Stripe Mpp

@magistr/stripe-mppv2026.07.21.2beta· 1d agoMODELSSKILLS

Security Notice

This extension includes AI agent skills that can modify AI assistant behavior. Review the skill files before installing.

01README

Stripe Machine Payments Protocol (MPP) — agent buyer (probe/mint/pay over HTTP-402 Payment auth), consumer buyer (grant a Shared Payment Token from a Link wallet via link-cli, spend by reference), and full seller API (challenge/verify/charge/receipt/reconcile/refund) for fiat Shared Payment Tokens, built on mppx and the Stripe preview SDK

02Release Notes

2026.07.21.2

Dependency bump: mppx@0.8.6 → 0.8.12 (patch, preview channel). No breaking changes to the Challenge / Credential / Receipt codecs or the Mppx / Stripe server APIs.

Wire format unchanged, on durable evidence: the crypto primitives are byte-identical in the regenerated lock (@noble/hashes@1.8.0 backs the HMAC-SHA256 id-binding, @noble/curves@1.9.1, @scure/* all unmoved), and the upstream review of the 0.8.6..0.8.12 releases (0.8.7, 0.8.8, 0.8.9, 0.8.11, 0.8.12 — 0.8.10 was never published) found no change to the HMAC challenge-id binding, key derivation, domain separators, or the challenge/credential/receipt serialization. The 0.8.7..0.8.12 deltas are Celo/Tempo/session-voucher and mppx validate-command code this fiat/SPT model does not import.
Transitive drift from the lockfile regeneration: viem 2.54.2 → 2.55.4, ox 0.14.29 → 0.14.30, @stripe/stripe-js 9.8.0 → 9.9.0, and a prerelease inversion @modelcontextprotocol/server 2.0.0-beta.2 → 2.0.0-alpha.4 (pulled via incur, off the crypto/wire path), plus test-only dedupes. stripe stays 22.4.0-beta.1 (unchanged — still the current public-preview dist-tag); every dep keeps its sha512 integrity hash.
Re-bundle republishes with 0.8.12 inlined (extension deps are bundled at build time). Regression coverage: the full suite (120 offline tests) + the 10000-run property soak re-run green against 0.8.12, and the spec-fixture contract (stripe_mpp_test.ts) and adversarial/tamper (stripe_mpp_adversarial_test.ts) suites pass UNMODIFIED.

03Models1

@magistr/stripe-mppv2026.07.21.2extensions/models/stripe_mpp.ts

Global Arguments

Argument	Type	Required	Description
secretKey	string	yes	Stripe secret key (sk_test_... / sk_live_...). Use a vault reference:
serverSecret?	string	no	Seller-side HMAC secret (>=32 chars) binding challenge ids
networkId?	string	no	Stripe Business Network Profile id (profile_test_... / profile_...).
realm	string	yes	Protection-space identifier advertised in seller challenges (RFC 9110).
stripeVersion	string	yes	Stripe-Version header. SPT endpoints need the preview channel.
testMode	boolean	yes	Gates test helpers (createTestGrantedToken). Must match the key mode.
allowInsecure	boolean	yes	Test-fixture escape: permit plain http:// to loopback, allow private/
timeoutMs	number	yes	Per-request timeout for resource fetches and Stripe calls.
paymentMethodTypes	array	yes	Payment method types advertised in seller challenges.
linkCliPath?	string	no	ABSOLUTE path to the installed @stripe/link-cli binary (a non-writable
linkCliVersion	string	yes	Pinned link-cli version. The MCP initialize serverInfo.version is
allowLiveGrants	boolean	yes	Consumer-grant live-money opt-in. Default false forces link-cli test

fn probe()

Request a resource WITHOUT paying and record the parsed payment

fn mintToken(paymentMethodId: string, maxAmount: string, currency: string, expiresAt?: number, sellerNetworkId?: string, externalId?: string)

Mint a fiat Shared Payment Token from an existing payment method

Argument	Type	Required	Description
paymentMethodId	string	yes	Existing payment method (pm_...). Raw-PAN creation is PCI-gated in
maxAmount	string	yes	Usage-limit ceiling, minor units string.
currency	string	yes	Usage-limit currency (ISO, lowercase).
expiresAt?	number	no	Unix timestamp for usage_limits.expires_at.
sellerNetworkId?	string	no	Seller network profile the token is granted to (defaults to networkId).
externalId?	string	no	Correlation id; also drives the Idempotency-Key.

