@payware/mcp-server

MCPcommunity
v1.3.1io.github.paywareMITUpdated 6d agonpmGitHub

payware A2A payments API for merchants, ISVs and payment institutions

Works in
ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
17Downloads/wk
6d agoLast update
Reads these credentials
  • PAYWARE_OAUTH_CLIENT_SECRETOAuth appoptional

    OAuth2 client secret (ISV partners only)

Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.

Package
Authorio.github.payware
LicenseMIT
Version1.3.1
Sourcenpm+mcp-registry
Trust Status
B
60/100Good
Listed in Forge index+10/10
Publisher identity verified+0/20
Publisher: run `forge publish` from the package repo to claim ownership
Ed25519 publish signature+0/5
Included automatically when the publisher runs `forge publish`
Domain verification+0/5
Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
npm Trusted Publishing (Sigstore)+0/5
Publish from GitHub Actions with --provenance so the attestation binds this package to this repo
npm maintainer match+0/5
Earned once your identity is verified above and that login is an npm maintainer of this package
CVE scan · clean+30/30
Static analysis · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain
Provenance
Dependencies60 resolved · 1 with advisories
Tool surface40 tools · 4 privileged
Security scan⚠ Warnings (1)v1.3.1 · 6d agoHow well does this scan work?
EvalsNone
IndexedSep 17, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

40 tools · 4 privileged
Statically extracted from the published packagev1.3.1 · 6d ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

payware_generate_code_exampleGenerate production-ready payware API integration code examples with authentication, error handling, and environment configuration for any operation across 16 supported operations and 6 programming languages.

Generate production-ready payware API integration code examples with authentication, error handling, and environment configuration for any operation across 16 supported operations and 6 programming languages.

No input schema was published for this tool.

payware_generate_documentationGenerate comprehensive documentation for payware API integration with quick start instructions, authentication flows, operation examples, error handling patterns, and language-specific integration guides.

Generate comprehensive documentation for payware API integration with quick start instructions, authentication flows, operation examples, error handling patterns, and language-specific integration guides.

No input schema was published for this tool.

payware_products_register_audioRegister an audio file (soundbite) for a merchant's product (ISV operation). **Supported formats:** Most audio/video formats (up to 200MB) **Note:** For video files, only the audio channel is registered

Register an audio file (soundbite) for a merchant's product (ISV operation). **Supported formats:** Most audio/video formats (up to 200MB) **Note:** For video files, only the audio channel is registered

No input schema was published for this tool.

payware_products_get_audiosGet all registered audio files for a merchant's product (ISV operation)

Get all registered audio files for a merchant's product (ISV operation)

No input schema was published for this tool.

payware_products_get_audioGet detailed information about a specific audio file (ISV operation)

Get detailed information about a specific audio file (ISV operation)

No input schema was published for this tool.

payware_products_update_audioUpdate audio information (title) or reassign audio to another product (ISV operation)

Update audio information (title) or reassign audio to another product (ISV operation)

No input schema was published for this tool.

payware_products_delete_audioprivilegedDelete an audio file from a merchant's product (ISV operation). This action cannot be undone.

Delete an audio file from a merchant's product (ISV operation). This action cannot be undone.

No input schema was published for this tool.

payware_poi_cancel_priceCancel a pending price on a POI, resetting it to IDLE state. **ISV Authentication:** Uses ISV JWT with merchant partner ID and OAuth2 token. **Endpoint:** DELETE /poi/{poiId}/price **Use Case:** Cancel a price that was set but customer didn't pay (e.g., order cancelled). The POI will return…

Cancel a pending price on a POI, resetting it to IDLE state. **ISV Authentication:** Uses ISV JWT with merchant partner ID and OAuth2 token. **Endpoint:** DELETE /poi/{poiId}/price **Use Case:** Cancel a price that was set but customer didn't pay (e.g., order cancelled). The POI will return…

No input schema was published for this tool.

payware_operations_cancel_transactionCancel an ACTIVE transaction created by this merchant. Only the merchant who created the transaction can cancel it, and only before it has been processed.

Cancel an ACTIVE transaction created by this merchant. Only the merchant who created the transaction can cancel it, and only before it has been processed.

