← Back to search Server uses network capabilities via: fetch(), requests, urllib Server uses filesystem capabilities via: fs, open(), os, path Server uses shell capabilities via: child_process, execSync() Server uses database capabilities via: sqlite3 Server uses env_vars capabilities via: os.environ, os.getenv(), process.env
@stripe/mcp
A command line tool for setting up Stripe MCP server
? Not scanned yet
Versions
0.3.3latestMar 24, 2026
0.3.2Mar 23, 2026
0.3.1Feb 12, 2026
0.3.0Feb 12, 2026
0.2.5Oct 29, 2025
+ show 10 moreshow less
0.2.4Aug 13, 2025
0.2.3Jun 5, 2025
0.2.2May 8, 2025
0.2.1Apr 9, 2025
0.2.0Apr 3, 2025
0.1.4Mar 27, 2025
0.1.3Feb 21, 2025
0.1.2Feb 19, 2025
0.1.1Feb 19, 2025
0.1.0Feb 19, 2025
Tools 0
No tools indexed yet.
Permissions 5
network medium filesystem low shell high database medium env_vars low Scan Findings 121
medium
Excessive dependency count: 177 direct dependencies
medium
Suspicious package name: react-dom
medium
OAuth implementation without PKCE
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: drizzle-orm@0.43.1 (GHSA-gpj5-g38j-94v9)
medium
Vulnerable dependency: next@15.5.12 (GHSA-267c-6grr-h53f)
medium
Vulnerable dependency: next@15.5.12 (GHSA-26hh-7cqf-hhc6)
medium
Vulnerable dependency: next@15.5.12 (GHSA-36qx-fr4f-26g5)
medium
Vulnerable dependency: next@15.5.12 (GHSA-3g8h-86w9-wvmq)
medium
Vulnerable dependency: next@15.5.12 (GHSA-3x4c-7xq6-9pq8)
medium
Vulnerable dependency: next@15.5.12 (GHSA-4633-3j49-mh5q)
medium
Vulnerable dependency: next@15.5.12 (GHSA-492v-c6pp-mqqv)
medium
Vulnerable dependency: next@15.5.12 (GHSA-4c39-4ccg-62r3)
medium
Vulnerable dependency: next@15.5.12 (GHSA-68g3-v927-f742)
medium
Vulnerable dependency: next@15.5.12 (GHSA-89xv-2m56-2m9x)
medium
Vulnerable dependency: next@15.5.12 (GHSA-8h8q-6873-q5fj)
medium
Vulnerable dependency: next@15.5.12 (GHSA-955p-x3mx-jcvp)
medium
Vulnerable dependency: next@15.5.12 (GHSA-c4j6-fc7j-m34r)
medium
Vulnerable dependency: next@15.5.12 (GHSA-ffhc-5mcf-pf4q)
medium
Vulnerable dependency: next@15.5.12 (GHSA-ggv3-7p47-pfv8)
medium
Vulnerable dependency: next@15.5.12 (GHSA-gx5p-jg67-6x7h)
medium
Vulnerable dependency: next@15.5.12 (GHSA-h64f-5h5j-jqjh)
medium
Vulnerable dependency: next@15.5.12 (GHSA-m99w-x7hq-7vfj)
medium
Vulnerable dependency: next@15.5.12 (GHSA-mg66-mrh9-m8jx)
medium
Vulnerable dependency: next@15.5.12 (GHSA-p9j2-gv94-2wf4)
medium
Vulnerable dependency: next@15.5.12 (GHSA-q4gf-8mx6-v5v3)
medium
Vulnerable dependency: next@15.5.12 (GHSA-q8wf-6r8g-63ch)
medium
Vulnerable dependency: next@15.5.12 (GHSA-vfv6-92ff-j949)
medium
Vulnerable dependency: next@15.5.12 (GHSA-wfc6-r584-vfw7)
medium
Vulnerable dependency: postcss@8.5.3 (GHSA-6g55-p6wh-862q)
medium
Vulnerable dependency: postcss@8.5.3 (GHSA-fxqj-rqcc-2cmp)
medium
Vulnerable dependency: postcss@8.5.3 (GHSA-qx2v-qp2m-jg93)
medium
Vulnerable dependency: postcss@8.5.3 (GHSA-r28c-9q8g-f849)
medium
Vulnerable dependency: body-parser@1.20.4 (GHSA-v422-hmwv-36x6)
medium
Vulnerable dependency: mongoose@6.13.6 (GHSA-664h-wqgq-64gw)
medium
Vulnerable dependency: mongoose@6.13.6 (GHSA-wpg9-53fq-2r8h)
medium
Vulnerable dependency: next@14.2.35 (GHSA-36qx-fr4f-26g5)
medium
Vulnerable dependency: next@14.2.35 (GHSA-3g8h-86w9-wvmq)
medium
Vulnerable dependency: next@14.2.35 (GHSA-3x4c-7xq6-9pq8)
medium
Vulnerable dependency: next@14.2.35 (GHSA-4633-3j49-mh5q)
medium
Vulnerable dependency: next@14.2.35 (GHSA-4c39-4ccg-62r3)
medium
Vulnerable dependency: next@14.2.35 (GHSA-68g3-v927-f742)
medium
Vulnerable dependency: next@14.2.35 (GHSA-89xv-2m56-2m9x)
medium
Vulnerable dependency: next@14.2.35 (GHSA-8h8q-6873-q5fj)
medium
Vulnerable dependency: next@14.2.35 (GHSA-955p-x3mx-jcvp)
medium
Vulnerable dependency: next@14.2.35 (GHSA-9g9p-9gw9-jx7f)
medium
Vulnerable dependency: next@14.2.35 (GHSA-c4j6-fc7j-m34r)
medium
Vulnerable dependency: next@14.2.35 (GHSA-ffhc-5mcf-pf4q)
medium
Vulnerable dependency: next@14.2.35 (GHSA-ggv3-7p47-pfv8)
medium
Vulnerable dependency: next@14.2.35 (GHSA-gx5p-jg67-6x7h)
medium
Vulnerable dependency: next@14.2.35 (GHSA-h25m-26qc-wcjf)
medium
Vulnerable dependency: next@14.2.35 (GHSA-h64f-5h5j-jqjh)
