MCP server for Fat Zebra payment gateway integration
12 tools with mostly complete schemas and descriptions, but significant gaps in error handling, output documentation, and parameter clarity. Tool names follow verb_noun convention well (fat_zebra_*). Descriptions average ~120 chars, meeting baseline. However, 8 of 12 tools lack documented output schemas, making it unclear what fields agents should expect. Parameter descriptions are present but often generic ('optional' without explaining consequences). No error recovery guidance. Passthrough tool exposes security risks via flexible input. Missing idempotency hints on payment tools despite retry-prone operations.
Process a 3D Secure credit card payment using the Fat Zebra payment gateway
Retrieve details for a specific batch using the Fat Zebra payment gateway.
Initiate a batch settlement by uploading a CSV file to Fat Zebra. Accepts batch_type (purchase, refund, direct_debit).
Create a new customer in Fat Zebra payment gateway using a card token only.
Create a direct debit payment using the Fat Zebra payment gateway
List batches and their statuses using the Fat Zebra payment gateway.
No output schemas documented for any tool. LLMs cannot predict response structure, forcing them to guess which fields exist for downstream tool chaining. E.g., does fat_zebra_create_customer return customer_id or customer.id?
Payment tools (fat_zebra_payment, fat_zebra_3d_secure, fat_zebra_direct_debit, fat_zebra_token_payment) lack idempotency hints and retry guidance. Agents may retry on transient failures, causing duplicate charges. No confirmation step or dry-run mode.
fat_zebra_passthrough accepts arbitrary endpoints and headers, creating injection risks. No validation against path traversal beyond '..' check. Endpoint regex /^\// is too permissive. No rate limiting or request size caps.
Inferred effective spec: <=2025-11-25.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 50 | <=2025-11-25 | v2 |
Send any supported Fat Zebra API request (method, endpoint, body, headers) and receive the raw response. Strict input validation and logging for security.
Process a credit card payment using the Fat Zebra payment gateway
Download or generate reconciliation reports for a given date using the Fat Zebra payment gateway.
Process a refund for a previous transaction using the Fat Zebra payment gateway
Process a payment using a tokenized card with the Fat Zebra payment gateway
Update customer details in Fat Zebra.
Parameter descriptions lack actionable constraints. E.g., 'batch_type' enum is documented but 'date' format (YYYYMMDD vs YYYY-MM-DD inconsistency across tools) and 'limit' bounds (default 20, max?) are unclear. LLMs will guess and fail.
No error recovery guidance. Tools return raw API errors without actionable next steps. E.g., 'Batch not found' should suggest 'Call fat_zebra_list_batches() to find valid batch IDs.'