
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@codespar/mcp-culqi
Advanced tools
MCP server for Culqi — Peru's default PSP (the Stripe of Peru). Charges, subscriptions, customers, cards, Yape / PagoEfectivo orders.
MCP server for Culqi — Peru's default PSP.
Culqi is the Stripe of Peru: the standard rail for Peruvian D2C brands and SaaS. It ships CulqiOnline (hosted checkout), CulqiLink (payment links), and CulqiFull (subscriptions). Adding Culqi brings Peru into the CodeSpar catalog alongside Mexico, Brazil, Colombia, Argentina, and Chile.
| Tool | Purpose |
|---|---|
create_token | Tokenize a card (POST /tokens). |
create_charge | Create a charge (POST /charges). |
get_charge | Retrieve a charge by Culqi id. |
list_charges | List charges (GET /charges) with optional filters. |
capture_charge | Capture a previously-authorized charge (POST /charges/{id}/capture). |
refund_charge | Refund a captured charge (POST /refunds). |
get_refund | Retrieve a refund by id (GET /refunds/{id}). |
create_customer | Create a customer record (POST /customers). |
get_customer | Retrieve a customer by Culqi id (GET /customers/{id}). |
list_customers | List customers (GET /customers) with optional filters passed as query params: first_name, last_name, email,... |
create_card | Attach a tokenized card to a customer for reuse (POST /cards). |
delete_card | Detach a saved card from its customer (DELETE /cards/{id}). |
create_order | Create an order (POST /orders) for non-card payment methods — Yape, PagoEfectivo (Cash), bank transfer. |
confirm_order | Confirm an unpaid order (POST /orders/{id}/confirm). |
list_orders | List orders (GET /orders) with optional filters passed as query params: order_number, state (created, paid,... |
create_plan | Create a subscription plan (POST /plans). |
create_subscription | Subscribe a customer's saved card to a plan (POST /subscriptions). |
cancel_subscription | Cancel an active subscription (DELETE /subscriptions/{id}). |
list_events | List webhook events (GET /events) with optional filters. |
get_event | Retrieve a single webhook event by id (GET /events/{id}). |
npm install @codespar/mcp-culqi
CULQI_SECRET_KEY="sk_test_..." # or sk_live_... for production
Culqi has no separate sandbox URL — the key prefix (sk_test_ vs sk_live_) selects the environment.
Bearer token on every request:
Authorization: Bearer <CULQI_SECRET_KEY>
Content-Type: application/json
Base URL: https://api.culqi.com/v2.
# stdio (default — for Claude Desktop, Cursor, etc)
npx @codespar/mcp-culqi
# HTTP (for server-to-server testing)
MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-culqi
1000 = S/ 10.00 PEN).PEN, USD.create_token tool is primarily for test scripts — never send real PANs from a backend without PCI scope.tyc: true (terms & conditions acceptance) on creation.Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.
MIT
FAQs
MCP server for Culqi — Peru's default PSP (the Stripe of Peru). Charges, subscriptions, customers, cards, Yape / PagoEfectivo orders.
We found that @codespar/mcp-culqi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.