Limit MCP server permissions at a Stripe account level (not user auth one) #215
JavierCane
started this conversation in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Right now you decide if you grant access to your Stripe account to the MCP server as a binary operation (enabled or disabled).
After that, you can use the Stripe MCP server with an API key, or via OAuth.
If you use it via OAuth, it is the end user who decides which permissions to grant.
It would be great to be able to decide, at a Stripe account level, which permissions are available for end users while authenticating via OAuth.
The only workaround right now would be to use the MCP server via a restricted API key, but that does not limit the possibility to also use it authenticating via OAuth.
All reactions