← Back to search

@sumup/mcp

GitHub Actions Scanned 25d ago

MCP server for interacting with SumUp

? Not scanned yet

Versions

0.11.1latest
Jul 11, 2026
0.11.0
Mar 27, 2026
0.10.1
Mar 4, 2026
0.10.0
Dec 20, 2025
0.9.0
Dec 20, 2025
+ show 9 moreshow less
0.8.0
Dec 20, 2025
0.4.0
Nov 24, 2025
0.3.0
Nov 24, 2025
0.1.1
Nov 2, 2025
0.1.0
Nov 2, 2025
0.0.5
Apr 28, 2025
0.0.4
Apr 9, 2025
0.0.3
Apr 9, 2025
0.0.1
Apr 3, 2025

Tools 39

create_checkout
annotations: none low

Creates a new payment checkout resource. The unique \

echo_value
annotations: none low

Returns the supplied value

create_reader
annotations: none low

Create a new Reader for the merchant account.

create_reader_checkout
annotations: none low

Creates a Checkout for a Reader. This process is asynchronous and the actual transaction may take some time to be started on the device. There are some caveats when using this endpoint: * The target device must be online, otherwise checkout won't be accepted * After the checkout is accepted, the system has 60 seconds to start the payment on the target device. During this time, any other checkout for the same device will be rejected. **Note**: If the target device is a Solo, it must be in version 3.3.24.3 or higher.

create_reader_terminate
annotations: none low

Terminate a Reader Checkout stops the current transaction on the target device. This process is asynchronous and the actual termination may take some time to be performed on the device. There are some caveats when using this endpoint: * The target device must be online, otherwise terminate won't be accepted * The action will succeed only if the device is waiting for cardholder action: e.g: waiting for card, waiting for PIN, etc. * There is no confirmation of the termination. If a transaction is successfully terminated and \

delete_reader
annotations: none low

Delete a reader.

get_reader
annotations: none low

Retrieve a Reader.

get_reader_status
annotations: none low

Provides the last known status for a Reader. This endpoint allows you to retrieve updates from the connected card reader, including the current screen being displayed during the payment process and the device status (battery level, connectivity, and update state). Supported States * \

list_readers
annotations: none low

List all readers of the merchant.

update_reader
annotations: none low

Update a Reader.

get_receipt
annotations: none low

Retrieves receipt specific data for a transaction.

get_merchant
annotations: none low

Retrieve a merchant.

get_person
annotations: none low

Returns a single person related to the merchant.

list_persons
annotations: none low

Returns a list of persons related to the merchant.

create_merchant_member
annotations: none low

Create a merchant member.

delete_merchant_member
annotations: none low

Deletes a merchant member.

get_merchant_member
annotations: none low

Retrieve a merchant member.

list_merchant_members
annotations: none low

Lists merchant members.

update_merchant_member
annotations: none low

Update the merchant member.

create_apple_pay_session
annotations: none low

Creates an Apple Pay merchant session for the specified checkout. Use this endpoint after the customer selects Apple Pay and before calling \

deactivate_checkout
annotations: none low

Deactivates an identified checkout resource. If the checkout has already been processed it can not be deactivated.

get_checkout
annotations: none low

Retrieves an identified checkout resource. Use this request after processing a checkout to confirm its status and inform the end user respectively.

get_payment_methods
annotations: none low

Get payment methods available for the given merchant to use with a checkout.

list_checkouts
annotations: none low

Lists created checkout resources according to the applied \

create_merchant_role
annotations: none low

Create a custom role for the merchant. Roles are defined by the set of permissions that they grant to the members that they are assigned to.

delete_merchant_role
annotations: none low

Delete a custom role.

get_merchant_role
annotations: none low

Retrieve a custom role by ID.

list_merchant_roles
annotations: none low

List merchant's custom roles.

update_merchant_role
annotations: none low

Update a custom role.

get_transaction_v2_1
annotations: none low

Retrieves the full details of an identified transaction. The transaction resource is identified by a query parameter and *one* of following parameters is required: - \

list_transactions_v2_1
annotations: none low

Lists detailed history of all transactions associated with the merchant profile.

refund_transaction
annotations: none low

Refunds an identified transaction either in full or partially.

list_memberships
annotations: none low

List memberships of the current user.

create_customer
annotations: none low

Creates a new saved customer resource which you can later manipulate and save payment instruments to.

deactivate_payment_instrument
annotations: none low

Deactivates an identified card payment instrument resource for a customer.

get_customer
annotations: none low

Retrieves an identified saved customer resource through the unique \

list_payment_instruments
annotations: none low

Lists all payment instrument resources that are saved for an identified customer.

update_customer
annotations: none low

Updates an identified saved customer resource's personal details. The request only overwrites the parameters included in the request, all other parameters will remain with their initially assigned values.

list_payouts_v1
annotations: none low

Lists payout and payout-deduction records for the specified merchant account within the requested date range. The response can include: - regular payouts (\

