PROBLEM
MCP - Tweet reports a security vulnerability in Stripe's MCP
Tweet reports a security vulnerability in Stripe's MCP server with a detailed code review and a 3.5/5 rating.
Updated: 3/20/2026
Stripe's MCP server has 595K downloads and an unguarded JSON.parse on line 48 that will crash your agent loop.
I read every .ts and .py file. Five findings, all verified at exact line numbers.
3.5/5. @stripe
Full review: https://t.co/UA5HUsJGkQ
Source: https://x.com/nullbuilds/status/2034803399091528162
Did this solve your problem?
0 developers found this helpful