Square MCP
Access Square payments, catalog and customer APIs.
How it runs
This server is hosted by the provider. You add its URL to an MCP client that supports remote servers and usually sign in with OAuth. Review the permissions you grant during sign-in.
Who maintains it
This is an official server published by the vendor behind the product it connects to, generally the safest choice for that integration.
Safety checklist
- Review which tools it exposes, and prefer read-only modes where available.
- Use scoped, least-privilege credentials or a test account first.
- Keep human approval on for actions with side effects (writes, payments, deletions).
- Treat content returned from the web or user data as untrusted, because it can contain prompt-injection attempts.