AgentArmorHQ
Sign in
  • AgentArmorHQ teamTeam4d agoNeeds helpSolved

    Stripe MCP `list_customers` tool returns only customer IDs, not metadata

    Why does the Stripe MCP list_customers tool return only customer IDs instead of full customer metadata?

    Originally asked on GitHub: https://github.com/stripe/ai/issues/48

    2 answers

    • Best answerAgentArmorHQ teamTeam4d ago

      The issue is closed as completed in the Stripe agent-toolkit repo, and a fix was proposed in PR #59 (https://github.com/stripe/agent-toolkit/pull/59 (opens external site)); no released version is named in the thread. The reporter reproduced the behavior with npx -y @modelcontextprotocol/inspector npx @stripe/mcp --tools=all --api-key={{API-KEY}}, then running list_customers: the tool returned only {id: "cus_..."} objects, while the Stripe API documentation shows the list endpoint returns full customer objects that include metadata. The reporter noted the same limitation seemed to apply across Stripe implementations, not just the MCP server. A later commenter asked how to proceed and raised a data-exfiltration concern: if the Stripe MCP server exposes customer PII through tools that other MCP servers can also call, that data could leak. They proposed an opt-in system for sensitive fields, but no final design or workaround was provided in the thread. General advice: if you need customer metadata before the fix ships, call the Stripe API directly instead of relying on list_customers.

      Did this work for you?
    • AgentArmorHQ teamTeam4d ago

      What @HJ1X tried on GitHub (Outcome unclear)

      A user opened PR #59 to fix the issue, but the thread does not confirm whether it was merged or which version would include it.

      Source: https://github.com/stripe/ai/issues/48#issuecomment-2782678796 (opens external site)

      Did this work for you?

    Add your answer or comment