fn pay(sptId: string, maxAmount: string, currency: string, expectedNetworkId?: string, expectedRealm?: string, externalId?: string)

Pay for a resource end-to-end: request it, parse the 402 stripe

Argument	Type	Required	Description
sptId	string	yes	Shared Payment Token (spt_...) to present.
maxAmount	string	yes	Spend ceiling, minor units string. The challenge amount must not
currency	string	yes	Expected challenge currency. Mismatch blocks the payment.
expectedNetworkId?	string	no	Pin the payee: the Stripe Business Network Profile (profile_...) the
expectedRealm?	string	no	Pin the challenge realm (issuing authority); mismatch blocks the payment.
externalId?	string	no	Correlation id.

fn getIssuedToken(sptId: string)

Retrieve an issued Shared Payment Token

Argument	Type	Required	Description
sptId	string	yes	Shared Payment Token id (spt_...).

fn revokeToken(sptId: string)

Revoke an issued Shared Payment Token

Argument	Type	Required	Description
sptId	string	yes	Shared Payment Token id (spt_...).

fn createChallenge(amount: string, currency: string, description?: string, externalId?: string, expiresInSeconds?: number, networkId?: string, scope?: string)

Produce seller challenge material for a payment-gated resource:

Argument	Type	Required	Description
amount	string	yes	Amount demanded, minor units string.
currency	string	yes	Currency (ISO, lowercase).
description?	string	no
externalId?	string	no
expiresInSeconds?	number	no	Challenge validity window; recommended to keep challenges short-lived.
networkId?	string	no	Override the global networkId.
scope?	string	no	Bind the challenge to a specific resource/route. Carried inside the

fn verifyCredential(authorizationHeader: string, expectedAmount?: string, expectedCurrency?: string, expectedScope?: string)

Verify a received Authorization: Payment credential — HMAC-bound

Argument	Type	Required	Description
authorizationHeader	string	yes	The received Authorization value ("Payment <base64url>").
expectedAmount?	string	no
expectedCurrency?	string	no
expectedScope?	string	no	Require the credential's challenge `opaque` to equal this route scope

fn chargeToken(sptId?: string, amount?: string, currency?: string, authorizationHeader?: string, expectedScope?: string, description?: string, externalId?: string)

Settle a granted Shared Payment Token via a confirmed

Argument	Type	Required	Description
sptId?	string	no	Granted token to settle (or pass authorizationHeader).
amount?	string	no	Minor units string.
currency?	string	no
authorizationHeader?	string	no	Full received credential; verified (HMAC + expiry) before settling.
expectedScope?	string	no	When settling from an authorizationHeader, require the challenge
description?	string	no
externalId?	string	no

fn issueReceipt(chargeId: string, externalId?: string)

Produce the Payment-Receipt header value for a SETTLED charge

Argument	Type	Required	Description
chargeId	string	yes	Settled PaymentIntent id (pi_...).
externalId?	string	no

fn getCharge(chargeId: string)

Retrieve a charge (GET /v1/payment_intents/{id}).

Argument	Type	Required	Description
chargeId	string	yes	PaymentIntent id (pi_...).

fn listCharges(externalId?: string, createdGte?: number, createdLte?: number, maxResults: number, pageSize: number)

Reconciliation fan-out: list charges by created range

Argument	Type	Required	Description
externalId?	string	no	Filter by metadata externalId (uses /v1/payment_intents/search).
createdGte?	number	no	Unix lower bound.
createdLte?	number	no	Unix upper bound.
maxResults	number	yes
pageSize	number	yes

fn refundCharge(chargeId: string, amount: string, reason?: enum, externalId?: string)

Refund a settled charge (POST /v1/refunds) with

Argument	Type	Required	Description
chargeId	string	yes	PaymentIntent id (pi_...) to refund.
amount	string	yes	Refund amount, minor units string. Must not exceed the remaining
reason?	enum	no
externalId?	string	no

fn getGrantedToken(sptId: string)

