閱、刪除客戶與卡片，以及 Webhook。驗證流程前請將 OPENPAY_ENV 設為 sandbox。只有在符合 PCI-DSS 時才在伺服器端傳送原始卡號與 CVV，優先採用用戶端權杖化。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Mcp Openpay，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

@codespar/mcp-openpay

MCP server for Openpay — the BBVA-owned Mexican payment gateway.

Openpay is the main BBVA-backed alternative to Conekta for Mexican online merchants. Adding it to the catalog alongside @codespar/mcp-conekta closes the "big two" MX gateway story and opens the BBVA rails (SPEI, OXXO, domestic cards) to agents. Differentiators in this catalog: native subscriptions (plans + per-customer recurring billing) and marketplace payouts.

Tools (23)

ToolPurpose
create_chargeCreate a charge.
get_chargeRetrieve a charge.
capture_chargeCapture a previously authorized charge (when the original charge used capture=false).
refund_chargeRefund a captured charge.
create_customerCreate a customer record.
get_customerRetrieve a customer by Openpay customer id.
list_customersList customers with optional filters.
create_cardTokenize a card.
delete_cardDelete a tokenized card.
create_planCreate a subscription plan.
create_subscriptionSubscribe a customer to a plan.
create_payoutPay out MXN to a bank account.
update_customerUpdate a stored customer (PUT /customers/{id}).
delete_customerDelete a customer (DELETE /customers/{id}).
get_cardRetrieve a tokenized card.
list_cardsList tokenized cards.
create_bank_accountStore a customer bank account (POST /customers/{customer_id}/bankaccounts).
delete_bank_accountDelete a stored customer bank account (DELETE /customers/{customer_id}/bankaccounts/{id}).
cancel_subscriptionCancel a customer's subscription (DELETE /customers/{customer_id}/subscriptions/{id}).
list_payoutsList payouts.
create_webhookRegister a webhook endpoint (POST /webhooks).
list_webhooksList configured webhook subscriptions (GET /webhooks).
delete_webhookDelete a webhook subscription (DELETE /webhooks/{id}).

Install

bash
npm install @codespar/mcp-openpay

Environment

bash
OPENPAY_MERCHANT_ID="..."  # merchant id (part of the API URL path)OPENPAY_PRIVATE_KEY="..."  # private API key — secretOPENPAY_ENV="sandbox"      # 'sandbox' (default) | 'production'

Authentication

HTTP Basic. The private key is the username, and the password is empty:

Authorization: Basic base64(OPENPAY_PRIVATE_KEY + ":")Content-Type: application/json

The server handles the Base64 encoding automatically — you only configure the three env vars.

Base URLs

EnvHost
sandbox (default)https://sandbox-api.openpay.mx/v1/{merchant_id}
productionhttps://api.openpay.mx/v1/{merchant_id}

Run

bash
# stdio (default — for Claude Desktop, Cursor, etc)npx @codespar/mcp-openpay
# HTTP (for server-to-server testing)MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-openpay

Scoping notes

Several Openpay resources can be addressed at either merchant scope or customer scope. The tools expose this via an optional customer_id parameter:

  • create_charge, get_charge, capture_charge, refund_charge — routed to /customers/{customer_id}/... when customer_id is set, else /....
  • create_card, delete_card — same pattern.
  • create_payout — customer-scoped payout requires the customer to have requires_account=true.
  • create_subscription — customer scope is required by the API (plans are merchant-scoped; subscriptions are always per-customer).

PCI scope

Prefer client-side tokenization with Openpay.js and pass the resulting token_id / source_id to the server. Only send raw PANs/CVVs server-side if you are PCI-DSS compliant.

Docs

https://documents.openpay.mx/en/api

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

來源：packages/payments/openpay/README.md，提交 d0a519a

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

1
  1. v0.2.2最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分