#Stripe

Read-only customer / charge / subscription lookups. By design, no writes.

This wrapper is read-only by design. No writes, no destructive operations.

#Get a token

Generate a Restricted API Key at https://dashboard.stripe.com/apikeys/create?type=restricted.

#Recommended scopes

• Use a Restricted Key, not the secret key.
• Set every resource permission to Read or None. Customers, Charges, Subscriptions, Invoices: Read. Everything else: None.
• Use the Test Mode key for non-prod accounts.

#Add it to the vault

bash
mcpvault add stripe

Example session:

text
$ mcpvault add stripe
Label: work-live
Description: Acme production Stripe
Restricted API Key (rk_live_…): rk_live_••••••••
✓ Validated against api.stripe.com (account: acct_••••, 4 read scopes)
✓ Saved.

#Tools exposed

• stripe_list_customers
• stripe_retrieve_customer
• stripe_list_charges
• stripe_list_subscriptions
• stripe_retrieve

#Notes

• mcpvault's Stripe wrapper has no create_charge, no refund, no update_subscription. Money does not move.
• If you need write operations, fork the wrapper. Don't add them upstream.

#Switch to this account

In any chat client wired to mcpvault, ask:

Switch to my <label> Stripe account.

The vault server's activate_account tool flips the active label. Wrappers re-read it on the next call — no restart.