HitPay MCP server for AI agents

Live

OAUTH 2.0

PAYMENTS

Accounting & Finance

HitPay gives your agent payments for your business: create payment requests with hosted checkout links, issue invoices, run recurring billing on subscription plans, refund charges, and look up customers, orders, and products.

  • Per-user credentials: each call uses the actual user's token, never a shared bot.
  • Encrypted per-tenant vault: AES-256, resolved at request time, never in LLM context.
  • Scoped before every call: pre-call scope check, 90-day SIEM-exportable audit chain.
HitPay
agent · Acme Q3
Run
How much did we collect through HitPay this week?
S
hitpay_list_charges
116ms
Payments agent
You received 318 charges this week totaling SGD 42,960. 3 of them were partially refunded.
Sources: HitPay charges, 318 records
hitpay
318 charges
18:29
Message Claude...

Tools your payments agent reaches for on HitPay, scoped per user.

CALL ANY TOOL
39 tools for payments in HitPay: create payment requests and invoices, run recurring billing and subscription plans, refund charges, charge saved cards, manage customers and orders, and look up products.
hitpay_charge_saved_card
Charge saved card
Charge the card or payment method saved on a recurring billing record for a given amount. Returns the payment id, recurring billing id, amount, currency, and status. Use this for on-demand charges against a saved payment method. The record must have been created with save_card enabled.
Parameters
Name
Type
Required
Description
amount
integer
Required
Amount to bill, as a whole number, in the plan or record currency. Maximum 999999.99. Example: 25.
currency
string
Required
The currency. Example: SGD.
recurring_billing_id
string
Required
ID of the recurring billing record. Get it from list_recurring_billings or create_recurring_billing.
hitpay_create_customer
Create customer
hitpay_create_invoice
Create invoice
hitpay_create_order
Create order
hitpay_create_recurring_billing
Create recurring billing
hitpay_create_refund
Refund create
hitpay_delete_customer
Delete customer
hitpay_delete_invoice
Delete invoice
hitpay_delete_order
Delete order
hitpay_delete_product
Delete product
hitpay_delete_recurring_billing
Delete recurring billing
hitpay_get_business_info
Get business info
hitpay_get_charge
Get charge
hitpay_get_customer
Get customer
hitpay_get_order
Get order
hitpay_get_product
Get product
hitpay_get_recurring_billing
Get recurring billing
hitpay_get_refund
Refund get
hitpay_list_charges
List charges
hitpay_list_customers
List customers
hitpay_list_invoices
List invoices
hitpay_list_orders
List orders
hitpay_list_product_categories
List product categories
hitpay_list_products
List products
hitpay_list_recurring_billings
List recurring billings
hitpay_update_customer
Update customer
hitpay_update_invoice
Update invoice
hitpay_update_order
Update order
hitpay_update_payment_request
Update payment request
hitpay_update_recurring_billing
Update recurring billing

For more tools, view docs.

Build your Agent
Same auth pattern across LangChain, OpenAI, Anthropic, and Google ADK.
Python · LlamaIndex
import { ScalekitClient } from "@scalekit-sdk/node";
import { createReactAgent } from "@langchain/langgraph/prebuilt";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

// HitPay tools scoped to this user
const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["hitpay"], toolNames: [
    "hitpay_create_payment_request",
    "hitpay_list_charges",
    "hitpay_create_refund"] },
  pageSize: 100,
});

const agent = createReactAgent({ llm, tools });
await agent.invoke({ messages: [{ role: "user", content: "Create a SGD 250 payment link for the workshop and list this week's charges" }] });
import OpenAI from "openai";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["hitpay"] }, pageSize: 100,
});

const res = await openai.chat.completions.create({
  model: "gpt-5",
  messages: [{ role: "user", content: "Create a SGD 250 payment link for the workshop and list this week's charges" }],
  tools,
});

// Execute the tool call with the user's vaulted HitPay OAuth token
await sk.tools.executeTool(res.choices[0].message.tool_calls[0], "user_123");
import Anthropic from "@anthropic-ai/sdk";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["hitpay"] }, pageSize: 100,
});

const msg = await anthropic.messages.create({
  model: "claude-sonnet-5",
  max_tokens: 1024,
  messages: [{ role: "user", content: "Create a SGD 250 payment link for the workshop and list this week's charges" }],
  tools,
});

