
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@codespar/mcp-coinbase-commerce
Advanced tools
MCP server for Coinbase Commerce — global crypto merchant payments. Accept BTC, ETH, USDC and more at checkout with hosted charges, checkouts, and invoices.
MCP server for Coinbase Commerce — global crypto merchant payments.
Coinbase Commerce is the merchant-accept side of crypto. Your store prices an order in local fiat (USD, BRL, EUR, MXN, ...), the buyer settles in BTC / ETH / USDC / and other supported assets, and Coinbase settles to you in the crypto or fiat of your choice.
| Server | Use case | Direction |
|---|---|---|
@codespar/mcp-coinbase-commerce | Merchants accept crypto at checkout | Buyer pays merchant |
@codespar/mcp-unblockpay | BRL / MXN <-> USDC corridor | Value transfer |
@codespar/mcp-moonpay | End-user fiat <-> crypto (100+ assets) | Onramp / offramp |
@codespar/mcp-transak | End-user fiat <-> crypto (broad geo) | Onramp / offramp |
Use Coinbase Commerce when an agent needs to bill a buyer in crypto — hosted charge page, reusable checkout, or directed invoice.
| Tool | Purpose |
|---|---|
create_charge | Create a one-time crypto charge priced in fiat |
retrieve_charge | Look up a charge by id or short code |
list_charges | List charges (paginated) |
cancel_charge | Cancel an unpaid charge |
resolve_charge | Manually mark a charge as paid |
create_checkout | Create a reusable hosted checkout (product page) |
retrieve_checkout | Look up a checkout by id |
list_events | List lifecycle events (same payload as webhooks) |
create_invoice | Create an invoice directed at a named recipient |
npm install @codespar/mcp-coinbase-commerce
COINBASE_COMMERCE_API_KEY="..." # API key (required, secret)
COINBASE_COMMERCE_API_VERSION="..." # Optional. Defaults to 2018-03-22.
Create an API key at https://beta.commerce.coinbase.com/settings/security.
Every request carries two headers:
X-CC-Api-Key: <COINBASE_COMMERCE_API_KEY>
X-CC-Version: 2018-03-22
The version header is required. Pin it so future API changes don't silently break your integration.
# stdio (default — for Claude Desktop, Cursor, etc)
npx @codespar/mcp-coinbase-commerce
# HTTP (for server-to-server testing)
MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-coinbase-commerce
MIT
FAQs
MCP server for Coinbase Commerce — global crypto merchant payments. Accept BTC, ETH, USDC and more at checkout with hosted charges, checkouts, and invoices.
We found that @codespar/mcp-coinbase-commerce demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.