Yookassa Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Yookassa Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP (Model Context Protocol) server for the YooKassa payment API. Enables AI assistants to manage payments, refunds, receipts, webhooks, and saved payment methods through natural language.
| Tool | Description |
|---|---|
yookassa_create_payment | Create a payment and get confirmation URL |
yookassa_get_payment | Get payment details by ID |
yookassa_list_payments | List payments with filters (status, date range, method) |
yookassa_capture_payment | Capture held payment (two-stage) |
yookassa_cancel_payment | Cancel a held payment |
| Tool | Description |
|---|---|
yookassa_create_refund | Create full or partial refund |
yookassa_get_refund | Get refund details by ID |
yookassa_list_refunds | List refunds with filters |
| Tool | Description |
|---|---|
yookassa_create_webhook | Subscribe to payment events |
yookassa_list_webhooks | List all webhook subscriptions |
yookassa_delete_webhook | Remove a webhook subscription |
| Tool | Description |
|---|---|
yookassa_get_receipt | Get fiscal receipt by ID |
yookassa_list_receipts | List fiscal receipts |
| Tool | Description |
|---|---|
yookassa_get_payment_method | Get saved payment method |
yookassa_list_payment_methods | List saved payment methods |
In your YooKassa Merchant Profile, get your Shop ID and Secret Key.
npm install
npm run buildAdd to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"yookassa": {
"command": "node",
"args": ["/absolute/path/to/yookassa-mcp-server/dist/index.js"],
"env": {
"YOOKASSA_SHOP_ID": "your_shop_id",
"YOOKASSA_SECRET_KEY": "your_secret_key"
}
}
}
}TRANSPORT=http PORT=3000 YOOKASSA_SHOP_ID=xxx YOOKASSA_SECRET_KEY=yyy node dist/index.jsUses HTTP Basic Auth (Shop ID + Secret Key). Credentials are passed via environment variables and never logged.
All tools support response_format: "markdown" (default, human-readable) or "json" (machine-readable structured data).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.