Is cloudpayments-mcp safe to install?

SaferSkills independently audited cloudpayments-mcp (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md4.1 KB · Markdown

@theyahia/cloudpayments-mcp

MCP server for CloudPayments API -- one-step and two-step payments, refunds, subscriptions, orders (invoice links), transaction history. 12 tools.

Part of Russian API MCP series by @theYahia.

Quick Start

Claude Desktop

{
  "mcpServers": {
    "cloudpayments": {
      "command": "npx",
      "args": ["-y", "@theyahia/cloudpayments-mcp"],
      "env": {
        "CLOUDPAYMENTS_PUBLIC_ID": "your-public-id",
        "CLOUDPAYMENTS_API_SECRET": "your-api-secret"
      }
    }
  }
}

Claude Code

claude mcp add cloudpayments -e CLOUDPAYMENTS_PUBLIC_ID=your-id -e CLOUDPAYMENTS_API_SECRET=your-secret -- npx -y @theyahia/cloudpayments-mcp

Cursor / Windsurf

{
  "cloudpayments": {
    "command": "npx",
    "args": ["-y", "@theyahia/cloudpayments-mcp"],
    "env": {
      "CLOUDPAYMENTS_PUBLIC_ID": "your-public-id",
      "CLOUDPAYMENTS_API_SECRET": "your-api-secret"
    }
  }
}

HTTP Transport

HTTP_PORT=3000 npx @theyahia/cloudpayments-mcp
# or
npx @theyahia/cloudpayments-mcp --http 3000

Endpoints: POST /mcp (JSON-RPC), GET /health (status).

Auth

Variable	Required	Description
`CLOUDPAYMENTS_PUBLIC_ID`	Yes	Public ID (HTTP Basic username)
`CLOUDPAYMENTS_API_SECRET`	Yes	API secret (HTTP Basic password)

For testing, use the CloudPayments test terminal.

Tools (12)

Payments (5)

Tool	API Endpoint	Description
`charge_payment`	POST /payments/charge	One-step payment (immediate charge)
`auth_payment`	POST /payments/auth	Two-step payment (authorize/hold)
`confirm_payment`	POST /payments/confirm	Confirm authorized payment (full or partial)
`void_payment`	POST /payments/void	Void authorized payment (release hold)
`get_transaction`	POST /payments/find	Find transaction by ID

Refunds (1)

Tool	API Endpoint	Description
`refund_payment`	POST /payments/refund	Full or partial refund by transaction ID

Subscriptions (4)

Tool	API Endpoint	Description
`create_subscription`	POST /subscriptions/create	Create recurring subscription with token
`update_subscription`	POST /subscriptions/update	Update amount, interval, period
`cancel_subscription`	POST /subscriptions/cancel	Cancel active subscription
`list_subscriptions`	POST /subscriptions/find	List subscriptions for a user

Orders (1)

Tool	API Endpoint	Description
`create_order`	POST /orders/create	Create payment order (invoice link)

Transactions (1)

Tool	API Endpoint	Description
`list_transactions`	POST /payments/list	List all transactions for a date

Demo Prompts

Charge 5000 RUB from the card cryptogram, IP 192.168.1.1, description "Premium plan"

Create a monthly subscription for 999 RUB using token from the last payment, starting May 1st

Show me all transactions for yesterday and refund 2500 RUB on transaction 123456

Part of Russian API MCP Series

MCP	Status	Description
@metarebalance/dadata-mcp	ready	Addresses, companies, banks, phones
@theyahia/cbr-mcp	ready	Currency rates, key rate
@theyahia/yookassa-mcp	ready	Payments, refunds, receipts, payouts, webhooks
@theyahia/cloudpayments-mcp	ready	Payments, subscriptions, orders
...		+46 servers -- full list

License

MIT

cloudpayments-mcp— mcp server

Is cloudpayments-mcp safe to install?

@theyahia/cloudpayments-mcp

Quick Start

Claude Desktop

Claude Code

Cursor / Windsurf

HTTP Transport

Auth

Tools (12)

Payments (5)

Refunds (1)

Subscriptions (4)

Orders (1)

Transactions (1)

Demo Prompts

Part of Russian API MCP Series

License

Audit the pieces. Scan the whole. Decide.