Stripe Agent Toolkit / MCPStripe Agent Toolkit / MCP
Stripe 官方给 agent 的开发工具线(stripe/ai,MIT):查 API 用法、查账户对象、 测试模式试操作。两条澄清:它与「agent 直接收款」的 agentic commerce 产品线不是一回事; 写操作(退款/发票)真实存在——按 key 权限最坏面设防。
Stripe's official agent tooling line (stripe/ai, MIT): look up API usage, query account objects, rehearse in test mode. Two clarifications: it is not the agentic-commerce (ACP payments) product line; and write tools (refunds/invoices) exist — defend against the worst case of your key's permissions.
适合与不适合When to use it, when not to
适合:Stripe 集成开发流、测试模式下的 agent 操作演练。 不适合:要硬只读边界;非 Stripe 栈。
Fits: Stripe integration dev flows, rehearsing agent operations in test mode. Not a fit: hard read-only boundaries; non-Stripe stacks.
中文生态China availability 国产 / 国内可直接用 / 备案状态 · 快照domestic / direct access / CAC filing · snapshot 2026-10-21
- 出品属地Origin
- 国外出品foreign-made Stripe, Inc.(美国)。Stripe, Inc. (US).
- 国内使用Direct access
- 大陆可直连direct OK docs.stripe.com 直连实测 200(2026-10-21);stripe.com 主域直连 000(波动标注)。docs.stripe.com measured 200 direct (2026-10-21); the stripe.com apex measured 000 (fluctuating, noted).
- 备案状态CAC filing
- 未见于备案名单not in filing list:未见于网信办公示名单(2026-10-21 检索);该产品未面向大陆公众提供服务,备案不适用。not in the CAC public registry (searched 2026-10-21); the product does not serve the mainland public, so filing does not apply.
备案信息以网信办《生成式人工智能服务已备案信息》公示名单为准(按批次滚动更新,本站只抄编号不解读);「大陆可直连」是本站从大陆网络直连实测的结果,不是厂商承诺。GitHub 类站点当日实测有波动,口径写在依据里。Filing status is quoted from the CAC public registry (updated batch by batch; this site copies the number and does not interpret it). "Direct access" is this site's own reachability measurement from a mainland network, not a vendor promise. GitHub-hosted sites fluctuated on the measurement day — the note says so.
固定坐标系Fixed coordinate system
11 个维度dimensions, 与同分区其他对象逐项可比each comparable item by item against others in the same section.
- 模型与开放条件Model & openness
它自己不调模型——被 MCP 客户端调用的接口实现。它把 Stripe 后台能力 (产品/价格/客户/支付查询、文档检索)包装成工具给 agent 用。
It calls no model itself — an interface implementation called by MCP clients. It wraps Stripe dashboard capabilities (product/price/customer/payment queries, docs retrieval) as tools for agents.
- 运行位置Where it runs
本地进程(Python/TS 包起 stdio)为主;GitHub stripe/ai 2,000★, 最近推送 2026-10-30(API 核验)。Stripe 另有 agentic commerce 产品线(ACP 等)—— 那是「agent 直接收款」的另一层,不算这个 server 本体。
Mainly a local process (Python/TS packages starting stdio); GitHub stripe/ai 2,000★, last push 2026-10-30 (API verified). Stripe also has an agentic commerce product line (ACP etc.) — that is a separate layer of "agents taking payments directly" and does not count as this server itself.
- 本地文件Local files
不碰本机文件系统——作用域是 Stripe 云端账户数据(customers/products/invoices 等)。
Never touches the local file system — the scope is Stripe cloud account data (customers/products/invoices etc.).
- 关机后的任务Tasks after shutdown
stdio 随客户端生死;无后台任务语义。
stdio lives and dies with the client; no background-task semantics.
- 工具与扩展Tools & extensions
Stripe API 检索、账户数据查询、docs 搜索等;写能力(建产品/价格)存在—— 完整清单以仓 README 为准,未逐条清点。
Stripe API retrieval, account data queries, docs search, etc.; write capabilities (creating products/prices) exist — the complete inventory follows the repo README, not enumerated item by item.
- 上下文与记忆Context & memory
无 server 侧跨会话记忆——状态在 Stripe 账户本身。
No server-side cross-session memory — state lives in the Stripe account itself.
- 权限与限制Permissions & limits
凭据=Stripe API key,按 key 权限走:测试/正式 key 差别巨大。 官方工具支持按 key 类型与工具白名单裁剪;支付写操作(退款/发送发票)真实存在—— 接 agent 前按 key 权限最坏面设防。
Credential = Stripe API key, everything follows the key's permissions: the difference between test and live keys is huge. The official tooling supports trimming by key type and tool allowlists; payment write operations (refunds/sending invoices) genuinely exist — before hooking up an agent, defend against the worst case of the key's permissions.
