Mcp Saas Toolkit — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Saas Toolkit (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<h1 align="center"> 🧰 mcp-saas-toolkit (Power Edition) </h1>
<p align="center"> <strong>Give Claude superpowers over your SaaS stack.</strong><br /> A production-ready MCP server with 24 tools for Stripe, Twilio, Resend, GitHub, and Slack — plus pre-built workflow prompts and live resources. </p>
<p align="center"> <a href="https://www.npmjs.com/package/mcp-saas-toolkit"><img src="https://img.shields.io/npm/v/mcp-saas-toolkit?style=flat-square&color=CB3837" alt="npm version" /></a> <a href="https://opensource.org/licenses/MIT"><img src="https://img.shields.io/badge/license-MIT-blue?style=flat-square" alt="License: MIT" /></a> <a href="https://modelcontextprotocol.io"><img src="https://img.shields.io/badge/MCP-compatible-8A2BE2?style=flat-square" alt="MCP Compatible" /></a> </p>
<p align="center"> <em>Supported by Claude for Open Source</em> </p>
mcp-saas-toolkit is a Model Context Protocol (MCP) server that equips Claude with tools to call popular SaaS APIs on your behalf. Instead of copy-pasting API keys into chat, you configure the server once and then ask Claude things like:
"Onboard a new customer named Alice with email [email protected] (customer, email, slack announcement)." "Create a payment link for price_1ABC, email it to them, and let me know on Slack when sent." "Open a GitHub issue for the memory leak and assign it to John."
Claude uses the right tools, calls the right APIs, handles failures via built-in retry backoffs, and gives you the result — all within the conversation.
24 Tools across 5 Services:
🔋 MCP Prompts (Workflow Templates):
onboard_customer: Create Stripe customer → Send welcome email → Notify Slackinvoice_reminder: Check Stripe subscription → Create invoice → Email/SMS customerincident_report: Create GitHub issue → Alert Slack → Email stakeholdersnew_release: Fetch recent commits → Create GitHub issue → Announce on Slack📊 MCP Resources (Live Feeds):
saas://stripe/balance: Read current Stripe account balancesaas://stripe/recent-charges: Fetch recent charges instantlysaas://github/{owner}/{repo}/overview: Dynamic rich repository telemetrynpm install -g mcp-saas-toolkit
# Or use directly via npx mcp-saas-toolkitCopy the example .env file and fill in your keys:
# Logging level (debug, info, warn, error)
LOG_LEVEL=info
# Services (Only set keys for the ones you want to use)
GITHUB_TOKEN=ghp_...
SLACK_BOT_TOKEN=xoxb-...
STRIPE_SECRET_KEY=sk_test_...
TWILIO_ACCOUNT_SID=AC...
TWILIO_AUTH_TOKEN=...
TWILIO_PHONE_NUMBER=+1234567890
RESEND_API_KEY=re_...Open your config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS or %APPDATA%\Claude\claude_desktop_config.json on Windows):
{
"mcpServers": {
"saas-toolkit": {
"command": "npx",
"args": ["-y", "mcp-saas-toolkit"],
"env": {
"GITHUB_TOKEN": "ghp_...",
"STRIPE_SECRET_KEY": "sk_test_...",
"SLACK_BOT_TOKEN": "xoxb-..."
}
}
}
}Restart Claude Desktop. You should see all tools, resources, and templates appear!
Once the server is connected, try these multi-tool workflows:
"Look up the Stripe customer with email [email protected], check their subscription, and if it's past due, send them an SMS reminder at +15551234567."
>
"We have a prod incident. Open a bug report on the frontend repo, email the on-call at [email protected], and drop a red alert in the Slack #engineering channel."
>
"Read my Stripe balance resource, and summarize how we did this week to the #general channel."
Built with robustness in mind:
{ success: true, data } envelope.npm install
npm run build
npx @modelcontextprotocol/inspector node dist/index.js~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.