// Tool call runs with the user's vaulted HitPay OAuth token
await sk.tools.executeTool(msg.content, "user_123");
import { Agent } from "@google/adk/agents";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["hitpay"] }, pageSize: 100,
});

const agent = new Agent({
  name: "payments_agent",
  model: "gemini-2.5-pro",
  instruction: "HitPay tools scoped to this user",
  tools,
});

await agent.run("Create a SGD 250 payment link for the workshop and list this week's charges");
Try these prompts
Copy any prompt into your agent. Each maps directly to a HitPay tool. Click to copy, paste into your agent, done.
Payments
Copy the prompt
Copied
Create a SGD 250 payment request for the workshop and give me the checkout link.
Copy the prompt
Copied
List failed charges from yesterday.
Copy the prompt
Copied
Refund SGD 40 of this charge.
Invoices and customers
Copy the prompt
Copied
Create an invoice for Mei Lin for 2 coaching sessions.
Copy the prompt
Copied
List unpaid invoices for jordan@example.com.
Copy the prompt
Copied
Add Tan and Co as a customer with their billing email.
Subscriptions
Copy the prompt
Copied
Create a monthly plan called Pro at SGD 49.
Copy the prompt
Copied
List recurring billings for the Pro plan.
Copy the prompt
Copied
Move Mei Lin's subscription to the annual cycle.
SEE HOW AUTH WORKS
Each user signs in to HitPay once, and Scalekit stores and refreshes their tokens. Credentials stay vaulted, every call is scope checked, and every action is logged.
1
Authorize
Your user connects
HitPay
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
Limited to user
2
Store
Their
HitPay
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
HitPay
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
HitPay
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
See the same per-user auth pattern across other accounting and finance connectors.
GTM and RevOps Teams
Revenue forecast commentary
Pulls open pipeline from Salesforce and HubSpot, calculates coverage against quota, flags at-risk stages, posts commentary to Slack, and logs every snapshot to Google Sheets.
GTM and RevOps Teams
CRM AI agent
Reads the Granola transcript after every call, extracts next steps and updates the HubSpot record, drafts the follow-up in Gmail, and confirms in Slack, all on the rep's own delegated OAuth.
Test other agents
See the same per-user auth pattern across other accounting and finance connectors.
GTM
Revenue forecast agent
Score pipeline coverage against quota across Salesforce and HubSpot, post forecast commentary to Slack, log snapshots to Sheets.
GTM
CRM AI agent
Turn each Granola call transcript into a HubSpot record update, a drafted Gmail follow-up, and a Slack recap.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
01.
Shared tokens break per-user analytics
A shared HitPay token looks fine in a demo. In production every refund and payment request looks like one service account, and you cannot tell which user triggered it. Scalekit resolves the credential of the actual user who triggered the agent, never a shared bot.
// shared token
audit → bot_service_account

// scalekit
audit → user_abc ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
HitPay today. Ten connectors tomorrow.
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
FAQs
Frequently Asked Questions
Does the agent access HitPay as the user or through a shared service account?
As the user. Each user signs in to HitPay once, and Scalekit stores and refreshes their tokens. Payment requests, refunds, and subscription changes the agent makes are attributed to that user in your audit trail, not a shared service account.
Where is the HitPay OAuth token stored?
In Scalekit's managed AES-256 token vault, namespaced per tenant. Refresh is automatic. Revocation is a single dashboard action. Credentials never appear in prompts, logs, or LLM context.
Can I limit what the agent does in HitPay?
Yes. Filter by tool name in listScopedTools to expose only what you want, for example the list and get tools without hitpay_create_refund or hitpay_charge_saved_card, which move money, or hitpay_delete_recurring_billing, which cancels a subscription. Scalekit also enforces scope checks before every API call.
What happens when a user revokes HitPay access?
The connection is invalidated on the next tool call. Subsequent requests for that user fail closed with a clear error. Other users in the tenant remain unaffected. The event is logged for audit.
Which HitPay business does the agent act on?
The business the signed-in HitPay account belongs to. hitpay_get_business_info returns that business's profile, and the charge, invoice, order, and subscription tools act on its data.
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""hitpay"": {
""url"": ""https://mcp.scalekit.com/hitpay"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.hitpay]
url = ""https://mcp.scalekit.com/hitpay""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""hitpay"": {
""url"": ""https://mcp.scalekit.com/hitpay"",
""type"": ""http""
}
}
}