Verified

Square MCP Server

Square API integration for AI assistants with support for read-only configurations.

Data last scanned yesterday · Reviewed 2 months ago

54 1 dangerous tool3 tools★ 103TypeScriptApache-2.0

Overview

The Square MCP Server enables AI assistants to interface with the Square Connect API. It provides mechanisms for interacting with business data, supporting both sandbox and production environments to facilitate testing and deployment workflows.

Our verdict

With a security score of 64/100, this server is classified as medium risk. The score reflects its status as a community-maintained project rather than an official Square offering. While the inclusion of a read-only configuration option helps limit potential exposure, users should exercise caution given the infrequent updates, as the repository has not received a commit in 112 days.

Supports restricted read-only operations via environment variables
Integrates with both sandbox and production Square environments
Maintains a small footprint with only 12 direct dependencies
Includes documentation for Goose and Claude Desktop integration

Project is community-maintained and not supported by Square
Last repository update occurred 112 days ago
Lacks a dedicated homepage link for project information

Setup

Claude Desktop

{
  "mcpServers": {
    "square-mcp-server": {
      "args": [
        "-y",
        "square-mcp-server"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

No read-only mode — running this grants full read/write access.
No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

Tool	Description	Risk
get_service_info	Discover methods available for a service	low
get_type_info	Get detailed parameter requirements	low
make_api_request	Execute API calls to Square	high

Compatibility

Client	Local	Docker	Remote	Read-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

›What is the difference between the local and remote MCP server options?

The remote server at https://mcp.squareup.com/sse supports OAuth, allowing you to log in with your Square account directly without manual token management. The local server requires you to manually provide a Square access token via environment variables.

›How can I restrict the MCP server to read-only access?

You can restrict the server to read-only operations by setting the DISALLOW_WRITES environment variable to true.

›Can I test the Square MCP server without using live data?

Yes, you can enable the Square sandbox environment by setting the SANDBOX environment variable to true.

›How do I discover available tools and parameter requirements?

You can use the get_service_info tool to discover available methods for a service and the get_type_info tool to retrieve detailed parameter requirements for those methods.

›Is it possible to specify which Square API version to use?

Yes, you can define a specific API version by setting the SQUARE_VERSION environment variable.