🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

@codespar/mcp-flow-cl

Package Overview
Dependencies
Maintainers
2
Versions
1
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@codespar/mcp-flow-cl

MCP server for Flow — Chile-native PSP: hosted payment orders (Webpay, ETpay, cash), refunds, HMAC-signed API

latest
npmnpm
Version
0.1.0
Version published
Maintainers
2
Created
Source

@codespar/mcp-flow-cl

MCP server for Flow (flow.cl) — the Chile-native PSP: one hosted payment order covers Webpay (credit/debit), ETpay bank transfer, cash networks and international cards. Refunds included. Every API call is HMAC-SHA256 signed.

npm License: MIT

Quick Start

Claude Desktop

Add to ~/.config/claude/claude_desktop_config.json:

{
  "mcpServers": {
    "flow-cl": {
      "command": "npx",
      "args": ["-y", "@codespar/mcp-flow-cl"],
      "env": {
        "FLOW_API_KEY": "your-flow-api-key",
        "FLOW_SECRET_KEY": "your-flow-secret-key",
        "FLOW_ENV": "sandbox"
      }
    }
  }
}

Claude Code

claude mcp add flow-cl --env FLOW_API_KEY=... --env FLOW_SECRET_KEY=... -- npx -y @codespar/mcp-flow-cl

Cursor / VS Code

Add the same block to .cursor/mcp.json or .vscode/mcp.json.

Tools (8)

ToolEndpointWhat it does
create_paymentPOST /payment/createHosted payment order; returns url + token the customer pays at
create_payment_by_emailPOST /payment/createEmailFlow emails the customer a collection link
get_payment_statusGET /payment/getStatusStatus by Flow token (1 pending, 2 paid, 3 rejected, 4 canceled)
get_payment_status_by_commerce_idGET /payment/getStatusByCommerceIdStatus by your commerceOrder
get_payment_status_by_flow_orderGET /payment/getStatusByFlowOrderStatus by Flow order number
list_paymentsGET /payment/getPaymentsPayments received on a date (paged)
create_refundPOST /refund/createFull or partial refund order
get_refund_statusGET /refund/getStatusRefund status by refund token

Authentication

Flow signs every request: parameters are sorted alphabetically, concatenated as name+value, and signed with HMAC-SHA256 using your secretKey. This server does the signing for you — set the two env vars and call tools with plain arguments.

VariableRequiredDescription
FLOW_API_KEYyesFlow merchant API key
FLOW_SECRET_KEYyesHMAC signing secret (never sent on the wire)
FLOW_ENVnosandbox (default) or production

Sandbox: register at sandbox.flow.cl — the sandbox issues its own key pair.

Example

"Create a Flow payment order for CLP 25,000, subject 'Plan Pro mensual', email cliente@ejemplo.cl, and give me the payment link."

The agent calls create_payment and returns url?token=... — the customer picks Webpay, ETpay or cash at Flow's hosted page.

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

Managed tier

This open-source server calls Flow's API directly with your credentials. CodeSpar's managed tier routes one interface across every LATAM provider with automatic failover, governance, audit and a credential vault: codespar.dev/agents.

License

MIT

Keywords

mcp

FAQs

Package last updated on 04 Jul 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts