SellThat MCP server

A Model Context Protocol server that lets an AI assistant (Claude Desktop, Cursor, and other MCP clients) work with a SellThat.ai PayKit account on your behalf — through scoped, revocable access that you approve in your browser.

How access works

The MCP server never sees your password. Instead it uses an OAuth-style approval flow:

1. The assistant calls sellthat_login with no arguments and shows you an approval link.
2. You open the link, review exactly what access is being requested, and approve it.
3. You copy the one-time code shown and give it to the assistant.
4. The assistant exchanges that code for a scoped key and is connected.

You can revoke a connected assistant at any time from Connected apps in your SellThat dashboard.

What it can do

Safe actions run directly:

• sellthat_login — connect to your account
• sellthat_create_product — create a draft product
• sellthat_create_payment_button — add a checkout button
• sellthat_get_embed_code — get the HTML to add a button to a site
• sellthat_install_react_button — generate a React checkout component
• sellthat_add_paywall — generate paywall code
• sellthat_create_webhook_handler — generate a webhook handler
• sellthat_check_entitlement — check whether a buyer has access
• sellthat_test_checkout — create a test checkout

Money-moving and destructive actions are deliberately restricted:

• A live checkout (real money) requires explicit confirm: true.
• Refunds, price changes, product/button deletion, payouts and bank changes are never exposed as tools and cannot be triggered through MCP.

Running it

npx sellthat-mcp

Set SELLTHAT_API_BASE to point at a non-production instance during development (defaults to https://sellthat.ai).

Claude Desktop config example

{
  "mcpServers": {
    "sellthat": {
      "command": "npx",
      "args": ["sellthat-mcp"]
    }
  }
}