No input schema was published for this tool.

payware_utils_generate_code_exampleGenerate code examples for different programming languages and scenarios

Generate code examples for different programming languages and scenarios

No input schema was published for this tool.

payware_operations_create_transactionNo description published

This tool published no description. Forge does not invent one.

payware_products_create_productCreate a new product for inventory management and payment processing. **Product Structure:** 📦 **PRODUCT METADATA**: name, shortDescription, longDescription, sku, upc, shippable, active, shop 💰 **PRODUCT DATA** (prData object): type, regularPrice, currency, overlapPriority, timeToLive, activeFro…

Create a new product for inventory management and payment processing. **Product Structure:** 📦 **PRODUCT METADATA**: name, shortDescription, longDescription, sku, upc, shippable, active, shop 💰 **PRODUCT DATA** (prData object): type, regularPrice, currency, overlapPriority, timeToLive, activeFro…

No input schema was published for this tool.

payware_deep_links_delete_product_linkprivilegedDelete an active deep link for a product. Once deleted, the deep link URL will no longer redirect to the payware mobile app. **Use Cases:** - Remove expired product links - Clean up after product removal - Security cleanup for discontinued products **Important Notes:** - Deep links are on…

Delete an active deep link for a product. Once deleted, the deep link URL will no longer redirect to the payware mobile app. **Use Cases:** - Remove expired product links - Clean up after product removal - Security cleanup for discontinued products **Important Notes:** - Deep links are on…

No input schema was published for this tool.

payware_products_delete_productprivilegedDelete a product from a merchant account (ISV operation). This action cannot be undone.

Delete a product from a merchant account (ISV operation). This action cannot be undone.

No input schema was published for this tool.

payware_deep_links_delete_transaction_linkprivilegedDelete an active deep link for a transaction. Once deleted, the deep link URL will no longer redirect to the payware mobile app. **Use Cases:** - Remove expired transaction links - Clean up after transaction completion - Security cleanup for sensitive transactions **Important Notes:** - D…

Delete an active deep link for a transaction. Once deleted, the deep link URL will no longer redirect to the payware mobile app. **Use Cases:** - Remove expired transaction links - Clean up after transaction completion - Security cleanup for sensitive transactions **Important Notes:** - D…

No input schema was published for this tool.

payware_data_export_reportExport a READY report in a specific format (PDF, CSV, Excel, JSON). The report must be in READY status first.

Export a READY report in a specific format (PDF, CSV, Excel, JSON). The report must be in READY status first.

No input schema was published for this tool.

payware_operations_finalize_transactionNo description published

This tool published no description. Forge does not invent one.

payware_utils_format_requestFormat and validate payware API requests with proper structure and headers

Format and validate payware API requests with proper structure and headers

No input schema was published for this tool.

payware_data_generate_reportGenerate an asynchronous data report for ISV data analysis and reporting on behalf of merchants. Production only - not supported in sandbox.

Generate an asynchronous data report for ISV data analysis and reporting on behalf of merchants. Production only - not supported in sandbox.

No input schema was published for this tool.

payware_data_get_export_listGet all export attempts for a specific report request. Returns list of exports in various formats with their status and download information. Production only - not supported in sandbox.

Get all export attempts for a specific report request. Returns list of exports in various formats with their status and download information. Production only - not supported in sandbox.

No input schema was published for this tool.

payware_poi_getGet details of a specific POI (Point of Interaction). **ISV Authentication:** Uses ISV JWT with merchant partner ID and OAuth2 token. **Endpoint:** GET /poi/{poiId} **Use Case:** Retrieve full details of a physical payment point including configuration and current state. **Required:** POI I…

Get details of a specific POI (Point of Interaction). **ISV Authentication:** Uses ISV JWT with merchant partner ID and OAuth2 token. **Endpoint:** GET /poi/{poiId} **Use Case:** Retrieve full details of a physical payment point including configuration and current state. **Required:** POI I…

No input schema was published for this tool.

payware_products_get_product_imageGenerate a QR code or barcode image for a merchant's product (ISV operation).

Generate a QR code or barcode image for a merchant's product (ISV operation).

