mcp-openpay

@codespar/mcp-openpay

MCP server for Openpay — the BBVA-owned Mexican payment gateway.

Openpay is the main BBVA-backed alternative to Conekta for Mexican online merchants. Adding it to the catalog alongside @codespar/mcp-conekta closes the "big two" MX gateway story and opens the BBVA rails (SPEI, OXXO, domestic cards) to agents. Differentiators in this catalog: native subscriptions (plans + per-customer recurring billing) and marketplace payouts.

Tools (23)

Tool	Purpose
create_charge	Create a charge.
get_charge	Retrieve a charge.
capture_charge	Capture a previously authorized charge (when the original charge used capture=false).
refund_charge	Refund a captured charge.
create_customer	Create a customer record.
get_customer	Retrieve a customer by Openpay customer id.
list_customers	List customers with optional filters.
create_card	Tokenize a card.
delete_card	Delete a tokenized card.
create_plan	Create a subscription plan.
create_subscription	Subscribe a customer to a plan.
create_payout	Pay out MXN to a bank account.
update_customer	Update a stored customer (PUT /customers/{id}).
delete_customer	Delete a customer (DELETE /customers/{id}).
get_card	Retrieve a tokenized card.
list_cards	List tokenized cards.
create_bank_account	Store a customer bank account (POST /customers/{customer_id}/bankaccounts).
delete_bank_account	Delete a stored customer bank account (DELETE /customers/{customer_id}/bankaccounts/{id}).
cancel_subscription	Cancel a customer's subscription (DELETE /customers/{customer_id}/subscriptions/{id}).
list_payouts	List payouts.
create_webhook	Register a webhook endpoint (POST /webhooks).
list_webhooks	List configured webhook subscriptions (GET /webhooks).
delete_webhook	Delete a webhook subscription (DELETE /webhooks/{id}).

Install

npm install @codespar/mcp-openpay

Environment

OPENPAY_MERCHANT_ID="..."  # merchant id (part of the API URL path)
OPENPAY_PRIVATE_KEY="..."  # private API key — secret
OPENPAY_ENV="sandbox"      # 'sandbox' (default) | 'production'

Authentication

HTTP Basic. The private key is the username, and the password is empty:

Authorization: Basic base64(OPENPAY_PRIVATE_KEY + ":")
Content-Type: application/json

The server handles the Base64 encoding automatically — you only configure the three env vars.

Base URLs

Env	Host
sandbox (default)	https://sandbox-api.openpay.mx/v1/{merchant_id}
production	https://api.openpay.mx/v1/{merchant_id}

Run

# stdio (default — for Claude Desktop, Cursor, etc)
npx @codespar/mcp-openpay

# HTTP (for server-to-server testing)
MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-openpay

Scoping notes

Several Openpay resources can be addressed at either merchant scope or customer scope. The tools expose this via an optional customer_id parameter:

• create_charge, get_charge, capture_charge, refund_charge — routed to /customers/{customer_id}/... when customer_id is set, else /....
• create_card, delete_card — same pattern.
• create_payout — customer-scoped payout requires the customer to have requires_account=true.
• create_subscription — customer scope is required by the API (plans are merchant-scoped; subscriptions are always per-customer).

PCI scope

Prefer client-side tokenization with Openpay.js and pass the resulting token_id / source_id to the server. Only send raw PANs/CVVs server-side if you are PCI-DSS compliant.

Docs

https://documents.openpay.mx/en/api

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT