Skip to content

com.marutap/marutap

by marutap.com · remote · no sign-in to list tools · v1.0.0 · published by com.marutap

Agent requests a purchase, the human taps approve, the agent gets a card scoped to it.

Deletes · 1Final · 1Changes · 2
CompareRegistry entry

7 tools: 1 can delete or cancel things, 1 do something that can't be undone, 2 change things and 3 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http marutap https://mcp.marutap.com/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

7 tools

Deletes or cancels 1Claude Code: deny
  • cancel_subscriptionCancel a subscription mandate.No findings

    Why it is in this group

    • The name "cancel_subscription" says "cancel": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Cancel a subscription mandate. Safe — canceling never spends money, and the merchant can never charge again afterwards.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Cancel subscription
Can't be undone 1Claude Code: ask
  • request_paymentRequest the user's approval to pay for a purchase.No findings

    Why it is in this group

    • The name "request_payment" says "request": a word for a change.
    • The name "request_payment" also says "payment": a word that usually means money moves, which cannot be taken back.
    • The input carries an amount (input.amount) and a currency, so it moves money.
    Description, as the server wrote it
    Request the user's approval to pay for a purchase. Usually returns `{auto_approved: false, approval_url}` — show the approval_url to the user so they can review the total and approve with one tap, then call get_payment_result. If the user's spending policy auto-approves this purchase (e.g. under their cap at an allowlisted merchant), it returns `{auto_approved: true, status: "approved", card}` immediately — no approval needed, just use the card. Args: amount: Total to charge, in major units (e.g. 18.50 dollars). merchant: Human-readable merchant / store name shown on the approval screen. line_items: Optional list of {"name": str, "quantity": int, "amount_cents": int}. currency: ISO currency code, default "usd".

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Request payment approval
Changes things 2Claude Code: ask
  • record_orderReport the merchant's order reference back after checkout, so the user can later reverse (refund) the purchase.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Report the merchant's order reference back after checkout, so the user can later reverse (refund) the purchase. `order_ref` is the merchant's payment id (e.g. a Stripe PaymentIntent).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Record merchant order reference
  • request_subscriptionSet up a recurring subscription mandate (e.g.No findings

    Why it is in this group

    • The name "request_subscription" says "request": a word for a change.
    Description, as the server wrote it
    Set up a recurring subscription mandate (e.g. Netflix at up to $16/month). Requires the user's explicit one-time approval — returns an approval_url. The mandate is merchant-locked and capped: the merchant can never charge more than `cap` per period, and the user can cancel anytime (after which the merchant can never charge again). Args: merchant: merchant to authorize (e.g. "Netflix"). cap: max amount per period in major units (e.g. 16.00). interval: "weekly" | "monthly" | "yearly".

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Request subscription approval
Only reads 3Claude Code: allow
  • get_payment_resultPoll for the outcome of a payment request.No findings

    Why it is in this group

    • The name "get_payment_result" says "get": a word for reading.
    Description, as the server wrote it
    Poll for the outcome of a payment request. Long-polls up to wait_seconds. Returns status one of: pending, approved, settled, declined, expired, not_found, claim_pending. When approved, includes a single-use `card` (number, cvc, exp) locked to this purchase — use it to complete checkout at the merchant. If still "pending"/"claim_pending", call again. For a claim (charge_id = the "clm_…" poll_id from request_payment): pass the agent_secret you received. The first approved result also contains `connect_token` — persist it and send it as the Authorization bearer on all future calls.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
    • readOnlyHint: true
    • title: Get payment result
  • list_payment_requestsList this agent's payment requests and whether each has been approved yet.No findings

    Why it is in this group

    • The name "list_payment_requests" says "list": a word for reading.
    Description, as the server wrote it
    List this agent's payment requests and whether each has been approved yet. Use this to see the state of every request you've made — not just poll one saved charge_id. Each item includes its `status` (pending, approved, settled, declined, expired) so you can tell which are still waiting and which the user has acted on. For a pending request it also returns the `approval_url` (re-surface it to the user); once a request is approved, call get_payment_result(charge_id) to fetch the card. Args: status: which to return — "open" (default, still-pending only) or "all". limit: max requests to return (default 20, capped at 100), newest first.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: List payment requests
  • list_subscriptionsList the user's subscription mandates and their status.No findings

    Why it is in this group

    • The name "list_subscriptions" says "list": a word for reading.
    Description, as the server wrote it
    List the user's subscription mandates and their status.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: List subscriptions

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http marutap https://mcp.marutap.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__marutap__get_payment_result",
      "mcp__marutap__list_payment_requests",
      "mcp__marutap__list_subscriptions"
    ],
    "ask": [
      "mcp__marutap__request_payment",
      "mcp__marutap__record_order",
      "mcp__marutap__request_subscription"
    ],
    "deny": [
      "mcp__marutap__cancel_subscription"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as marutap. Review it before you use it.