Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 4
- 4 4
- 3 1
- 2 1
- 1 0
Trust in production
- Trust it - 70%
- With caveats - 20%
- Wouldn't - 10%
80% would recommend this server
How reviewers scored it
- Setup & docs 4.0
- Auth experience 4.0
- Reliability 4.2
- Maintainer responsiveness 3.8
Why it got a B
Official, with a hosted server (OAuth, production only, no read-only mode) and a local one that takes an access token. One generic tool reaches the whole Square API, including payments, refunds and payouts. Watch out: the local DISALLOW_WRITES switch still lets refunds through in the published package, so use a sandbox token and approve every call. Biggest deduction: the published package dates from April 2025, and recent commits are README edits by one maintainer.
How to connect
// Cursor MCP settings: Type "Command", then in the Command field enter:
npx mcp-remote https://mcp.squareup.com/mcp// claude_desktop_config.json (hosted, production only, OAuth sign-in)
{ "mcpServers": { "mcp_square_api": { "command": "npx",
"args": ["mcp-remote", "https://mcp.squareup.com/mcp"] } } }Is Square MCP Server safe?
Is Square MCP Server safe to use?
Square MCP Server grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Updates are occasional, so fixes may be slow to arrive.
Does Square MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Square MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Payments & Billing
- A Stripe MCPOfficial hosted Stripe server for customers, payments, invoices, subscriptions, and refunds.
- B PayPal MCP ServerOfficial PayPal server for invoices, orders, refunds, disputes, and subscriptions.
- C Adyen MCP ServerOfficial local server (alpha) for Adyen Checkout sessions, payment links, refunds, cancels, terminals and webhooks.
Embed this badge
[](https://trustedmcp.io/servers/square-mcp-server)<a href="https://trustedmcp.io/servers/square-mcp-server"><img src="https://trustedmcp.io/badge/square-mcp-server.svg" alt="TrustedMCP grade B" height="80"></a>Community reviews
Quietly reliable
I use this almost daily. Updates are a bit slow, but it is stable enough that it has not mattered. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent.
Used for Looking up failed payments for support
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Solid and well behaved
Our agents call this dozens of times a day. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. Read-only mode is the first thing I enable, and it covers most of what I need. Scoped the token to just what the agent needs and it respected that. Recommended, with sensible guardrails.
Used for Reconciling refunds
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Our team uses it every day
Started with it as an experiment, now it is a fixture. Turned on read-only mode on day one, highly recommend doing the same.
Used for Monthly revenue summaries
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Fine for a demo, not for prod
Ran into problems pretty quickly. Auth is handled properly, and revoking access later was one click. I would use it in prod, but only with a human approving writes.
Used for Answering billing questions from customers
- Setup & docs 2/5
- Auth experience 4/5
- Reliability 2/5
- Maintainer responsiveness 3/5
Clean integration, sensible permissions
Replaced a homegrown script with Square MCP Server and have not looked back. Issues get answered eventually. Not fast, not abandoned. Happy to run it in production.
Used for Testing checkout flows in test mode
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Surprisingly polished
Been running this for about a month now. Being official from Square (Block) counts for a lot when I pitch it to security. I like that access goes through a proper sign-in instead of a long-lived secret on disk.
Used for Answering billing questions from customers
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Set it up once, forgot about it
Of the Square integrations I tried, this one is the most predictable. Release pace is moderate, so I pin a version and check in monthly. Scoped the token to just what the agent needs and it respected that. Nice to use something maintained by Square (Block) rather than a random fork.
Used for Reconciling refunds
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Worth the five minutes to set up
Hooked Square MCP Server into Claude Code and it worked on the first try. Sign-in flow was painless and I never had to paste a key into a config file. Easy recommendation.
Used for Looking up failed payments for support
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
No complaints after a month
Installed it on a Friday, it was part of my workflow by Monday. Turned on read-only mode on day one, highly recommend doing the same. Release pace is moderate, so I pin a version and check in monthly. Auth is handled properly, and revoking access later was one click. Good choice if you need Square in your agent.
Used for Investigating disputes
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 4/5
OK for read-only work
I like it, with reservations. Issues get answered eventually. Not fast, not abandoned. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. Nice to use something maintained by Square (Block) rather than a random fork. Not something I would put in production yet.
Used for Monthly revenue summaries
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 2/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.