Help us improve
Share bugs, ideas, or general feedback.
From stripe-mpp
Validates MPP payment integrations against specs: HTTP 402 challenges, payment headers, Stripe/Tempo methods, OpenAPI discovery, security, and production readiness. For audits and launches.
npx claudepluginhub orcaqubits/agentic-commerce-skills-plugins --plugin stripe-mppHow this skill is triggered — by the user, by Claude, or both
Slash command
/stripe-mpp:mpp-conformanceThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
**Fetch live docs**:
Provides MPP patterns for security, replay protection, HMAC binding, receipt validation, error handling, retries, TLS, and monitoring. Use when architecting secure payment systems or debugging production issues.
Validates ACP implementations against protocol specs: schema validation, checkout flows, idempotency, error handling, security checks, production readiness. Use for compliance and launch prep.
Implements x402 (paid APIs via OZ Channels) and MPP (Machine Payments Protocol) for AI-agent-to-agent payments on Stellar, supporting Charge and Channel modes with USDC.
Share bugs, ideas, or general feedback.
Fetch live docs:
https://paymentauth.org/ for the canonical specification requirementshttps://datatracker.ietf.org/doc/draft-ryan-httpauth-payment/ for the IETF draft compliance requirementssite:docs.stripe.com payments machine mpp production for Stripe production readinesssite:paymentauth.org draft-payment-discovery for service discovery compliance402 Payment Required status code for unpaid requestsWWW-Authenticate: Payment <base64url-challenge> headerid, realm, method, intent, requestAuthorization: Payment <base64url-credential> headerPayment-Receipt: <base64url-receipt> on successful paymentCache-Control: no-store on responses with credentialsGET /openapi.json returns valid OpenAPI 3.x documentx-service-info extension present with categories and docsx-payment-info extension on each payable operation402 responseCache-Control: max-age=300 on discovery endpointsllms.txt available with service descriptionpayment-required for initial challengesverification-failed for invalid proofspayment-expired for expired challenges/credentialsmalformed-credential for unparseable credentialstype URLsFetch the latest specification and IETF draft for any newly added compliance requirements before running conformance checks.