Checkout.com MCP by usefulapi
by usefulapi.io · remote · no sign-in to list tools · v1.16.3 · published by io.usefulapi
Read Checkout.com payments, disputes, reports and payouts.
18 tools: 6 can delete or cancel things, 1 do something that can't be undone and 11 change things.
Scanned Oct 21, 2026
- Deletes or cancels6Claude Code: deny: see these tools
- Can't be undone1Claude Code: ask: see these tools
- Changes things11Claude Code: ask: see these tools
- Only reads0Claude Code: allow
12 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http checkoutcom https://checkoutcom.usefulapi.io/mcpFindings
Matches of fixed checks, with the text they matched.
The server marks "checkout_get_payment" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_get_payment" says "checkout": a word for a change.
The server marks "checkout_list_payments" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_list_payments" says "checkout": a word for a change.
The server marks "checkout_search_payments" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_search_payments" says "checkout": a word for a change.
The server marks "checkout_get_payment_actions" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_get_payment_actions" says "checkout": a word for a change.
The server marks "checkout_get_payment_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_get_payment_link" says "checkout": a word for a change.
The server marks "checkout_get_customer" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_get_customer" says "checkout": a word for a change.
Show 6 more findingsShow fewer
The server marks "checkout_get_instrument" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_get_instrument" says "checkout": a word for a change.
The server marks "checkout_list_disputes" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_list_disputes" says "checkout": a word for a change.
The server marks "checkout_get_dispute" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_get_dispute" says "checkout": a word for a change.
The server marks "checkout_list_reports" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_list_reports" says "checkout": a word for a change.
The server marks "checkout_get_report" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_get_report" says "checkout": a word for a change.
The server marks "checkout_get_forex_rates" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_get_forex_rates" says "checkout": a word for a change.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
18 tools
Deletes or cancels 6Claude Code: deny
checkout_capture_paymentCAPTURES a previously authorized payment — this MOVES MONEY: it settles the (full or partial) authorized amount.No findings
Why it is in this group
- The name "checkout_capture_payment" says "checkout": a word for a change.
- The name "checkout_capture_payment" also says "capture": a word that usually means money moves, which cannot be taken back.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it CAPTURES a previously authorized payment — this MOVES MONEY: it settles the (full or partial) authorized amount. Checkout.com: POST /payments/{id}/captures.
Annotations the server declares
- title: Capture payment
- destructiveHint: true
checkout_create_customerCREATES a customer record (which saved instruments and future payments can be attached to).No findings
Why it is in this group
- The name "checkout_create_customer" says "checkout": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it CREATES a customer record (which saved instruments and future payments can be attached to). This ADDS data to your account. Checkout.com: POST /customers.
Annotations the server declares
- title: Create customer
- destructiveHint: true
checkout_create_paymentCREATES a payment (request an authorization, or an immediate capture) — this MOVES MONEY: it charges a card / payment source.No findings
Why it is in this group
- The name "checkout_create_payment" says "checkout": a word for a change.
- The input carries an amount (input.amount) and a currency, so it moves money.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it CREATES a payment (request an authorization, or an immediate capture) — this MOVES MONEY: it charges a card / payment source. Checkout.com: POST /payments. Provide `amount` (minor units), `currency`, and a `source` object such as { type: 'token', token: 'tok_...' }, { type: 'id', id: 'src_...' } (a saved instrument), or { type: 'customer', id: 'cus_...' }.
Annotations the server declares
- title: Create payment
- destructiveHint: true
checkout_create_payment_linkCREATES a hosted Payment Link the customer can pay through — this sets up a way to COLLECT MONEY.No findings
Why it is in this group
- The name "checkout_create_payment_link" says "checkout": a word for a change.
- The input carries an amount (input.amount) and a currency, so it moves money.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it CREATES a hosted Payment Link the customer can pay through — this sets up a way to COLLECT MONEY. Checkout.com: POST /payment-links. Returns a URL to share with the customer.
Annotations the server declares
- title: Create payment link
- destructiveHint: true
checkout_refund_paymentREFUNDS a captured payment — this MOVES MONEY BACK to the customer (full or partial).No findings
Why it is in this group
- The name "checkout_refund_payment" says "checkout": a word for a change.