medium
Vulnerable dependency: next@14.2.35 (GHSA-m99w-x7hq-7vfj)
medium
Vulnerable dependency: next@14.2.35 (GHSA-p9j2-gv94-2wf4)
medium
Vulnerable dependency: next@14.2.35 (GHSA-q4gf-8mx6-v5v3)
medium
Vulnerable dependency: next@14.2.35 (GHSA-vfv6-92ff-j949)
medium
Vulnerable dependency: next@14.2.35 (GHSA-wfc6-r584-vfw7)
medium
Vulnerable dependency: next-auth@4.24.13 (GHSA-7rqj-j65f-68wh)
medium
Vulnerable dependency: next-auth@4.24.13 (GHSA-x445-f3h2-j279)
medium
Vulnerable dependency: next-auth@4.24.13 (GHSA-xmf8-cvqr-rfgj)
medium
Vulnerable dependency: sharp@0.33.4 (GHSA-f88m-g3jw-g9cj)
medium
Vulnerable dependency: postcss@8.4.38 (GHSA-6g55-p6wh-862q)
medium
Vulnerable dependency: postcss@8.4.38 (GHSA-fxqj-rqcc-2cmp)
medium
Vulnerable dependency: postcss@8.4.38 (GHSA-qx2v-qp2m-jg93)
medium
Vulnerable dependency: postcss@8.4.38 (GHSA-r28c-9q8g-f849)
medium
Vulnerable dependency: @ai-sdk/provider-utils@3.0.0 (GHSA-866g-f22w-33x8)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.17.1 (GHSA-345p-7cg4-v4c7)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.17.1 (GHSA-8r9q-7v3j-jr4g)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.17.1 (GHSA-w48q-cv73-mx4w)
medium
Vulnerable dependency: @langchain/core@0.3.6 (GHSA-r399-636x-v7f6)
medium
Vulnerable dependency: langchain@0.3.2 (GHSA-r399-636x-v7f6)
medium
Vulnerable dependency: pytest@7.4.4 (GHSA-6w46-j5rx-g56g)
medium
Vulnerable dependency: pytest@7.4.4 (PYSEC-2026-1845)
medium
Vulnerable dependency: python-dotenv@1.0.1 (GHSA-mf9w-mj56-hr94)
medium
Vulnerable dependency: python-dotenv@1.0.1 (PYSEC-2026-2270)
medium
Vulnerable dependency: black@24.10.0 (GHSA-3936-cmfr-pm3m)
medium
Vulnerable dependency: black@24.10.0 (PYSEC-2026-2120)
medium
Vulnerable dependency: black@24.10.0 (PYSEC-2026-2121)
medium
Vulnerable dependency: langchain@1.0.4 (GHSA-gr75-jv2w-4656)
medium
Vulnerable dependency: langchain@1.0.4 (PYSEC-2026-2192)
medium
Vulnerable dependency: langchain-openai@1.0.2 (GHSA-r7w7-9xr2-qq2r)
medium
Vulnerable dependency: langchain-openai@1.0.2 (PYSEC-2026-76)
medium
Vulnerable dependency: pytest@9.0.0 (GHSA-6w46-j5rx-g56g)
medium
Vulnerable dependency: pytest@9.0.0 (PYSEC-2026-1845)
medium
Vulnerable dependency: python-dotenv@1.2.1 (GHSA-mf9w-mj56-hr94)
medium
Vulnerable dependency: python-dotenv@1.2.1 (PYSEC-2026-2270)
medium
Vulnerable dependency: flask@3.1.2 (GHSA-68rp-wp8r-4726)
medium
Vulnerable dependency: flask@3.1.2 (PYSEC-2026-2151)
medium
Vulnerable dependency: pytest@8.4.2 (GHSA-6w46-j5rx-g56g)
medium
Vulnerable dependency: pytest@8.4.2 (PYSEC-2026-1845)
medium
Vulnerable dependency: python-dotenv@1.1.1 (GHSA-mf9w-mj56-hr94)
medium
Vulnerable dependency: python-dotenv@1.1.1 (PYSEC-2026-2270)
medium
Vulnerable dependency: pydantic@2.0.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.0.0 (PYSEC-2026-1812)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w)
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616)
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617)
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618)
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482)
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483)
info
package.json metadata
info
pyproject.toml metadata
info
Transport: streamable-http
info
Required env vars (26)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
medium
Permission: database access detected
low
Permission: env_vars access detected
info
SBOM generated: 1278 components
critical
Database URL with Password found in stripe-ai-1dc126b/benchmarks/saas-starter-partial-payments/run_inside_docker.sh
critical
Database URL with Password found in stripe-ai-1dc126b/benchmarks/saas-starter-embedded-checkout/run_inside_docker.sh
critical
Database URL with Password found in stripe-ai-1dc126b/benchmarks/saas-starter-partial-payments/environment/PROBLEM.md
high
Hardcoded Password found in stripe-ai-1dc126b/benchmarks/furever/environment/app/(dashboard)/settings/page.tsx
critical
Database URL with Password found in stripe-ai-1dc126b/benchmarks/saas-starter-embedded-checkout/environment/PROBLEM.md
medium
No build provenance detected (SLSA L0)