Back to search
C
71.3 /100

io.github.jpbester/payfast

Author jpbester
Scanned 47d ago

MCP server for PayFast — AI assistants interact with South Africa's payment gateway

Versions

1.0.1scored
first seen May 19, 2026

Trust breakdown

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 14

transaction.fetch
annotations: none low

Fetch details of a specific PayFast transaction by payment ID

transaction.history
annotations: none low

Get PayFast transaction history with optional date range and pagination

transaction.charge
annotations: none low

Process a charge on a tokenized card. This creates a real payment. Requires confirmation.

ping
annotations: none low

Test connectivity to the PayFast API and verify credentials are valid

refund.create
annotations: none low

Create a refund for a PayFast transaction. This will return money to the customer\

refund.query
annotations: none low

Query refund availability for a transaction BEFORE creating a refund. Returns available amounts, refund methods (credit card or bank payout), and required parameters. Use this first to check if a refund is possible.

refund.fetch
annotations: none low

Fetch refund transaction history and available balance for a payment that has ALREADY been refunded. Returns 404 if no refund exists yet — use refund.query first to check availability.

creditcard.fetch
annotations: none low

Query credit card transaction details for a specific PayFast payment

subscription.fetch
annotations: none low

Fetch details of a PayFast subscription by its token

subscription.pause
annotations: none low

Pause a PayFast subscription for a specified number of billing cycles. This stops charges temporarily.

subscription.unpause
annotations: none low

Resume a previously paused PayFast subscription. Billing will resume on the next cycle.

subscription.cancel
annotations: none low

Permanently cancel a PayFast subscription. This cannot be undone.

subscription.update
annotations: none low

Update a PayFast subscription

subscription.adhoc
annotations: none low

Process an ad-hoc (one-time) charge on an existing PayFast subscription

Permissions 2

network Server uses network capabilities via: fetch()
medium
env_vars Server uses env_vars capabilities via: process.env
low

Scan Findings 42

low
Tool 'transaction.fetch' has no annotations annotation_checker · 100%
low
Tool 'transaction.history' has no annotations annotation_checker · 100%
low
Tool 'transaction.charge' has no annotations annotation_checker · 100%
low
Tool 'ping' has no annotations annotation_checker · 100%
low
Tool 'refund.create' has no annotations annotation_checker · 100%
low
Tool 'refund.query' has no annotations annotation_checker · 100%
low
Tool 'refund.fetch' has no annotations annotation_checker · 100%
low
Tool 'creditcard.fetch' has no annotations annotation_checker · 100%
low
Tool 'subscription.fetch' has no annotations annotation_checker · 100%
low
Tool 'subscription.pause' has no annotations annotation_checker · 100%
low
Tool 'subscription.unpause' has no annotations annotation_checker · 100%
low
Tool 'subscription.cancel' has no annotations annotation_checker · 100%
low
Tool 'subscription.update' has no annotations annotation_checker · 100%
low
Tool 'subscription.adhoc' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@3.22.0 (GHSA-m95q-7qp3-xv42) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@1.2.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@1.2.0 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: transaction.fetch manifest_parser · 70%
info
Tool: transaction.history manifest_parser · 70%
info
Tool: transaction.charge manifest_parser · 70%
info
Tool: ping manifest_parser · 70%
info
Tool: refund.create manifest_parser · 70%
info
Tool: refund.query manifest_parser · 70%
info
Tool: refund.fetch manifest_parser · 70%
info
Tool: creditcard.fetch manifest_parser · 70%
info
Tool: subscription.fetch manifest_parser · 70%
info
Tool: subscription.pause manifest_parser · 70%
info
Tool: subscription.unpause manifest_parser · 70%
info
Tool: subscription.cancel manifest_parser · 70%
info
Tool: subscription.update manifest_parser · 70%
info
Tool: subscription.adhoc manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (5) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 221 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%