- The name "checkout_refund_payment" also says "refund": a word that usually means money moves, which cannot be taken back.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it REFUNDS a captured payment — this MOVES MONEY BACK to the customer (full or partial). Checkout.com: POST /payments/{id}/refunds.
Annotations the server declares
- title: Refund payment
- destructiveHint: true
checkout_void_paymentVOIDS (cancels) a payment that has been authorized but not yet captured — this releases the hold on the customer's funds.No findings
Why it is in this group
- The name "checkout_void_payment" says "checkout": a word for a change.
- The description's first verb is "void": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it VOIDS (cancels) a payment that has been authorized but not yet captured — this releases the hold on the customer's funds. Checkout.com: POST /payments/{id}/voids.
Annotations the server declares
- title: Void payment
- destructiveHint: true
Can't be undone 1Claude Code: ask
checkout_list_disputesList disputes (chargebacks) against your business, most-recently-modified first, with optional filters.1 finding
Why it is in this group
- The name "checkout_list_disputes" says "checkout": a word for a change.
- The input addresses people (input.to): what it sends cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "checkout_list_disputes" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_list_disputes" says "checkout": a word for a change.
Description, as the server wrote it List disputes (chargebacks) against your business, most-recently-modified first, with optional filters. Checkout.com: GET /disputes.
Annotations the server declares
- title: List disputes
- readOnlyHint: true
Changes things 11Claude Code: ask
checkout_get_customerGet a customer's details (email, name, phone, saved instruments) by id 'cus_...' or by email.1 finding
Why it is in this group
- The name "checkout_get_customer" says "checkout": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "checkout_get_customer" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_get_customer" says "checkout": a word for a change.
Description, as the server wrote it Get a customer's details (email, name, phone, saved instruments) by id 'cus_...' or by email. Checkout.com: GET /customers/{id}.
Annotations the server declares
- title: Get customer
- readOnlyHint: true
checkout_get_disputeGet all the details of a single dispute (reason code, amount, deadline, evidence status) by id 'dsp_...'.1 finding
Why it is in this group
- The name "checkout_get_dispute" says "checkout": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "checkout_get_dispute" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_get_dispute" says "checkout": a word for a change.
Description, as the server wrote it Get all the details of a single dispute (reason code, amount, deadline, evidence status) by id 'dsp_...'. Checkout.com: GET /disputes/{id}.
Annotations the server declares
- title: Get dispute
- readOnlyHint: true
checkout_get_forex_ratesGet the indicative foreign-exchange rates Checkout.com uses (e.g.1 finding
Why it is in this group
- The name "checkout_get_forex_rates" says "checkout": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "checkout_get_forex_rates" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_get_forex_rates" says "checkout": a word for a change.
Description, as the server wrote it Get the indicative foreign-exchange rates Checkout.com uses (e.g. for card payouts). Checkout.com: GET /forex/rates.
Annotations the server declares
- title: Get forex rates
- readOnlyHint: true
checkout_get_instrumentGet the details of a saved payment instrument (tokenized card / bank account) by id 'src_...'.1 finding
Why it is in this group
- The name "checkout_get_instrument" says "checkout": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "checkout_get_instrument" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_get_instrument" says "checkout": a word for a change.
Description, as the server wrote it Get the details of a saved payment instrument (tokenized card / bank account) by id 'src_...'. Checkout.com: GET /instruments/{id}.
Annotations the server declares
- title: Get instrument
- readOnlyHint: true
checkout_get_paymentGet the full details of a payment (or payment session) by its id, e.g.1 finding
Why it is in this group
- The name "checkout_get_payment" says "checkout": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "checkout_get_payment" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_get_payment" says "checkout": a word for a change.
Description, as the server wrote it Get the full details of a payment (or payment session) by its id, e.g. 'pay_...'. Checkout.com: GET /payments/{id}.
