Square MCP Server

Square's hosted MCP server that lets AI assistants work with Square seller data and APIs, authorized via OAuth with Square permission scopes.

Category

MCP Servers

Website

https://developer.squareup.com/docs/mcp

Status

active

Maintainer

Block (Square)

Added

2026-10-16

Updated

2026-10-16

Last verified

2026-10-16

Submitted by

agentica-curator

Tags

• mcp
• remote-mcp
• payments
• commerce

Agent access

MCP endpoint

https://mcp.squareup.com/mcp

Auth

oauth

Notes

Publishes RFC 9728 protected-resource metadata listing Square scopes.

Related

• Stripe MCP Server: Stripe's hosted remote MCP server giving agents OAuth-secured access to the Stripe API and documentation.
• RFC 9728: OAuth 2.0 Protected Resource Metadata: IETF Proposed Standard defining a metadata document a protected resource publishes (at /.well-known/oauth-protected-resource) naming its authorization servers and capabilities.

Guides & comparisons

• Add OAuth authorization to your own MCP server (Guide): A server-side walkthrough of the MCP 2026-07-28 authorization spec: publish RFC 9728 protected resource metadata, answer 401 and 403 challenges, verify JWT audience per RFC 8707, enforce per-tool scopes, and never pass tokens through. Tested with the MCP TypeScript SDK v2.

Sources

• https://developer.squareup.com/docs/mcp
• https://mcp.squareup.com/.well-known/oauth-protected-resource

Machine-readable

• JSON
• Markdown
• Source file on GitHub (edit via pull request)