Square MCP Server

Square Model Context Protocol Server

Official Square MCP server: the agent calls any Square API method, from catalog and customers to orders and payments

MCP serverHigh risk

square/square-mcp-server

Install

{
  "mcpServers": {
    "mcp_square_api": {
      "command": "npx",
      "args": ["mcp-remote", "https://mcp.squareup.com/sse"]
    }
  }
}

Hosted server with Square account sign-in.

This is third-party code. Review the repository files before installing.

What it does

The server exposes the whole Square API to the agent through three tools. The agent first discovers a service's methods, then fetches parameter details and only then makes the call. This covers catalog, inventory, customers, orders, payments, refunds, invoices, subscriptions, bookings and more. There is a hosted server with Square account sign-in and a local run with a token.

Who it is for. For merchants and developers who run payments and commerce on Square.

Good fit when

  • You need to export or update a Square catalog
  • You need to find orders, payments or customers by criteria
  • You want to test an integration in the Square sandbox

Not a fit when

  • Your business operates in Russia, where Square is not available
  • The agent must not touch live payments

Example request

Show Square catalog items that are out of stock

Limitations

The project is in beta. It requires a Square account, and Square only works in supported countries, not in Russia. The local run needs an access token; the hosted server uses OAuth sign-in. Writes can be disabled with DISALLOW_WRITES.

How to disable. Remove the mcp_square_api block from the client config; for the hosted server revoke app access in your Square account.

MCP

Transport
stdio, sse
Authentication
OAuth
Environment variables
Environment variables
ACCESS_TOKEN
secret
Square access token for the local run
SANDBOX
Use the Square sandbox
PRODUCTION
Use the production environment
DISALLOW_WRITES
Allow read-only operations
SQUARE_VERSION
Square API version

Security check

  • Handles payments, refunds and orders
  • Can change data in a live merchant account

README in short

The README shows running via npx square-mcp-server start and recommends the hosted OAuth server. It lists environment variables, including sandbox mode and read-only mode. It gives Goose and Claude Desktop configs, the three-tool workflow and the list of API services. The code is generated from Square's OpenAPI spec.

FAQ

How do I block changes?

For the local run set DISALLOW_WRITES=true so only read operations are allowed.

How do I use the sandbox?

Set SANDBOX=true and use a Square sandbox token.

Editors’ pick

Stripe's official MCP server, plugins and skills: the agent searches the API and docs, reads and changes account data

MCP serverHigh risk1.8K

Skills and an MCP server for options traders: quotes, technical analysis, Greeks, spreads, scanners and Interactive Brokers portfolio

MCP serverHigh risk365

A CLI and skill giving an agent access to a T-Investments account: portfolio, returns, bond screeners and confirmed orders

SkillHigh riskRussian stack44

Unofficial MCP server and skills for a personal T-Bank account: accounts, transfers, bill pay, tickets and groceries

MCP serverHigh riskRussian stack29