{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-11T21:09:20.344Z",
  "record_id": "VXI-EXT-TOOL-TRUST-STRIPE-01-v1",
  "record_kind": "external_reference",
  "title": "Stripe MCP: Account actions and payment authority",
  "system": "Stripe MCP",
  "evidence_family": "agent_tool_trust_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Does connecting Stripe MCP authorize an agent to refund or change a live account?",
  "near_questions": [
    "Does connecting a payment tool authorize refunds?",
    "How should an agent distinguish live and sandbox Stripe access?",
    "What permissions should a Stripe Agent Key have?",
    "Can Stripe MCP cancel subscriptions?",
    "When does Stripe MCP change accepted key types?",
    "Does a Stripe MCP read tool expose customer account data?",
    "Do approval rules replace reviewing the intended financial action?",
    "Is an application server key the same use case as an agent key?",
    "What should be checked before a Stripe MCP write?",
    "Does OAuth alone approve a live payment action?",
    "What is saved in a Stripe tool trust snapshot?",
    "Does this Stripe profile verify our account settings?"
  ],
  "supported_claims": [
    {
      "claim": "Stripe documents broad API read and write tools, with OAuth for interactive use and permission-scoped Agent Keys for autonomous access. A connection is not approval for a particular financial action. Check the account, live or sandbox environment, permissions and approval rules. The documentation announces an MCP key-acceptance change on 31 October 2026; this dated review does not test that future behaviour.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent tool execution or security testing",
    "Vendor certification, guaranteed safety or no-training assurance"
  ],
  "public_summary": "Stripe documents broad API read and write tools, with OAuth for interactive use and permission-scoped Agent Keys for autonomous access. A connection is not approval for a particular financial action. Check the account, live or sandbox environment, permissions and approval rules. The documentation announces an MCP key-acceptance change on 31 October 2026; this dated review does not test that future behaviour.",
  "related_record_ids": [
    "VXI-EXT-TOOL-TRUST-SENTRY-01-v1",
    "VXI-EXT-TOOL-TRUST-CLOUDFLARE-01-v1",
    "VXI-EXT-TOOL-TRUST-SUPABASE-01-v1"
  ],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Stripe MCP authentication and tools",
    "source_url": "https://docs.stripe.com/mcp",
    "checked_on": "2026-10-11",
    "candidate_record_id": "VXI-EXT-TOOL-TRUST-STRIPE-01-v1",
    "candidate_record_sha256": "4f98c8beffdc06a15f37b9a6b0ddf36e9bcf26e589adb1c7fb64bc5967228d01",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "Stripe documents broad API read and write tools, with OAuth for interactive use and permission-scoped Agent Keys for autonomous access. A connection is not approval for a particular financial action. Check the account, live or sandbox environment, permissions and approval rules. The documentation announces an MCP key-acceptance change on 31 October 2026; this dated review does not test that future behaviour.",
    "required_buyer_context": "Stripe MCP authentication and account operations as documented on the review date; separate from an application's server-side Stripe integration. Actual key grants, selected account/environment, active approval rules and client retention.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "trust_profile": {
    "schema": "varexis-agent-tool-trust/1",
    "identity": {
      "tool": "Stripe MCP",
      "variant": "Stripe MCP authentication and account operations as documented on the review date; separate from an application's server-side Stripe integration."
