You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
SecOps -- Mandatory environment isolation (sandbox/production), write gating, confirm gate for destructive operations, credential scrubbing in all error paths
Token efficiency -- Pipe-delimited lists, field selection, human-readable money, null-field omission, pagination hints with cursor -- not raw JSON dumps
{"data":[{"id":"pro_abc123","name":"Pro Plan","description":"Professional subscription plan with all features","type":"standard","tax_category":"standard","image_url":null,"custom_data":null,"status":"active","import_meta":null,"created_at":"2026-03-15T10:00:00.000000Z","updated_at":"2026-03-15T10:00:00.000000Z"}],"meta":{"request_id":"req_abc","pagination":{"per_page":50,"next":"...","has_more":true,"estimated_total":25}}}
PADDLE_ENVIRONMENT must be sandbox or production. Missing or invalid values fail closed -- no accidental operations against the wrong environment.
Write gate
All mutating operations require PADDLE_WRITE_ENABLED=true. Without it, the server is read-only.
Confirm gate
Destructive operations that are difficult or impossible to reverse require confirm=true:
Cancel subscription
Delete payment method
Delete notification setting
Run simulation
Credential scrubbing
API keys (pdl_*) and Bearer tokens are scrubbed from all error messages. Credentials never leak through tool responses.
Bearer auth (HTTP transport)
When PADDLE_MCP_API_TOKEN is set, every HTTP request must include a matching Authorization: Bearer <token> header. Constant-time comparison via secrets.compare_digest.
R/W legend: R = read, W = write (PADDLE_WRITE_ENABLED=true), W+C = write + confirm (confirm=true)
Development
make install-dev # Install with dev + test dependencies
make test# Run tests
make check # Lint + format check + type check
make run # Run server (stdio)
Sidereal integration
This MCP implements the billing-v1 service contract with full conformance (6/6 required, 8/8 recommended, 6/6 optional operations). Registered in the Sidereal Plugin Registry as a certified plugin.