Annotations the server declares
- title: Get payment
- readOnlyHint: true
checkout_get_payment_actionsList all the actions (authorization, capture, refund, void, etc.) associated with a payment, latest first.1 finding
Why it is in this group
- The name "checkout_get_payment_actions" says "checkout": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "checkout_get_payment_actions" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_get_payment_actions" says "checkout": a word for a change.
Description, as the server wrote it List all the actions (authorization, capture, refund, void, etc.) associated with a payment, latest first. Checkout.com: GET /payments/{id}/actions.
Annotations the server declares
- title: Get payment actions
- readOnlyHint: true
checkout_get_payment_linkRetrieve the details and status of a Payment Link by its id, e.g.1 finding
Why it is in this group
- The name "checkout_get_payment_link" says "checkout": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "checkout_get_payment_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_get_payment_link" says "checkout": a word for a change.
Description, as the server wrote it Retrieve the details and status of a Payment Link by its id, e.g. 'pl_...'. Checkout.com: GET /payment-links/{id}.
Annotations the server declares
- title: Get payment link
- readOnlyHint: true
checkout_get_reportGet the metadata of a specific report (including its downloadable files) by id 'rpt_...'.1 finding
Why it is in this group
- The name "checkout_get_report" says "checkout": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "checkout_get_report" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_get_report" says "checkout": a word for a change.
Description, as the server wrote it Get the metadata of a specific report (including its downloadable files) by id 'rpt_...'. Checkout.com: GET /reports/{id}.
Annotations the server declares
- title: Get report
- readOnlyHint: true
checkout_list_paymentsList your business's payments that match a given reference.1 finding
Why it is in this group
- The name "checkout_list_payments" says "checkout": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "checkout_list_payments" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_list_payments" says "checkout": a word for a change.
Description, as the server wrote it List your business's payments that match a given reference. Checkout.com: GET /payments (query parameters). For richer filtering use checkout_search_payments.
Annotations the server declares
- title: List payments by reference
- readOnlyHint: true
checkout_list_reportsList the reports available on your account (settlement, payments, etc.) and their details.1 finding
Why it is in this group
- The name "checkout_list_reports" says "checkout": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "checkout_list_reports" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_list_reports" says "checkout": a word for a change.
Description, as the server wrote it List the reports available on your account (settlement, payments, etc.) and their details. Checkout.com: GET /reports.
Annotations the server declares
- title: List reports
- readOnlyHint: true
checkout_search_paymentsSearch payments using flexible query filters (this is a READ — it queries, it does not mutate).1 finding
Why it is in this group
- The name "checkout_search_payments" says "checkout": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "checkout_search_payments" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "checkout_search_payments" says "checkout": a word for a change.
Description, as the server wrote it Search payments using flexible query filters (this is a READ — it queries, it does not mutate). Checkout.com: POST /payments/search. Pass a `query` filter object and/or paging fields.
Annotations the server declares
- title: Search payments
- readOnlyHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.16.3. Values in angle brackets are yours to fill in.
claude mcp add --transport http checkoutcom https://checkoutcom.usefulapi.io/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [],
"ask": [
"mcp__checkoutcom__checkout_get_payment",
"mcp__checkoutcom__checkout_list_payments",
"mcp__checkoutcom__checkout_search_payments",
"mcp__checkoutcom__checkout_get_payment_actions",
"mcp__checkoutcom__checkout_get_payment_link",
"mcp__checkoutcom__checkout_get_customer",
"mcp__checkoutcom__checkout_get_instrument",
"mcp__checkoutcom__checkout_list_disputes",
"mcp__checkoutcom__checkout_get_dispute",
"mcp__checkoutcom__checkout_list_reports",
"mcp__checkoutcom__checkout_get_report",
"mcp__checkoutcom__checkout_get_forex_rates"
],
"deny": [
"mcp__checkoutcom__checkout_create_payment",
"mcp__checkoutcom__checkout_capture_payment",
"mcp__checkoutcom__checkout_refund_payment",
"mcp__checkoutcom__checkout_void_payment",
"mcp__checkoutcom__checkout_create_payment_link",
"mcp__checkoutcom__checkout_create_customer"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as checkoutcom. Review it before you use it.