Retrieve a granted Shared Payment Token (seller view). Card

Argument	Type	Required	Description
sptId	string	yes	Shared Payment Token id (spt_...).

fn createTestGrantedToken(maxAmount: string, currency: string, paymentMethodId: string, expiresAt?: number)

TEST MODE ONLY: fabricate a granted Shared Payment Token via

Argument	Type	Required	Description
maxAmount	string	yes	Usage-limit ceiling, minor units string.
currency	string	yes	Usage-limit currency.
paymentMethodId	string	yes	Payment method the fabricated granted token draws on (required by the
expiresAt?	number	no

fn listConsumerPaymentMethods()

List the consumer's Link wallet payment methods (csmrpd_). Fan-out:

fn getSpendRequest(id: string)

Retrieve a consumer spend request by lsrq_ (single-shot; interval 0).

Argument	Type	Required	Description
id	string	yes	Spend request id (lsrq_...).

fn cancelSpendRequest(id: string)

Cancel a PENDING consumer spend request (read-before-cancel). Note:

Argument	Type	Required	Description
id	string	yes	Spend request id (lsrq_...).

fn createSpendRequest(amount: string, currency: string, context: string, networkId?: string, paymentMethodId?: string, externalId?: string)

Create a consumer Link spend request — the PRIMARY (binding) guard

Argument	Type	Required	Description
amount	string	yes	Amount to authorise, minor-units STRING (e.g. "500" = $5.00).
currency	string	yes	Currency (ISO, lowercase). US-only Link; default usd.
context	string	yes	Purchase description + rationale the consumer READS when approving.
networkId?	string	no	Payee Business Network Profile (profile_...). Defaults to the global
paymentMethodId?	string	no	Consumer Link payment method (csmrpd_...). Omit to let the consumer pick
externalId?	string	no	Correlation id; also anchors the deterministic intent key persisted on

fn paySpendRequest(id: string, maxAmount: string, currency: string, expectedNetworkId?: string, expectedRealm?: string, externalId?: string)

Spend an APPROVED consumer grant against an MPP-protected URL, by

Argument	Type	Required	Description
id	string	yes	Approved spend request id (lsrq_...) to spend.
maxAmount	string	yes	ADVISORY pre-flight ceiling (minor units). NOTE: the binding cap is the
currency	string	yes	Expected challenge currency (advisory).
expectedNetworkId?	string	no	Advisory payee pin for the pre-flight challenge.
expectedRealm?	string	no	Advisory realm pin.
externalId?	string	no	Correlation id.

Resources

challenge(infinite)— Probe result: HTTP status + parsed payment challenges.

payment(infinite)— Buyer payment attempt — written on EVERY pay outcome (audit trail).

issuedToken(infinite)— Issued Shared Payment Token (buyer view).

challengeSpec(infinite)— Seller challenge material: WWW-Authenticate value + problem+json body.

credential(infinite)— Seller-side credential verification verdict.

charge(infinite)— Seller charge (PaymentIntent) state.

receipt(infinite)— Issued Payment-Receipt header value for a settled charge.

refund(infinite)— Refund outcome — written on every refundCharge attempt (audit trail).

grantedToken(infinite)— Granted Shared Payment Token (seller view; card details trimmed).

summary(infinite)— Fan-out listing summary.

spendRequest(infinite)— Consumer Link spend-request lifecycle — written on EVERY outcome

consumerPaymentMethod(infinite)— Consumer Link payment method (csmrpd_; display as link-cli returns

04Skills1

stripe-mpp2 files

05Previous Versions4

2026.07.21.1Jul 21, 2026

2026.07.21.1

Consumer buyer (Link grant): a human WITHOUT a Stripe account can now fund agent payments from their Link wallet. Five methods behind a new lib/link_cli.ts anti-corruption layer that drives Stripe's link-cli as an MCP server over stdio (link-cli --mcp) — deliberately NOT its HTTP serve mode, which binds all interfaces with Access-Control-Allow-Origin: * and no auth (see SPIKE-link-cli.md).