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 91

info
Tool: get_reader manifest_parser · 90%
info
SBOM generated: 596 components sbom_generator · 100%
low
Tool 'echo_value' has no annotations annotation_checker · 100%
low
Tool 'create_reader' has no annotations annotation_checker · 100%
low
Tool 'create_reader_checkout' has no annotations annotation_checker · 100%
low
Tool 'create_reader_terminate' has no annotations annotation_checker · 100%
low
Tool 'delete_reader' has no annotations annotation_checker · 100%
low
Tool 'get_reader' has no annotations annotation_checker · 100%
low
Tool 'get_reader_status' has no annotations annotation_checker · 100%
low
Tool 'list_readers' has no annotations annotation_checker · 100%
low
Tool 'update_reader' has no annotations annotation_checker · 100%
low
Tool 'get_receipt' has no annotations annotation_checker · 100%
low
Tool 'get_merchant' has no annotations annotation_checker · 100%
low
Tool 'get_person' has no annotations annotation_checker · 100%
low
Tool 'list_persons' has no annotations annotation_checker · 100%
low
Tool 'create_merchant_member' has no annotations annotation_checker · 100%
low
Tool 'delete_merchant_member' has no annotations annotation_checker · 100%
low
Tool 'get_merchant_member' has no annotations annotation_checker · 100%
low
Tool 'list_merchant_members' has no annotations annotation_checker · 100%
low
Tool 'update_merchant_member' has no annotations annotation_checker · 100%
low
Tool 'create_apple_pay_session' has no annotations annotation_checker · 100%
low
Tool 'create_checkout' has no annotations annotation_checker · 100%
low
Tool 'deactivate_checkout' has no annotations annotation_checker · 100%
low
Tool 'get_checkout' has no annotations annotation_checker · 100%
low
Tool 'get_payment_methods' has no annotations annotation_checker · 100%
low
Tool 'list_checkouts' has no annotations annotation_checker · 100%
low
Tool 'create_merchant_role' has no annotations annotation_checker · 100%
low
Tool 'delete_merchant_role' has no annotations annotation_checker · 100%
low
Tool 'get_merchant_role' has no annotations annotation_checker · 100%
low
Tool 'list_merchant_roles' has no annotations annotation_checker · 100%
low
Tool 'update_merchant_role' has no annotations annotation_checker · 100%
low
Tool 'get_transaction_v2_1' has no annotations annotation_checker · 100%
low
Tool 'list_transactions_v2_1' has no annotations annotation_checker · 100%
low
Tool 'refund_transaction' has no annotations annotation_checker · 100%
low
Tool 'list_memberships' has no annotations annotation_checker · 100%
low
Tool 'create_customer' has no annotations annotation_checker · 100%
low
Tool 'deactivate_payment_instrument' has no annotations annotation_checker · 100%
low
Tool 'get_customer' has no annotations annotation_checker · 100%
low
Tool 'list_payment_instruments' has no annotations annotation_checker · 100%
low
Tool 'update_customer' has no annotations annotation_checker · 100%
low
Tool 'list_payouts_v1' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.8.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.8.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: echo_value manifest_parser · 90%
info
Tool: create_reader manifest_parser · 90%
info
Tool: create_reader_checkout manifest_parser · 90%
info
Tool: create_reader_terminate manifest_parser · 90%
info
Tool: delete_reader manifest_parser · 90%
info
Tool: get_reader_status manifest_parser · 90%
info
Tool: list_readers manifest_parser · 90%
info
Tool: update_reader manifest_parser · 90%
info
Tool: get_receipt manifest_parser · 90%
info
Tool: get_merchant manifest_parser · 90%
info
Tool: get_person manifest_parser · 90%
info
Tool: list_persons manifest_parser · 90%
info
Tool: create_merchant_member manifest_parser · 90%
info
Tool: delete_merchant_member manifest_parser · 90%
info
Tool: get_merchant_member manifest_parser · 90%
info
Tool: list_merchant_members manifest_parser · 90%
info
Tool: update_merchant_member manifest_parser · 90%
info
Tool: create_apple_pay_session manifest_parser · 90%
info
Tool: create_checkout manifest_parser · 90%
info
Tool: deactivate_checkout manifest_parser · 90%
info
Tool: get_checkout manifest_parser · 90%
info
Tool: get_payment_methods manifest_parser · 90%
info
Tool: list_checkouts manifest_parser · 90%
info
Tool: create_merchant_role manifest_parser · 90%
info
Tool: delete_merchant_role manifest_parser · 90%
info
Tool: get_merchant_role manifest_parser · 90%
info
Tool: list_merchant_roles manifest_parser · 90%
info
Tool: update_merchant_role manifest_parser · 90%
info
Tool: get_transaction_v2_1 manifest_parser · 90%
info
Tool: list_transactions_v2_1 manifest_parser · 90%
info
Tool: refund_transaction manifest_parser · 90%
info
Tool: list_memberships manifest_parser · 90%
info
Tool: create_customer manifest_parser · 90%
info
Tool: deactivate_payment_instrument manifest_parser · 90%
info
Tool: get_customer manifest_parser · 90%
info
Tool: list_payment_instruments manifest_parser · 90%
info
Tool: update_customer manifest_parser · 90%
info
Tool: list_payouts_v1 manifest_parser · 90%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (1) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%