AI Integration Kit

Verified Moneybag knowledge for coding agents.

Portable, versioned skills and a read-only local knowledge server help developers integrate faster while preserving the security boundaries required for payment code.

SKILL 01

Checkout integration

Create checkout, handle redirects, verify state, and manage idempotency.

moneybag-checkout · validated package

SKILL 02

Webhooks

Validate raw-body signatures, tolerate duplicate delivery, and reconcile state.

moneybag-webhooks · validated package

SKILL 03

Subscriptions

Build plans, checkout, billing, and lifecycle state handling.

moneybag-subscriptions · validated package

SKILL 04

EMI payments

Review eligibility, tenure selection, identifiers, checkout, and verification boundaries.

moneybag-emi · validated package

SKILL 05

Integration review

Audit contracts, secrets, tenancy, idempotency, webhooks, and launch readiness.

moneybag-integration-review · validated package

Local MCP connection

Connect committed knowledge, not an account.

Clone this repository, install dependencies, and add this stdio server to your coding agent's MCP configuration. Replace the placeholder with the absolute repository path.

The server searches and reads committed guides, resolves reviewed public OpenAPI operations, reads the five Skill packages, verifies webhook HMACs, and lints checkout bodies locally.

Security boundary: it makes no network requests, accepts no API key or token, rejects Moneybag production origins, and exposes no mutating or payment-execution tool. Webhook secrets are used only in memory for local comparison and are never returned.

Manifest: mcp/moneybag-developer-platform.json · Start manually: corepack yarn mcp

{
  "mcpServers": {
    "moneybag": {
      "command": "corepack",
      "args": [
        "yarn",
        "--cwd",
        "/absolute/path/to/moneybag-developer-platform",
        "mcp"
      ]
    }
  }
}

Designed for safe assistance

Contract citations
Every result identifies the committed API version, digest, and source used.

Secret redaction
Keys and tokens are refused; local webhook inputs are never echoed.

No autonomous payments
Skills and MCP tools guide implementation but never authorize or execute money movement.