Skip to main content
Claude Code can attach the hosted HitPay MCP server as a remote HTTP server. You sign in with your HitPay login. This is not the Claude Code Plugin, which is a separate developer tool that uses an API key to help you build payment integrations. The hosted server is at https://mcp.hit-pay.com/. Authentication uses OAuth. You sign in with your HitPay dashboard login and authorize the connection for one business. API keys are not involved.

​
Setup

All clients connect to the same endpoint:
Only users with the owner or admin role on a business can authorize a connection. Other team-member roles (such as staff or cashier) cannot connect.
1

Add the hosted server

2

Authenticate

Run /mcp inside Claude Code, select hitpay, and choose Authenticate. Complete the browser sign-in with your HitPay dashboard login, choose the business under Connect as, and approve.
Looking to build a payment integration with AI instead? That is the Claude Code Plugin, a developer tool that connects Claude to the HitPay API using your API key. The MCP Server on this page connects an AI assistant to your business data using your HitPay login.

​
Example prompts

The assistant selects tools automatically based on your prompt. You do not call tools directly.
  1. “What were my total sales last month, and how do they compare to the month before?”
    Uses get_sales_summary, get_growth_indicator — Reads sales totals and the growth comparison the server exposes for a date range.
  2. “When is my next payout, and what’s my current balance?”
    Uses get_payout_schedule, get_balances — Reads payout timing and current balances. The server cannot initiate a payout or transfer.
  3. “Create a payment link for SGD 49.90 for a consultation session”
    Uses create_payment_link — One of the four write tools. The link is visible in your HitPay dashboard and can be deactivated there.
Other documented prompts include “Show my top-selling products this quarter”, “List my recent transactions above SGD 100”, “Which payment methods do I have enabled?”, “Invoice [email protected] SGD 1,200 for March services and email it to them”, “Which bills are waiting for approval?”, and “List my vendors”.

​
Available tools

The server exposes 24 tools for every connected business: 20 read tools and 4 create tools. Businesses with BillPay also get 4 extra read tools for bills and vendors. Bills awaiting approval include an approve_url that opens the bill in the HitPay dashboard. Vendor bank details are not returned.

​
Excluded operations

The server does not expose:
  • Refunds, or cancelling and modifying transactions
  • Payout or transfer operations
  • Submitting, approving, rejecting, funding, or paying bills
  • Changes to account settings, payment methods, or team members
The only write operations are the four create_* tools listed above; everything else is read-only.

​
Security

  • OAuth 2.0 authorization code flow with PKCE. You approve access on dashboard.hit-pay.com, and your password is never shared with the AI assistant or client.
  • Business-scoped tokens: a connection can only see the business it was authorized for.
  • Owner and admin only: other team-member roles cannot authorize a connection.
  • Rate limited to 30 requests per minute per business.
  • Revocable: remove the connector from your MCP client to stop it making new requests.

​
Frequently asked questions

No. The MCP Server authenticates with your HitPay account login via OAuth. API keys are only used by the developer tools (Claude Code Plugin, Agent Skills, and the CLI).
Both use the Model Context Protocol, but they serve different audiences. The hosted MCP Server authenticates with your account login and is for querying and operating your business from an AI assistant. The Claude Code Plugin runs locally inside Claude Code, authenticates with an API key, and is for developers building payment integrations. It exposes integration-focused API tools and code-generation skills.
The server exposes no destructive operations: it cannot refund, cancel, transfer money, pay bills, or change settings. The only writes are creating payment links, invoices, products, and recurring plans, all of which are visible in your dashboard and can be deactivated there. For bills awaiting approval, it returns a dashboard approve_url instead of approving the bill. Only owner or admin users can authorize a connection, and each connection is scoped to one business.
Team members with the admin role can connect, in addition to the account owner. Other roles (such as staff or cashier) cannot authorize a connection. Tokens are always scoped to the single business that was authorized.
Not yet. The MCP Server is currently available for live accounts at mcp.hit-pay.com only.
HitPay documents setup for Claude (web and desktop), Claude Code, Codex, and Cursor. Any other native MCP client that supports the streamable HTTP transport with OAuth and loopback (localhost) redirects also works. Web-based clients other than claude.ai are not currently allowlisted for registration.

​
See also

Last modified on November 13, 2026