Square Remote MCP Server

๐Ÿ›ก๏ธ Officialโœ“ VerifiedSSEOAuth 2.14 toolsยทOnline41msยท30d uptime: 100%ยทLast checked 18m ago

Square's hosted MCP (mcp.squareup.com/sse) lets agents list payments, search orders and create payment links against your Square seller account after OAuth authorization.

https://mcp.squareup.com/sse
Provider
Block / Square โ†—
Categories
๐Ÿ’ณ Payments, Billing & Commerce
ไธญๆ–‡็ฎ€ไป‹

Square ๅฎ˜ๆ–น่ฟœ็จ‹ MCP ๆœๅŠกๅ™จใ€‚้€š่ฟ‡ SSE ไผ ่พ“ไธŽ OAuth ๅฐ† Square ๅ•†ๆˆท่ดฆๆˆท็š„ๆ”ฏไป˜ใ€่ฎขๅ•ๅ’Œๅ•†ๅ“็›ฎๅฝ•ๆŽฅๅ…ฅ AI ไปฃ็†ใ€‚

SSEhttps://mcp.squareup.com/sse
Install in Cursor โ†’

Or add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "square": {
      "url": "https://mcp.squareup.com/sse"
    }
  }
}

๐Ÿงฐ Tools exposed by Square MCP (4)

ToolSafetyDescriptionParameters
list_payments๐ŸŸข ReadList payments taken by the Square seller account.beginTime: stringlocationId: string
search_orders๐ŸŸข ReadSearch Square orders with filters.locationIds: arrayquery: string
list_catalog_items๐ŸŸข ReadList items in the Square catalog.cursor: string
create_payment_link๐ŸŸ  WriteCreate a Square checkout payment link.description*: stringamount*: numbercurrency: string

๐Ÿ” OAuth 2.1 & Security

Auth type
OAuth 2.1
Dynamic Client Registration
โœ… Supported
PKCE S256
โœ… Supported
Scopes
PAYMENTS_READORDERS_READITEMS_READPAYMENTS_WRITE
Protected resource metadata
https://mcp.squareup.com/.well-known/oauth-protected-resource (expected location)
๐Ÿ” Audit OAuth 2.1 Config โ†’

๐Ÿงฉ Recommended Agent Skills

๐Ÿ“– Guide

Square MCP โ€” Remote MCP Server

Square's remote MCP exposes seller-account data โ€” payments, orders, catalog items โ€” plus payment-link creation, using Square's standard OAuth 2.0 scopes. It currently serves only the legacy SSE transport, so clients need SSE support.

Endpoint & Transport

  • Endpoint URL: https://mcp.squareup.com/sse
  • Transport: HTTP+SSE (legacy SSE transport)

Authentication

Square MCP uses OAuth 2.1 โ€” the first request returns a 401 Unauthorized challenge with a WWW-Authenticate header pointing at the authorization metadata. Compliant clients (Cursor, Claude, VS Code, ChatGPT) handle the whole flow โ€” PKCE and Dynamic Client Registration, so no manual client setup is needed โ€” and simply open a browser consent screen.

Available Tools (4)

Tool Safety Description
list_payments read List payments taken by the Square seller account.
search_orders read Search Square orders with filters.
list_catalog_items read List items in the Square catalog.
create_payment_link write Create a Square checkout payment link.

Connect in 30 Seconds

Claude Code โ€” one command:

claude mcp add --transport sse square https://mcp.squareup.com/sse

Cursor โ€” add to ~/.cursor/mcp.json:

{ "mcpServers": { "square": { "url": "https://mcp.squareup.com/sse" } } }

VS Code โ€” add to .vscode/mcp.json:

{ "servers": { "square": { "type": "sse", "url": "https://mcp.squareup.com/sse" } } }

Claude Desktop & stdio clients โ€” bridge with mcp-remote:

{ "mcpServers": { "square": { "command": "npx", "args": ["-y", "mcp-remote", "https://mcp.squareup.com/sse"] } } }

On first connect your client opens a browser OAuth consent screen โ€” approve it and tools become available immediately.

