Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "marutap": {
      "type": "http",
      "url": "https://mcp.marutap.com/mcp",
      "headers": {
        "Authorization": "Bearer ${MARUTAP_TOKEN}"
      }
    }
  }
}

claude mcp add --transport http marutap https://mcp.marutap.com/mcp --header "Authorization: Bearer ${MARUTAP_TOKEN}"

[mcp_servers.marutap]
url = "https://mcp.marutap.com/mcp"
bearer_token_env_var = "MARUTAP_TOKEN"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "marutap": {
      "type": "remote",
      "url": "https://mcp.marutap.com/mcp",
      "enabled": true,
      "headers": {
        "Authorization": "Bearer {env:MARUTAP_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "marutap": {
      "type": "http",
      "url": "https://mcp.marutap.com/mcp",
      "headers": {
        "Authorization": "Bearer ${MARUTAP_TOKEN}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=marutap&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWNwLm1hcnV0YXAuY29tL21jcCIsImhlYWRlcnMiOnsiQXV0aG9yaXphdGlvbiI6IkJlYXJlciAke01BUlVUQVBfVE9LRU59In19"
}

{
  "servers": {
    "marutap": {
      "type": "http",
      "url": "https://mcp.marutap.com/mcp",
      "headers": {
        "Authorization": "Bearer ${MARUTAP_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "marutap": {
      "httpUrl": "https://mcp.marutap.com/mcp",
      "headers": {
        "Authorization": "Bearer ${MARUTAP_TOKEN}"
      }
    }
  }
}

extensions:
  "marutap":
    enabled: true
    name: "marutap"
    type: streamable_http
    uri: "https://mcp.marutap.com/mcp"
    headers:
      "Authorization": "Bearer ${MARUTAP_TOKEN}"
    timeout: 300

Placeholders to fill from your own secret store: ${MARUTAP_TOKEN}. The registry never accepts secret values.

Quality 96 / 100strong

protocol88 · weight 25

pass
protocol.modernsupports 2026-07-28 (server/discover)
pass
protocol.statelessanswers without a session
pass
protocol.transportstreamable HTTP
warn
protocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every use

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene100 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations7 of 7 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
pass
tools.token_costabout 1,374 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability100 · weight 15

pass
stability.changesno tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

7 tools, about 1,374 tokens to load them all · tool set 6745b6278a80 · checked 2026-10-20 13:17 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 93 / 100

provenance85

liveness100

freshness85

hygiene100

+repository +dns-namespace +website +reachable +uptime-100% ~updated-39d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://mcp.marutap.com/mcp` streamable-http	none	yes	100%	416 ms	2026-07-28	2026-10-20

Tools (7)

`cancel_subscription`destructive	Cancel a subscription mandate. Safe — canceling never spends money, and the merchant can never charge again afterwards.
`get_payment_result`read-only	Poll for the outcome of a payment request. Long-polls up to wait_seconds. Returns status one of: pending, approved, settled, declined, expired, not_found, claim_pending. When approved, includes a single-use `card` (number, cvc, exp) locked to this purchase — use it to complete checkout at the merchant. If still "pending"/"claim_pending", call again. For a claim (charge_id = the "clm_…" poll_id from request_payment): pass the agent_secret you received. The first approved result also contains `connect_token` — persist it and send it as the Authorization bearer on all future calls.
`list_payment_requests`read-only	List this agent's payment requests and whether each has been approved yet. Use this to see the state of every request you've made — not just poll one saved charge_id. Each item includes its `status` (pending, approved, settled, declined, expired) so you can tell which are still waiting and which the user has acted on. For a pending request it also returns the `approval_url` (re-surface it to the user); once a request is approved, call get_payment_result(charge_id) to fetch the card. Args: status: which to return — "open" (default, still-pending only) or "all". limit: max requests to return (default 20, capped at 100), newest first.
`list_subscriptions`read-only	List the user's subscription mandates and their status.
`record_order`	Report the merchant's order reference back after checkout, so the user can later reverse (refund) the purchase. `order_ref` is the merchant's payment id (e.g. a Stripe PaymentIntent).
`request_payment`	Request the user's approval to pay for a purchase. Usually returns `{auto_approved: false, approval_url}` — show the approval_url to the user so they can review the total and approve with one tap, then call get_payment_result. If the user's spending policy auto-approves this purchase (e.g. under their cap at an allowlisted merchant), it returns `{auto_approved: true, status: "approved", card}` immediately — no approval needed, just use the card. Args: amount: Total to charge, in major units (e.g. 18.50 dollars). merchant: Human-readable merchant / store name shown on the approval screen. line_items: Optional list of {"name": str, "quantity": int, "amount_cents": int}. currency: ISO currency code, default "usd".
`request_subscription`	Set up a recurring subscription mandate (e.g. Netflix at up to $16/month). Requires the user's explicit one-time approval — returns an approval_url. The mandate is merchant-locked and capped: the merchant can never charge more than `cap` per period, and the user can cancel anytime (after which the merchant can never charge again). Args: merchant: merchant to authorize (e.g. "Netflix"). cap: max amount per period in major units (e.g. 16.00). interval: "weekly" \| "monthly" \| "yearly".

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "com.marutap/marutap",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://mcp.marutap.com/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "Authorization",
          "isSecret": true,
          "description": "Bearer <connect token> from your Marutap dashboard (marutap.com -> Your agents -> Generate). Optional: without it, request_payment returns a claim link and the user's first approval creates the account and delivers the token."
        }
      ]
    }
  ],
  "version": "1.0.0",
  "repository": {
    "url": "https://github.com/alexQueue/maruchit",
    "source": "github"
  },
  "websiteUrl": "https://marutap.com",
  "description": "Agent requests a purchase, the human taps approve, the agent gets a card scoped to it."
}