listConsumerPaymentMethods, createSpendRequest, getSpendRequest, cancelSpendRequest, paySpendRequest.
The grant is spent BY REFERENCE (mpp_pay --spendRequestId); the model never holds a raw spt_ (persists lsrq_ only, strictObject resources). No Link token custody — link-cli owns its device-flow session on disk; the subprocess is spawned clearEnv.
createSpendRequest is the PRIMARY binding guard (anchored payee, amount cap ≤500000 + $0.50 USD floor, context≥100, response-echo) before the consumer is prompted; paySpendRequest's pre-flight is advisory only.
New non-secret globals: linkCliPath (absolute, fail-closed), linkCliVersion (drift-detection preflight), allowLiveGrants (default false → test mode).
Extracted pay's spend-guard into the shared challengeGuardViolation() helper (behaviour-preserving).
US-only (Stripe Link) and inert without an authenticated co-located link-cli session; the four consumer methods fail closed, the existing 14 are unaffected. Not live-verified (Link is US-only; the maintainer is EU) — built on the observed v0.9.0 tool contract, pinned by fixtures.

Modified 1 models. Modified 1 skills

2026.07.16.2Jul 16, 2026

Release 2026.07.16.2 — align model versions with manifests

Maintenance release across the @magistr extensions. For most packages this carries no functional change: the only edit is the model's version: field, brought back in line with its manifest version so the published model type version and the package version no longer drift.

Functional changes in this release are limited to:

anime-cron: normalizeTitle now strips a ": subtitle" suffix and a trailing parenthesized year before comparison, fixing dedup false-misses where the torrent title carries a subtitle or year that the AniList romaji does not.
arckit: first publish. Standalone ArcKit port — a 12-phase architecture governance state machine with 65 bundled templates, driven by a bundled skill.

Also tracks three extensions (kaiten, observability-agent, music-library) that previously existed only as untracked working-tree directories, recovered from stashes.

2026.07.13.1Jul 13, 2026

2026.07.13.1

Dependency bump: mppx@0.8.5 → 0.8.6 (patch). No breaking changes to the Challenge / Credential / Receipt codecs or the Mppx / Stripe server APIs.

Upstream 0.8.6 relevant to this model: preserved method-specific extension fields on receipts per the Payment-Receipt spec. The remaining 0.8.6 fixes are Tempo/crypto-path only (not exercised — this model is fiat/SPT).
Re-bundle republishes with 0.8.6 inlined (extension deps are bundled at build time). Spec-fixture contract tests (stripe_mpp_test.ts) re-run green against 0.8.6; full 97-test suite + property soak unchanged.

2026.07.03.1Jul 7, 2026

2026.07.03.1

Initial beta release of @magistr/stripe-mpp — buyer and full seller sides of Stripe's Machine Payments Protocol (HTTP-402 "Payment" auth, draft-ryan-httpauth-payment-01), fiat via Shared Payment Tokens.

14 methods: probe, mintToken, pay, getIssuedToken, revokeToken, createChallenge, verifyCredential, chargeToken, issueReceipt, getCharge, listCharges, refundCharge, getGrantedToken, createTestGrantedToken.
Built on mppx@0.8.5 (MPP protocol) + stripe@22.4.0-beta.1 preview SDK (SPT lifecycle). Swamp-native layer: audit trail, amount+currency+payee+realm+ scope spend guard, SHA-256 idempotency keys, SSRF-hardened resource fetches (IPv4/IPv6 literals + DNS resolution), error redaction, test-mode gates.
97 offline tests + env-overridable property soak (FC_NUM_RUNS) validated at 10000 cases; seller settle path live-verified in Stripe test mode.

Beta: rides Stripe preview API channels (exact-pinned deps); interfaces may shift with the drafts. US-only (Stripe SPT). Fiat only; Tempo deferred.

06Stats

85 / 100

Downloads

Archive size

244.0 KB

Has README or module doc2/2earned
README has a code example1/1earned
README is substantive1/1earned
Most symbols documented1/1earned
No slow types (deprecated)1/1earned
Dependencies pass trust audit0/2missing
Has description1/1earned
Platform support declared (or universal)2/2earned
License declared1/1earned
Verified public repository2/2earned

Repository

https://github.com/umag/swamp-workspace

07Platforms

linux · x86_64 linux · aarch64 macOS · x86_64 macOS · aarch64

08Labels

#stripe #mpp #payments #machine-payments #agentic-commerce #http-402