Troubleshooting

  • 401 Unauthorized on connect โ€” that's expected; the server is OAuth-protected. Let your client complete the browser consent flow, or inspect the endpoint in our OAuth debugger to see the exact WWW-Authenticate challenge.
  • Client says "unsupported transport" โ€” this endpoint only speaks the legacy SSE transport. Use a client with SSE support (Claude Code: claude mcp add --transport sse) or bridge it with mcp-remote.
  • "Session expired" / stale Mcp-Session-Id โ€” just re-send initialize; stateless clients can ignore session headers entirely.
  • SSE-only endpoint โ€” use --transport sse in Claude Code or an SSE-capable client.
  • OAuth scopes follow Square's granular permission model.

๐Ÿš€ How to Connect

  1. Copy the Square MCP endpoint URL
    The remote endpoint is https://mcp.squareup.com/sse.
  2. Add it to your MCP client
    Claude Code: claude mcp add --transport sse square https://mcp.squareup.com/sse. Cursor: add "square": { "url": "https://mcp.squareup.com/sse" } under mcpServers in ~/.cursor/mcp.json. Other clients work similarly.
  3. Complete the OAuth consent
    On first connection your client opens a Block / Square consent screen in the browser. Approve it to grant access; the token is stored by the client and refreshed automatically.
  4. Verify with the online inspector
    Paste https://mcp.squareup.com/sse into remotemcp.net/inspector, run initialize and tools/list, and confirm Square MCP's 4 tools respond.

โ“ FAQ

What is the Square MCP remote MCP endpoint?

The primary endpoint is https://mcp.squareup.com/sse. It is an official first-party server operated by Block / Square, speaking the HTTP+SSE (legacy SSE transport) transport.

How do I authenticate with Square MCP?

Square MCP uses OAuth 2.1. When your client first connects it receives a 401 challenge, discovers the authorization server via RFC 9728 metadata, and opens a browser consent screen. Dynamic Client Registration is supported, so compliant clients register themselves automatically.

I'm getting a 401 Unauthorized from Square MCP โ€” what's wrong?

A 401 means your client hasn't completed (or has lost) the OAuth authorization. Remove and re-add the server in your client to restart the consent flow, and check that your browser session can reach the provider's login page. If the 401 arrives without a WWW-Authenticate header, run it through our OAuth debugger to see what's missing.

Which MCP clients work with Square MCP?

Any client that supports remote MCP servers: Cursor, Claude Code (`claude mcp add --transport sse square https://mcp.squareup.com/sse`), VS Code Copilot, ChatGPT connectors, Windsurf, and Claude Desktop via the `mcp-remote` bridge. Note this server only offers the SSE transport, so the client must support SSE.

What tools does Square MCP expose?

4 tools are cataloged in this directory โ€” including `list_payments`, `search_orders`, `list_catalog_items` and more. Use our online inspector to fetch the live tool list straight from the endpoint.

๐Ÿ”— Connect Guides

๐Ÿ“› Embed Status Badge in README

Square MCP status badge
[![Remote MCP Status](https://remotemcp.net/api/badge/status/square.svg)](https://remotemcp.net/servers/square)
Square MCP inspector badge
[![Test in Inspector](https://remotemcp.net/api/badge/inspect/square.svg)](https://remotemcp.net/inspector?url=https%3A%2F%2Fmcp.squareup.com%2Fsse)

Related Servers

Stripe's official remote MCP server at mcp.stripe.com. Agents can query customers, payment intents and subscriptions and invoke Stripe API operations with OAuth.

https://mcp.stripe.com
๐Ÿ›ก๏ธ Officialโœ“ VerifiedStreamable HTTPOAuth 2.15 toolsOnline62ms

PayPal's official remote MCP server for payments and commerce. Agents can create invoices, inspect transactions and manage orders after OAuth login.

https://mcp.paypal.com/mcp
๐Ÿ›ก๏ธ Officialโœ“ VerifiedHTTP + SSEOAuth 2.14 toolsOnline40ms