@codespar/mcp-payway

@codespar/mcp-payway

MCP server for Payway (ex-Prisma Medios de Pago / Decidir) — Argentina's dominant card-acquiring gateway: card tokenization, one-step and two-step charges, installments (cuotas), marketplace split and refunds.

Quick Start

Claude Desktop

Add to ~/.config/claude/claude_desktop_config.json:

{
  "mcpServers": {
    "payway": {
      "command": "npx",
      "args": ["-y", "@codespar/mcp-payway"],
      "env": {
        "PAYWAY_PUBLIC_API_KEY": "your-public-apikey",
        "PAYWAY_PRIVATE_API_KEY": "your-private-apikey",
        "PAYWAY_ENV": "sandbox"
      }
    }
  }
}

Claude Code

claude mcp add payway -- npx @codespar/mcp-payway

Cursor / VS Code

Add to .cursor/mcp.json or .vscode/mcp.json:

{
  "servers": {
    "payway": {
      "command": "npx",
      "args": ["-y", "@codespar/mcp-payway"],
      "env": {
        "PAYWAY_PUBLIC_API_KEY": "your-public-apikey",
        "PAYWAY_PRIVATE_API_KEY": "your-private-apikey",
        "PAYWAY_ENV": "sandbox"
      }
    }
  }
}

Authentication

Payway authenticates with a single raw header named apikey (not Authorization: Bearer). Two co-equal keys exist with different powers — see the table below.

The two-key model

Payway issues two co-equal API keys with different powers:

Key	Header	May call
Public	apikey	POST /tokens (card tokenization only)
Private	apikey	Everything else: payments, captures, refunds, queries

The auth header is a single raw header named apikey — not Authorization: Bearer.

Tools (6)

Tool	Endpoint	What it does
create_token	POST /tokens	Tokenize card data into a single-use payment token (public key)
create_payment	POST /payments	Charge a token — single sale or distributed/split, with installments
get_payment	GET /payments/{id}	Fetch a payment by id
list_payments	GET /payments	List payments (offset, pageSize, siteOperationId, merchantId)
refund_payment	POST /payments/{id}/refunds	Full refund (empty body) or partial (amount in minor units)
confirm_payment	PUT /payments/{id}	Capture a previously authorized payment (two-step flow)

Environment

Variable	Required	Description
PAYWAY_PUBLIC_API_KEY	yes	Public apikey (tokenization)
PAYWAY_PRIVATE_API_KEY	yes	Private apikey (payments, refunds, queries)
PAYWAY_ENV	no	sandbox (default, Decidir sandbox host) or production

Base URLs: production https://ventasonline.payway.com.ar/api/v2, sandbox https://developers.decidir.com/api/v2.

Notes

• Amounts are integers in minor units: 50000 = ARS 500.00.
• payment_method_id identifies the card brand (1 = Visa, 31 = Mastercard, 15 = Maestro, …).
• site_transaction_id is the merchant-side idempotency anchor — unique per sale.
• This server never invents card data; agents must collect PAN/expiry/CVV from the user or a vault.

Enterprise

Need governance, budget limits, and audit trails for agent-driven payments on Payway? CodeSpar Enterprise adds a policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT © CodeSpar