Is io.github.theYahia/yookassa-mcp safe to use?

io.github.theYahia/yookassa-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.theYahia/yookassa-mcp?

io.github.theYahia/yookassa-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.theYahia/yookassa-mcp do?

io.github.theYahia/yookassa-mcp provides 6 tools: Auth, Timeout, Retry, Transport, Windsurf and 1 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.theYahia/yookassa-mcp?

io.github.theYahia/yookassa-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.theYahia/yookassa-mcp actively maintained?

io.github.theYahia/yookassa-mcp is actively maintained — last commit was 24 days ago. It has 3 GitHub stars.

io.github.theYahia/yookassa-mcp

@theyahia/yookassa-mcp

MCP server for YooKassa payment API — payments, refunds, receipts (54-FZ). 10 tools. First MCP for

3 227/wk 6 tools GitHub npm

No known CVEs

No license

Actively maintained

Last commit 24d ago

Works with most clients

Transport: stdio, sse, http

6 tools · ~168 tok

Grade A · 0.1% of 200K ctx

Edit this pageView history

Finance

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "yookassa": {
      "env": {
        "YOOKASSA_SHOP_ID": "your-shop-id",
        "YOOKASSA_SECRET_KEY": "your-secret-key"
      },
      "args": [
        "-y",
        "@theyahia/yookassa-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-theyahia-yookassa-mcp)](https://mcppedia.org/s/io-github-theyahia-yookassa-mcp)

Read me

What io.github.theYahia/yookassa-mcp does

MCP server for YooKassa API -- payments, refunds, receipts (54-FZ), payouts, webhooks, recurring, SBP, marketplace splits. 20 tools.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@theyahia/yookassa-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

82/100across 5 weighted dimensions

How we score →

0255075100

−18

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @theyahia/yookassa-mcp against OSV.dev.

Inventory

Tools (6)

Click any tool to inspect its schema.

~168 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.theYahia/yookassa-mcp safe to use?: io.github.theYahia/yookassa-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.theYahia/yookassa-mcp?: io.github.theYahia/yookassa-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.theYahia/yookassa-mcp do?: io.github.theYahia/yookassa-mcp provides 6 tools: Auth, Timeout, Retry, Transport, Windsurf and 1 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.theYahia/yookassa-mcp?: io.github.theYahia/yookassa-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.theYahia/yookassa-mcp actively maintained?: io.github.theYahia/yookassa-mcp is actively maintained — last commit was 24 days ago. It has 3 GitHub stars.

Similar servers

Others in finance

View all →

Printr MCP Server90

Let AI agents create, discover, and track tokens across chains via Printr.

3 9

Alpha Vantage Mcp89

Real-time financial market data: stocks, forex, crypto, commodities, and economic indicators

178 3

io.github.PromptPartner/bexio-mcp-server88

Swiss accounting integration for Bexio. 310 tools for invoices, contacts, projects.

20 6

io.github.Licinexus/mcp88

Brazilian public procurement (PNCP) and Federal Revenue CNPJ data — 16 tools, 4 prompts.

68 3

MCP Security Weekly

Get CVE alerts and security updates for io.github.theYahia/yookassa-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Finance

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "yookassa": {
      "env": {
        "YOOKASSA_SHOP_ID": "your-shop-id",
        "YOOKASSA_SECRET_KEY": "your-secret-key"
      },
      "args": [
        "-y",
        "@theyahia/yookassa-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-theyahia-yookassa-mcp)](https://mcppedia.org/s/io-github-theyahia-yookassa-mcp)

Read me

What io.github.theYahia/yookassa-mcp does

MCP server for YooKassa API -- payments, refunds, receipts (54-FZ), payouts, webhooks, recurring, SBP, marketplace splits. 20 tools.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@theyahia/yookassa-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

@theyahia/yookassa-mcp

MCP server for YooKassa API -- payments, refunds, receipts (54-FZ), payouts, webhooks, recurring, SBP, marketplace splits. 20 tools.

Part of Russian API MCP series by @theYahia.

Quick Start

Claude Desktop

{
  "mcpServers": {
    "yookassa": {
      "command": "npx",
      "args": ["-y", "@theyahia/yookassa-mcp"],
      "env": {
        "YOOKASSA_SHOP_ID": "your-shop-id",
        "YOOKASSA_SECRET_KEY": "your-secret-key"
      }
    }
  }
}

Claude Code

claude mcp add yookassa -e YOOKASSA_SHOP_ID=your-id -e YOOKASSA_SECRET_KEY=your-key -- npx -y @theyahia/yookassa-mcp

VS Code / Cursor

{
  "servers": {
    "yookassa": {
      "command": "npx",
      "args": ["-y", "@theyahia/yookassa-mcp"],
      "env": {
        "YOOKASSA_SHOP_ID": "your-shop-id",
        "YOOKASSA_SECRET_KEY": "your-secret-key"
      }
    }
  }
}

Windsurf

{
  "mcpServers": {
    "yookassa": {
      "command": "npx",
      "args": ["-y", "@theyahia/yookassa-mcp"],
      "env": {
        "YOOKASSA_SHOP_ID": "your-shop-id",
        "YOOKASSA_SECRET_KEY": "your-secret-key"
      }
    }
  }
}

Streamable HTTP (remote / Docker)

⚠️ The HTTP transport exposes money-moving tools. It requires a Bearer token, binds to 127.0.0.1 by default, and validates Host/Origin (DNS-rebinding protection). Never expose it directly to the internet — put it behind an authenticating reverse proxy / mTLS. See SECURITY.md.

MCP_AUTH_TOKEN="$(openssl rand -hex 32)" HTTP_PORT=3000 npx -y @theyahia/yookassa-mcp --http

Then call /mcp with Authorization: Bearer <MCP_AUTH_TOKEN>.

Endpoints:

POST /mcp -- MCP Streamable HTTP transport (Bearer auth required; stateless — POST only)
GET /health -- unauthenticated health check ({ "status": "ok", "tools": <count> })

Environment Variables

Variable	Required	Description
`YOOKASSA_SHOP_ID`	Yes	Shop ID (Settings -> Shop)
`YOOKASSA_SECRET_KEY`	Yes	Secret key (Integration -> API Keys)
`YOOKASSA_PAYOUT_AGENT_ID`	Payouts	Gateway id (agentId) for the Payouts product (Settings -> Payouts)
`YOOKASSA_PAYOUT_SECRET_KEY`	Payouts	Secret key for the Payouts gateway
`HTTP_PORT`	No	Port for HTTP transport (default 3000); enables `--http` mode
`MCP_AUTH_TOKEN`	HTTP only	Required in HTTP mode. Bearer token clients must send on `/mcp`
`HTTP_HOST`	No	Bind address for HTTP mode (default `127.0.0.1`; set `0.0.0.0` to expose — only behind a proxy)
`MCP_ALLOWED_HOSTS`	No	Comma-separated `Host` allowlist (default `127.0.0.1:<port>,localhost:<port>`)
`MCP_ALLOWED_ORIGINS`	No	Comma-separated browser `Origin` CORS allowlist (default: none — browser origins rejected)
`YOOKASSA_DEBUG`	No	Set to `1` to trace each request (method/path/status/latency/idempotency-key) to stderr — never logs secrets, the auth header, or request bodies

Test mode / safety

This server drives real money operations. While developing:

Create a test shop in the YooKassa dashboard and use its YOOKASSA_SHOP_ID / YOOKASSA_SECRET_KEY.
Confirm you are in test mode by calling get_shop_info — expect "test": true — before switching to a live shop.
In a live shop, `create

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

82/100across 5 weighted dimensions

How we score →

0255075100

−18

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @theyahia/yookassa-mcp against OSV.dev.

Inventory

Tools (6)

Click any tool to inspect its schema.

~168 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.theYahia/yookassa-mcp safe to use?: io.github.theYahia/yookassa-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.theYahia/yookassa-mcp?: io.github.theYahia/yookassa-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.theYahia/yookassa-mcp do?: io.github.theYahia/yookassa-mcp provides 6 tools: Auth, Timeout, Retry, Transport, Windsurf and 1 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.theYahia/yookassa-mcp?: io.github.theYahia/yookassa-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.theYahia/yookassa-mcp actively maintained?: io.github.theYahia/yookassa-mcp is actively maintained — last commit was 24 days ago. It has 3 GitHub stars.