Square MCP Server
Square Model Context Protocol Server
Official Square MCP server: the agent calls any Square API method, from catalog and customers to orders and payments
Install
{
"mcpServers": {
"mcp_square_api": {
"command": "npx",
"args": ["mcp-remote", "https://mcp.squareup.com/sse"]
}
}
}Hosted server with Square account sign-in.
This is third-party code. Review the repository files before installing.
What it does
The server exposes the whole Square API to the agent through three tools. The agent first discovers a service's methods, then fetches parameter details and only then makes the call. This covers catalog, inventory, customers, orders, payments, refunds, invoices, subscriptions, bookings and more. There is a hosted server with Square account sign-in and a local run with a token.
Who it is for. For merchants and developers who run payments and commerce on Square.
Good fit when
- You need to export or update a Square catalog
- You need to find orders, payments or customers by criteria
- You want to test an integration in the Square sandbox
Not a fit when
- Your business operates in Russia, where Square is not available
- The agent must not touch live payments
Example request
Show Square catalog items that are out of stockLimitations
The project is in beta. It requires a Square account, and Square only works in supported countries, not in Russia. The local run needs an access token; the hosted server uses OAuth sign-in. Writes can be disabled with DISALLOW_WRITES.
How to disable. Remove the mcp_square_api block from the client config; for the hosted server revoke app access in your Square account.
MCP
- Transport
- stdio, sse
- Authentication
- OAuth
| Environment variables | |
|---|---|
| ACCESS_TOKEN secret | Square access token for the local run |
| SANDBOX | Use the Square sandbox |
| PRODUCTION | Use the production environment |
| DISALLOW_WRITES | Allow read-only operations |
| SQUARE_VERSION | Square API version |
Security check
- Handles payments, refunds and orders
- Can change data in a live merchant account
README in short
The README shows running via npx square-mcp-server start and recommends the hosted OAuth server. It lists environment variables, including sandbox mode and read-only mode. It gives Goose and Claude Desktop configs, the three-tool workflow and the list of API services. The code is generated from Square's OpenAPI spec.
FAQ
How do I block changes?
For the local run set DISALLOW_WRITES=true so only read operations are allowed.
How do I use the sandbox?
Set SANDBOX=true and use a Square sandbox token.
Related
Stripe's official MCP server, plugins and skills: the agent searches the API and docs, reads and changes account data
Skills and an MCP server for options traders: quotes, technical analysis, Greeks, spreads, scanners and Interactive Brokers portfolio
A CLI and skill giving an agent access to a T-Investments account: portfolio, returns, bond screeners and confirmed orders
Unofficial MCP server and skills for a personal T-Bank account: accounts, transfers, bill pay, tickets and groceries