mrslbt/xendit-mcp

Model Context Protocol server for the Xendit payment API. Supports payment links via invoices, payouts/disbursements, balances, and transactions across Indonesia, the Philippines, Thailand, Vietnam, and Malaysia.
Install
Or run on demand with npx xendit-mcp.
Upgrading from 0.1.x
**0.2.0 introduces breaking defaults.** If you were on 0.1.x and relied on invoice creation or one-shot payouts working out of the box, those tools are now disabled by default.
To restore the old behavior, set these in your MCP config env:
If you enable disbursements, you must also set the four safety gates (XENDIT_MAX_DISBURSEMENT_AMOUNT, XENDIT_MAX_DAILY_AMOUNT, XENDIT_ALLOWED_ACCOUNTS, XENDIT_APPROVAL_CODE) or the server will refuse to start.
The recommended migration is to adopt the new two-step payout flow (prepare_disbursement → confirm_disbursement with an approval code) instead of re-enabling the legacy one-shot. See Safety for details.
User-facing modes
Think about the product in 3 modes:
- read-only: balances, invoices read, transactions read
- invoices: read-only plus create_invoice and expire_invoice
- guarded-payouts: invoices mode plus prepare_disbursement and confirm_disbursement
For non-technical users, the easiest helpers are:
- doctor prints the current mode, enabled capabilities, and what is still blocked.
- setup generates a Claude Code or Claude Desktop snippet for the mode you want.
Configuration
1. Sign up at the Xendit Dashboard.
2. Go to Settings → API Keys and generate a key.
3. Use a test key (xnd_development_...) for development or a live key for production.
| Variable | Required | Description |
|---|---|---|
| XENDIT_API_KEY | yes | Test or live API key |
| XENDIT_ENABLE_INVOICE_MUTATIONS | no | Set to true to enable create_invoice, expire_invoice, and the create_payment_link prompt. Disabled by default for safer read-only behavior. |
| XENDIT_ENABLE_DISBURSEMENTS | no | Set to true to enable disbursement tools (money-movement). Disabled by default. |
| XENDIT_ALLOW_LIVE | no | Set to true to allow live/production keys (prefixes xnd_production_, iluma_production_, sk_live_). Refused by default. |
| XENDIT_MAX_DISBURSEMENT_AMOUNT | no | Hard cap for one money-out call. Set to 0 or omit to disable. |
| XENDIT_MAX_DAILY_AMOUNT | no | Rolling 24-hour cap across money-out calls. Set to 0 or omit to disable. |
| XENDIT_ALLOWED_ACCOUNTS | no | Comma-separated allowlist in CHANNEL_CODE:ACCOUNT_NUMBER format, e.g. ID_BCA:1234567890. |
| XENDIT_PREPARE_TTL_SECONDS | no | How long a prepared disbursement token stays valid. Defaults to 300, max 86400. |
| XENDIT_APPROVAL_CODE | no | Required when XENDIT_ENABLE_DISBURSEMENTS=true. Human approval code required by confirm_disbursement and legacy one-shot payouts. Keep it out of untrusted prompt context. |
| XENDIT_ENABLE_LEGACY_ONE_SHOT_DISBURSEMENT | no | Set to true only if you intentionally want the old create_disbursement one-shot tool. Disabled by default. |
Guided setup
If you do not want to hand-edit env vars, run:
It will ask which client you use and which mode you want, then output a ready-to-paste Claude config snippet with placeholders for secrets.
If the MCP is already connected in Claude, you can also ask Claude to use:
- get_workspace_mode
- guided_setup
guided_setup uses MCP elicitation in Claude Code when available, so the user sees a form instead of raw config details.
Claude Desktop
Edit claude_desktop_config.json:
Claude Code
Cursor
Add to ~/.cursor/mcp.json with the same shape as Claude Desktop.
Tools
| Tool | Description |
|---|---|
| get_workspace_mode | Explain which Xendit mode is active, what is enabled, and the safest next step to unlock more features. |
| guided_setup | Generate a Claude Code or Claude Desktop config snippet for read-only, invoices, or guarded-payouts. |