    },
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-11",
    "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.",
    "plan_scope": "Buyer plan, feature entitlement and effective configuration are not verified.",
    "findings": [
      {
        "field": "operator",
        "label": "Publisher and operator",
        "status": "documented",
        "statement": "Stripe operates the documented MCP service.",
        "source_ids": [
          "stripe-main",
          "stripe-keys"
        ]
      },
      {
        "field": "purpose",
        "label": "Purpose",
        "status": "documented",
        "statement": "Retrieve Stripe information and perform permitted account/API operations.",
        "source_ids": [
          "stripe-main",
          "stripe-keys"
        ]
      },
      {
        "field": "reads",
        "label": "Read capability",
        "status": "documented",
        "statement": "Stripe API GET methods and documentation search, within the authorized account and permissions.",
        "source_ids": [
          "stripe-main",
          "stripe-keys"
        ]
      },
      {
        "field": "writes",
        "label": "Write capability",
        "status": "documented",
        "statement": "API mutation tools include refund and subscription operations; their availability is not buyer authorization to execute them.",
        "source_ids": [
          "stripe-main",
          "stripe-keys"
        ]
      },
      {
        "field": "auth",
        "label": "Authentication",
        "status": "documented",
        "statement": "OAuth or Agent Keys are documented. The MCP page announces rejection of full-access keys and untagged restricted keys from 31 October 2026.",
        "source_ids": [
          "stripe-main",
          "stripe-keys"
        ]
      },
      {
        "field": "permissions",
        "label": "Permission surface",
        "status": "documented",
        "statement": "Agent-tagged restricted keys retain scoped permissions and are subject to documented approval rules.",
        "source_ids": [
          "stripe-main",
          "stripe-keys"
        ]
      },
      {
        "field": "egress",
        "label": "Data leaving the environment",
        "status": "review_inference",
        "statement": "Account results return to the AI client. The record does not establish what customer fields that client stores or sends onward.",
        "source_ids": [
          "stripe-main",
          "stripe-keys"
        ]
      },
      {
        "field": "failures",
        "label": "Failure modes to consider",
        "status": "review_inference",
        "statement": "Confusing sandbox and live account; refunding without task approval; relying on a key type after a documented acceptance change.",
        "source_ids": [
          "stripe-main",
          "stripe-keys"
        ]
      },
      {
        "field": "unknown",
        "label": "Unknowns and applicability",
        "status": "unknown",
        "statement": "Actual key grants, selected account/environment, active approval rules and client retention.",
        "source_ids": []
      },
      {
        "field": "gate",
        "label": "Suggested refusal or clarification condition",
        "status": "varexis_review_policy",
        "statement": "Withhold live mutations until exact action, account and environment are authorized; never treat this profile as permission to spend or refund.",
        "source_ids": []
      }
    ],
    "evidence_sources": [
      {
        "source_id": "stripe-main",
        "url": "https://docs.stripe.com/mcp",
        "final_url": "https://docs.stripe.com/mcp",
        "title": "Stripe MCP authentication and tools",
        "checked_on": "2026-10-11",
        "sha256": "98b4983b7c251430b9b0e1e4ddcf9c7ba07d9e35e5a73397211fa487615d8c6d",
        "bytes": 815227
      },
      {
        "source_id": "stripe-keys",
        "url": "https://docs.stripe.com/keys",
        "final_url": "https://docs.stripe.com/keys",
        "title": "Stripe API key types and restrictions",
        "checked_on": "2026-10-11",
        "sha256": "39e0907a5d0129237f8e71e88a35b4a5cb24f364463933c62c8fe5feb5418174",
        "bytes": 835098
      },
      {
        "source_id": "mcp-hints",
        "url": "https://blog.modelcontextprotocol.io/posts/2026-03-16-tool-annotations/",
        "final_url": "https://blog.modelcontextprotocol.io/posts/2026-03-16-tool-annotations/",
        "title": "MCP tool annotations and enforcement boundaries",
        "checked_on": "2026-10-11",
        "sha256": "82888044d831c3bd18f03d87a846ce5d27e028bd67a095edc04ba377fc622163",
        "bytes": 52715
      }
    ],
    "observed_tool_execution": false,
    "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.",
    "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.",
    "paid_value": {
      "decision_context": "Save the documented account-action boundaries and dated authentication notice used in a finance-tool review.",
      "free": "Complete profile, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.",
      "specific_watch": "Review the documented 31 October 2026 MCP authentication change before use across that date."
    },
    "change_history": [
      {
        "version": 1,
        "date": "2026-10-11",
        "change": "Initial documentation review; no earlier vendor assessment claimed."
      }
    ]
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#stripe-mcp-account-action-trust",
  "machine_readable_record": "/varexis-index/records/stripe-mcp-account-action-trust.json"
}