No input schema was published for this tool.

payware_deep_links_get_product_linkNo description published

This tool published no description. Forge does not invent one.

payware_products_get_productGet detailed information about a specific product by ID (ISV operation)

Get detailed information about a specific product by ID (ISV operation)

No input schema was published for this tool.

payware_poi_get_qrcodeGenerate a QR code image for a POI that customers can scan. **Endpoint:** GET /poi/{poiId}/image **Authentication:** Public endpoint (no auth required) **Use Case:** Generate QR codes for printing or displaying on screens. **Formats:** PNG (default), SVG, JPG Returns base64-encoded image…

Generate a QR code image for a POI that customers can scan. **Endpoint:** GET /poi/{poiId}/image **Authentication:** Public endpoint (no auth required) **Use Case:** Generate QR codes for printing or displaying on screens. **Formats:** PNG (default), SVG, JPG Returns base64-encoded image…

No input schema was published for this tool.

payware_data_get_report_requestsGet all execution requests for a specific report type. Returns historical execution records with status and parameters. Production only - not supported in sandbox.

Get all execution requests for a specific report type. Returns historical execution records with status and parameters. Production only - not supported in sandbox.

No input schema was published for this tool.

payware_data_get_report_statusGet the status of an asynchronous report generation request. Use this to monitor report progress.

Get the status of an asynchronous report generation request. Use this to monitor report progress.

No input schema was published for this tool.

payware_poi_get_statusGet current status of a POI including any pending payment. **ISV Authentication:** Uses ISV JWT with merchant partner ID and OAuth2 token. **Endpoint:** GET /poi/{poiId}/status **Use Case:** Check if a POI is idle, has a pending price, or is busy with a payment. **POI States:** - IDLE: Rea…

Get current status of a POI including any pending payment. **ISV Authentication:** Uses ISV JWT with merchant partner ID and OAuth2 token. **Endpoint:** GET /poi/{poiId}/status **Use Case:** Check if a POI is idle, has a pending price, or is busy with a payment. **POI States:** - IDLE: Rea…

No input schema was published for this tool.

payware_operations_get_transaction_statusNo description published

This tool published no description. Forge does not invent one.

payware_authorization_oauth2_get_token_infoGet information about an OAuth2 access token. This endpoint exposes information about access tokens, including their status. Only information about tokens requested by the ISV is returned. Use this to check token status and present information to users in POS software. Endpoint: GET /oaut…

Get information about an OAuth2 access token. This endpoint exposes information about access tokens, including their status. Only information about tokens requested by the ISV is returned. Use this to check token status and present information to users in POS software. Endpoint: GET /oaut…

No input schema was published for this tool.

payware_operations_get_transaction_historyNo description published

This tool published no description. Forge does not invent one.

payware_deep_links_get_transaction_linkNo description published

This tool published no description. Forge does not invent one.

payware_isv_create_invitationNo description published

This tool published no description. Forge does not invent one.

payware_isv_list_invitationsNo description published

This tool published no description. Forge does not invent one.

payware_isv_get_invitationGet full details of one invitation, including its link and the merchant data it pre-fills. **Endpoint:** GET /isv/invitations/{invitationId} **This is how you recover an invitation link** you no longer have - the link is not derivable from the id, so re-reading the invitation is the only way…

Get full details of one invitation, including its link and the merchant data it pre-fills. **Endpoint:** GET /isv/invitations/{invitationId} **This is how you recover an invitation link** you no longer have - the link is not derivable from the id, so re-reading the invitation is the only way…

No input schema was published for this tool.

payware_isv_cancel_invitationNo description published

This tool published no description. Forge does not invent one.

payware_reference_lookupNo description published

This tool published no description. Forge does not invent one.

payware_data_get_export_statusGet the status of a report export request. Use this to monitor export progress.

Get the status of a report export request. Use this to monitor export progress.

No input schema was published for this tool.

payware_data_download_exportDownload a READY export file. The export must be in READY status. Returns binary data for the file.

Download a READY export file. The export must be in READY status. Returns binary data for the file.

No input schema was published for this tool.

payware_data_cancel_reportCancel a running report generation. Only reports in QUEUED status can be cancelled.

Cancel a running report generation. Only reports in QUEUED status can be cancelled.

No input schema was published for this tool.

30 of 40 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

payware A2A payments API for merchants, ISVs and payment institutions

Keywords
mcp
Alternatives
Comparing tool surfaces…

Dependency tree

What one Forge scan resolved from npm metadata on 2026-09-18 — observed resolution, not a publisher declaration.

60 packages resolved · 8 direct · 1 carrying advisories Resolution stops at depth 4 and 60 packages.

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

71 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

+59 more not listed. The counts by reason above cover all of them.