Shatale MCP Server

Quick Start

Up and running in 3 steps

Install

Runs in guest mode out of the box — no API key needed to explore.

$ npx shatale-mcp-server

Configure your IDE

Add Shatale to your AI coding assistant. Pick your editor:

// claude_desktop_config.json { "mcpServers": { "shatale": { "command": "npx", "args": ["shatale-mcp-server"], "env": { "SHATALE_API_KEY": "your-sandbox-key" } } } }

// .cursor/mcp.json { "mcpServers": { "shatale": { "command": "npx", "args": ["shatale-mcp-server"], "env": { "SHATALE_API_KEY": "your-sandbox-key" } } } }

// ~/.windsurf/mcp.json { "mcpServers": { "shatale": { "command": "npx", "args": ["shatale-mcp-server"], "env": { "SHATALE_API_KEY": "your-sandbox-key" } } } }

$ claude mcp add shatale -- npx shatale-mcp-server

// .vscode/mcp.json { "servers": { "shatale": { "command": "npx", "args": ["shatale-mcp-server"], "env": { "SHATALE_API_KEY": "your-sandbox-key" } } } }

// ~/.config/zed/settings.json → "context_servers" { "context_servers": { "shatale": { "command": { "path": "npx", "args": ["shatale-mcp-server"], "env": { "SHATALE_API_KEY": "your-sandbox-key" } } } } }

// ~/.continue/config.yaml mcpServers: - name: shatale command: npx args: - shatale-mcp-server env: SHATALE_API_KEY: your-sandbox-key

Try it

Ask your AI agent to do something with payments:

▸ "Create a shopping agent with a €1,000 budget"

▸ "Simulate a €150 Nike purchase"

Tools

What your agent can do

Two modes: explore without signing up, or unlock the full sandbox with a free API key.

No key required

Guest Mode

5 tools — explore without signing up

explain_shatale Learn what Shatale is and how it works

simulate_purchase_flow See what happens when an agent tries to buy something

list_mcc_codes Browse merchant category codes for policy rules

generate_policy_template Generate a spending policy from a use case

list_capabilities See all available features and payment options

Sandbox key

Sandbox Mode

Full 17-tool lifecycle — sandbox APIs, no real money

sandbox_simulate_authorization Run the policy engine on a simulated authorization — approve/decline, no ledger

register_user_profile Onboard a user so an agent can pay on their behalf

search_merchants Browse the merchant catalog by name, category, or country

request_temporary_credentials Issue temporary virtual card credentials for a purchase

get_credential_status Check if issued credentials are ready

sandbox_approve_purchase Approve a sandbox purchase that is pending approval

Guest mode requires no signup. Sandbox mode needs a free API key.

Use Cases

What developers are building

🛒

AI Shopping Agents

Give your shopping bot a card with built-in guardrails. Block gambling, limit per-transaction to €500, cap monthly spend at €1,000.

"Create a shopping agent with €1,000/month budget, block gambling MCCs, max €500 per transaction"

✈️

Travel Booking

Restrict to airlines and hotels only. Set a €5,000/month budget with per-transaction limit of €2,000.

"Issue a travel card — airlines and hotels only, €5,000/month, max €2,000 per booking"

🏢

Procurement

Department-level budgets with approved vendor MCCs only. Full audit trail for every authorization.

"Set up procurement cards for the engineering team — software and cloud services MCCs only"

💳

Expense Management

Employee cards with daily limits. Block alcohol and tobacco MCCs. Real-time spend visibility.

"Create an employee expense card — €200/day, no alcohol or tobacco merchants"

Security

Built for safety

🔒

Sandbox only

Production API keys are rejected. The MCP server only works with sandbox credentials.

👃

No card data exposed

PAN and CVV are never visible to the AI agent. Card details stay in the secure vault.

🖥

Local transport

Runs as stdio — no network server, no open ports. Communication stays on your machine.

Read the full security model in SECURITY.md on GitHub.