Security audit
Stripe
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent Stripe MCP integration, but it connects an AI agent to a high-impact payments account without artifact-level limits on what Stripe actions or scopes may be available.
Review the Stripe OAuth consent screen and available MCP tools before enabling this. Use the least-privileged Stripe account or restricted access you can, and assume the connected agent may be able to view or change payments, customers, and invoices depending on Stripe's hosted MCP permissions.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.