- 适合什么任务Best for
适合:Stripe 集成开发时让 agent 查 API 用法、查账户对象、试测试模式操作。 不适合:要「只读保险」硬边界;非 Stripe 栈。
Fits: letting an agent look up API usage, query account objects, and try test-mode operations while developing Stripe integrations. Not a fit: hard "read-only insurance" boundaries; non-Stripe stacks.
- 传输方式Transport
stdio(Python/TS 包本地起进程)为主;官方文档另有远程线说明——未逐条核验。 核验:docs.stripe.com/agentic-commerce 200、stripe/ai 仓(2026-10-21 直抓)。
stdio (Python/TS packages starting a local process) is primary; the official docs also describe a remote line — not verified item by item. Verified: docs.stripe.com/agentic-commerce 200, stripe/ai repo (direct fetch 2026-10-21).
- 认证机制Authentication
Stripe API key(测试/正式两态);key 权限=工具权限上界。 受限 key(restricted keys)支持面未逐条核验。
Stripe API key (test/live states); key permissions = the upper bound of tool permissions. Support surface of restricted keys not verified item by item.
- 权限范围Permission scope
读面:账户对象查询、API 参考检索;写面:建产品/价格、发票、退款类工具存在。 工具白名单裁剪可收窄;无工具级人工审批机制的官方说明。
Read surface: account object queries, API reference retrieval; write surface: create products/prices, invoice and refund tools exist. Tool-allowlist trimming can narrow it; no official docs for a tool-level human approval mechanism.
头号误解Top misconception
- 把 Agent Toolkit 与 agentic commerce(ACP 收款线)混谈——一个是开发工具一个是商业产品线Mixing the Agent Toolkit with the agentic-commerce (ACP payments) line — one is a dev tool, the other a commerce product line
- 用正式 key 接 agent 试写操作——先测试模式,写面(退款等)按最坏假设设防Plugging a live key into an agent for write rehearsals — start in test mode; defend write tools (refunds etc.) at the worst case
- 找 stripe/agent-toolkit 旧仓名——现役官方线在 stripe/ai 仓(2026-10-21 API 核验)Looking for the old stripe/agent-toolkit repo name — the live official line is the stripe/ai repo (API-verified 2026-10-21)
未知项清单Known unknowns
- 工具全清单与写工具明细(未逐条清点)
- restricted keys 的支持粒度(未逐条核验)
- 远程托管线当前状态(未逐条核验)
- The full tool inventory and write-tool details (not enumerated item by item)
- The granularity of restricted-keys support (not verified item by item)
- The current status of the hosted remote line (not verified item by item)
证据来源Evidence sources
判断可回到以下一手源复核。本站核验日Every judgement can be rechecked against the primary sources below. Verified on 2026-10-30,内容更新日content updated on 2026-10-21。
| 类型Type | 名称Name | 链接Link |
|---|---|---|
| docs | Stripe · 官方 agentic commerce 文档(工具线口径,2026-10-21 直抓核验)Stripe · official agentic commerce docs (tooling line wording, direct-fetched and verified 2026-10-21) | https://docs.stripe.com/agentic-commerce |
| repo | stripe/ai · 仓库(MIT;2,000★,最近推送 2026-10-30,GitHub API 核验)stripe/ai · repository (MIT; 2,000★, last push 2026-10-30, GitHub API verified) | https://github.com/stripe/ai |
| changelog | Stripe · 官方 changelog(changelog)Stripe · official changelog (changelog) | https://docs.stripe.com/changelog |
实测记录Measured runs
本档未在真实客户端逐项跑通;工具清单与权限来自官方 README。
This site has not completed measured runs. The test protocol is at protocols/mcp/_protocol.md.
相关条目Related entries
- Supabase MCPSupabase MCP同为「开发工具型 server」:两者都把「凭据权限=安全边界」写在了明处。Both "dev-tooling servers": both state plainly that "credential permissions = the security boundary".
- CursorCursor另一层 · AI 编程Other layer · AI coding
- Claude Code IDE 扩展Claude Code (IDE extension)另一层 · AI 编程Other layer · AI coding
本页由This page is generated from the ai-handbook 数据层生成(CC BY 4.0)。data layer (CC BY 4.0).
方法论与坐标系定义见仓库内For the methodology and coordinate definitions, see METHODOLOGY.md.