
Security News
Crates.io Users Targeted by Phishing Emails
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
@zbdpay/payments-sdk-mcp
Advanced tools
You can run the ZBD Payments MCP Server directly via npx
:
export ZBD_PAYMENTS_API_KEY="My Apikey"
npx -y @zbdpay/payments-sdk-mcp@latest
There is a partial list of existing clients at modelcontextprotocol.io. If you already have a client, consult their documentation to install the MCP server.
For clients with a configuration JSON, it might look something like this:
{
"mcpServers": {
"zbdpay_payments_sdk_api": {
"command": "npx",
"args": ["-y", "@zbdpay/payments-sdk-mcp", "--client=claude", "--tools=dynamic"],
"env": {
"ZBD_PAYMENTS_API_KEY": "YOUR_ZBD_API_KEY"
}
}
}
}
There are two ways to expose endpoints as tools in the MCP server:
You can run the package on the command line to discover and filter the set of tools that are exposed by the ZBD MCP Server. This can be helpful for large APIs where including all endpoints at once is too much for your AI's context window.
You can filter by multiple aspects:
--tool
includes a specific tool by name--resource
includes all tools under a specific resource, and can have wildcards, e.g. my.resource*
--operation
includes just read (get/list) or just write operationsIf you specify --tools=dynamic
to the MCP server, instead of exposing one tool per endpoint in the API, it will
expose the following tools:
list_api_endpoints
- Discovers available endpoints, with optional filtering by search queryget_api_endpoint_schema
- Gets detailed schema information for a specific endpointinvoke_api_endpoint
- Executes any endpoint with the appropriate parametersThis allows you to have the full set of API endpoints available to your MCP Client, while not requiring that all of their schemas be loaded into context at once. Instead, the LLM will automatically use these tools together to search for, look up, and invoke endpoints dynamically. However, due to the indirect nature of the schemas, it can struggle to provide the correct properties a bit more than when tools are imported explicitly. Therefore, you can opt-in to explicit tools, the dynamic tools, or both.
See more information with --help
.
All of these command-line options can be repeated, combined together, and have corresponding exclusion versions (e.g. --no-tool
).
Use --list
to see the list of available tools, or see below.
Different clients have varying abilities to handle arbitrary tools and schemas.
You can specify the client you are using with the --client
argument, and the MCP server will automatically
serve tools and schemas that are more compatible with that client.
--client=<type>
: Set all capabilities based on a known MCP client
openai-agents
, claude
, claude-code
, cursor
--client=cursor
Additionally, if you have a client not on the above list, or the client has gotten better over time, you can manually enable or disable certain capabilities:
--capability=<name>
: Specify individual client capabilities
top-level-unions
: Enable support for top-level unions in tool schemasvalid-json
: Enable JSON string parsing for argumentsrefs
: Enable support for $ref pointers in schemasunions
: Enable support for union types (anyOf) in schemasformats
: Enable support for format validations in schemas (e.g. date-time, email)tool-name-length=N
: Set maximum tool name length to N characters--capability=top-level-unions --capability=tool-name-length=40
--capability=top-level-unions,tool-name-length=40
--resource=cards --operation=read
--resource=cards --no-tool=create_cards
--client=cursor --capability=tool-name-length=40
--resource=cards,accounts --operation=read --tag=kyc --no-tool=create_cards
// Import the server, generated endpoints, or the init function
import { server, endpoints, init } from "@zbdpay/payments-sdk-mcp/server";
// import a specific tool
import createChargeGamertags from "@zbdpay/payments-sdk-mcp/tools/gamertags/create-charge-gamertags";
// initialize the server and all endpoints
init({ server, endpoints });
// manually start server
const transport = new StdioServerTransport();
await server.connect(transport);
// or initialize your own server with specific tools
const myServer = new McpServer(...);
// define your own endpoint
const myCustomEndpoint = {
tool: {
name: 'my_custom_tool',
description: 'My custom tool',
inputSchema: zodToJsonSchema(z.object({ a_property: z.string() })),
},
handler: async (client: client, args: any) => {
return { myResponse: 'Hello world!' };
})
};
// initialize the server with your custom endpoints
init({ server: myServer, endpoints: [createChargeGamertags, myCustomEndpoint] });
The following tools are available in this MCP server.
gamertags
:create_charge_gamertags
(write
): Generate a payment request for a ZBD User.retrieve_by_gamertag_gamertags
(read
): Retrieve Gamertag from a ZBD user ID.retrieve_by_zbd_id_gamertags
(read
): Retrieve ZBD user ID from a Gamertag.retrieve_payment_gamertags
(read
): Retrieve all data about a Payment sent to ZBD User.send_payment_gamertags
(write
): Send instant Bitcoin payments to ZBD Users.lightning_charges
:create_lightning_charges
(write
): Start receiving instant Bitcoin payments through the ZBD API.retrieve_lightning_charges
(read
): Retrieve all data about a single Charge.internal_transfer
:initiate_internal_transfer
(write
): Performs a transfer of funds between two Projects.lightning_address
:create_charge_lightning_address
(write
): Generate a payment request for a Lightning Address.send_payment_lightning_address
(write
): Send instant Bitcoin payments to any Lightning Address.validate_lightning_address
(read
): Verify the validity of a Lightning Address.lightning_static_charges
:create_lightning_static_charges
(write
): Start accepting payments on Lightning with Static QR codes.retrieve_lightning_static_charges
(read
): Retrieve all data about a single Static Charge.update_lightning_static_charges
(write
): Change the configuration of a Static Charge QR code.vouchers
:create_vouchers
(write
): Create Voucherretrieve_vouchers
(read
): Get Voucherredeem_vouchers
(write
): Redeem Voucherrevoke_vouchers
(write
): Revoke Voucherwithdrawal_requests
:create_withdrawal_requests
(write
): Start creating Bitcoin voucher QR codes.retrieve_withdrawal_requests
(read
): Retrieve all data about a single Withdrawal Request.lightning_payments
:retrieve_lightning_payments
(read
): Retrieve all data about a single Payment.send_lightning_payments
(write
): Start sending instant Bitcoin payments through the ZBD API.wallet
:retrieve_balance_wallet
(read
): Retrieve all data about a ZBD Project's Wallet.utils
:check_ip_support_utils
(read
): Verify if a user is coming from a supported region.decode_lightning_charge_utils
(write
): Understand the inner properties of a Charge QR code.list_prod_ips_utils
(read
): Get the official IP addresses of ZBD servers.retrieve_btc_usd_utils
(read
): Get the latest price for Bitcoin in US Dollars.oauth2
:create_authorization_url_oauth2
(read
): Create an authorization URL for ZBD Login.refresh_token_oauth2
(write
): Generate a new accessToken for a ZBD Login user.retrieve_user_data_oauth2
(read
): Fetch user-related information about a logged-in ZBD User.retrieve_wallet_data_oauth2
(read
): Fetch wallet-related information about a logged-in ZBD User.keysend_payments
:send_keysend_payments
(write
): Start sending Keysend payments on the Lightning Network.email_payments
:send_email_payments
(write
): Send instant Bitcoin payments to any email.FAQs
The official MCP Server for the ZBD Payments API
We found that @zbdpay/payments-sdk-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
Product
Socket now lets you customize pull request alert headers, helping security teams share clear guidance right in PRs to speed reviews and reduce back-and-forth.
Product
Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.