Square MCP Server
Square Model Context Protocol Server
Official Square MCP server: the agent calls any Square API method, from catalog and customers to orders and payments
- 109 ★ on the repository
- Last commit
- Apache-2.0
Broad access
Why this level
- Handles payments, refunds and orders
- Can change data in a live merchant account
Install
- Works in
Manual install
{
"mcpServers": {
"mcp_square_api": {
"command": "npx",
"args": ["mcp-remote", "https://mcp.squareup.com/sse"]
}
}
}Hosted server with Square account sign-in.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Handles payments, refunds and orders
- Can change data in a live merchant account
This is third-party code. Review the repository files before installing.
What it does
The server exposes the whole Square API to the agent through three tools. The agent first discovers a service's methods, then fetches parameter details and only then makes the call. This covers catalog, inventory, customers, orders, payments, refunds, invoices, subscriptions, bookings and more. There is a hosted server with Square account sign-in and a local run with a token.
Who it is for. For merchants and developers who run payments and commerce on Square.
Good fit when
- You need to export or update a Square catalog
- You need to find orders, payments or customers by criteria
- You want to test an integration in the Square sandbox
Not a fit when
- Your business operates in Russia, where Square is not available
- The agent must not touch live payments
Example request
Show Square catalog items that are out of stockMCP
- Transport
- stdio, sse
- Authentication
- OAuth
Environment variables
ACCESS_TOKENsecret- Square access token for the local run
SANDBOX- Use the Square sandbox
PRODUCTION- Use the production environment
DISALLOW_WRITES- Allow read-only operations
SQUARE_VERSION- Square API version
Limitations
The project is in beta. It requires a Square account, and Square only works in supported countries, not in Russia. The local run needs an access token; the hosted server uses OAuth sign-in. Writes can be disabled with DISALLOW_WRITES.
How to disable. Remove the mcp_square_api block from the client config; for the hosted server revoke app access in your Square account.
FAQ
How do I block changes?
For the local run set DISALLOW_WRITES=true so only read operations are allowed.
How do I use the sandbox?
Set SANDBOX=true and use a Square sandbox token.
Discussion
No questions or reviews yet.
Related
MCP serversStripe's official MCP server, plugins and skills: the agent searches the API and docs, reads and changes account data
Sberbank business API MCP server
@theyahia/sber-mcp
An MCP server for the Sberbank Business API: accounts, balance, statements, payment orders and counterparties for an AI agent
MCP server for the MoySklad JSON API 1.2: stock, orders, profit reports and document creation behind two safety gates
Official Paddle Billing MCP server: catalog, customers, transactions, subscriptions and reports via your agent, with a filter for risky operations
Intuit's official local MCP server: an agent finds and creates invoices, payments and customers in QuickBooks Online
YooKassa MCP server
MCP-сервер ЮKassa
YooKassa official MCP: an agent creates payment links and invoices, checks statuses and refunds, but cannot move money on its own
README in short
The README shows running via npx square-mcp-server start and recommends the hosted OAuth server. It lists environment variables, including sandbox mode and read-only mode. It gives Goose and Claude Desktop configs, the three-tool workflow and the list of API services. The code is generated from Square's OpenAPI spec.