{
  "markdown": "# mercadopago-claude-marketplace\n\n**The official Claude Code plugin marketplace for Mercado Pago payment integrations.**\n\n[![Status: Beta](https://img.shields.io/badge/status-beta-orange)](https://github.com/mercadopago/mercadopago-claude-marketplace)\n[![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-blue)](./LICENSE)\n[![Version: 4.3.2](https://img.shields.io/badge/version-4.3.2-green)](./CHANGELOG.md)\n[![Platform: Claude Code](https://img.shields.io/badge/platform-Claude%20Code-7c3aed)](https://claude.com/claude-code)\n[![CI](https://github.com/mercadopago/mercadopago-claude-marketplace/actions/workflows/validate.yml/badge.svg)](https://github.com/mercadopago/mercadopago-claude-marketplace/actions/workflows/validate.yml)\n\n> [!WARNING]\n> **This project is under active development.** APIs, skill structures, and plugin interfaces may change between versions. Use in production integrations at your own discretion. Feedback and contributions are welcome.\n\n<div align=\"center\">\n\n### Explore the Component Catalog\n\n[![Browse Components](https://img.shields.io/badge/%F0%9F%94%8D_Browse_Components-mercadopago--claude--marketplace.vercel.app-3483fa?style=for-the-badge&logoColor=white)](https://mercadopago-claude-marketplace.vercel.app/)\n\n> **4 skills** · **1 agent** · **4 commands** · **2 hooks** — all browsable in a visual catalog.\n>\n> Search, filter, and explore every component with detailed metadata and direct links to source code.\n\n</div>\n\n---\n\n## Overview\n\nA Claude Code plugin that provides guided integration support for the Mercado Pago product families listed below. Availability still depends on country, account eligibility, commercial enablement, and the selected API.\n\n- **MCP-first, connection on demand** — local scaffolding and security checks work offline; OAuth starts only immediately before an MCP tool is needed\n- **4 orchestration skills**: `mp-integrate`, `mp-webhooks`, `mp-test-setup`, `mp-review`\n- **7 countries** supported: Argentina, Brazil, Mexico, Chile, Colombia, Peru, Uruguay\n- **Credential leak prevention** — hook inspects supported Claude tool inputs for hardcoded tokens and blocks secret-file reads in detected Mercado Pago projects\n- **OAuth-based auth** — triggered by MCP-backed operations or manually via `/mp-connect`; no keychain scripts needed\n- **4 slash commands** — `/mp-integrate`, `/mp-review`, `/mp-connect`, `/mp-test-cards`\n\n## What's new in v4.3.2\n\n- **Active plugin-root routing**: `/mp-integrate` now reads routed skills directly from `${CLAUDE_PLUGIN_ROOT}`, avoiding a Bash preflight before routing.\n\n## What's new in v4.3.1\n\nA reliability and product-coverage release with no architecture break: one Claude router, four skills, and MCP connection only when a selected live tool requires it.\n\n- **Mandatory generic CTA resolution** for Checkout Pro and Checkout API across common web templates and frameworks.\n- **Separate Checkout API payment screen**, with deterministic checks that reject inline checkout forms and disconnected CTAs.\n- **Accessible, interactive card fields**, including persistent labels and required CardForm lifecycle controls.\n- **Runtime public-key loading**, avoiding cached HTML placeholders and failing visibly when configuration is missing.\n- **Correct Checkout Pro preference route**: `/checkout/preferences`, without an invalid `/v1` prefix.\n- **SDK safety policy**: detect the official SDK automatically, request authorization, and use the current stable release.\n- **Regression tests in CI and pre-commit** for CTA wiring, screen separation, labels, runtime configuration, and endpoint rules.\n- **Deterministic product contracts** for Bricks, Subscriptions, Marketplace, Wallet Connect, SmartApps, Payouts, QR, and Point.\n- **Public-repository hardening** with a single strict production gate, pinned CI actions, hook regression tests, security policy, and documented data flow.\n\n## Installation\n\n### 1. Add the marketplace\n\n```bash\n/plugin marketplace add https://github.com/mercadopago/mercadopago-claude-marketplace.git\n```\n\n### 2. Install the plugin\n\n```bash\n/plugin install mercadopago@mercadopago-claude-marketplace\n```\n\nIf you are developing this repository locally, you must run `bash scripts/install-git-hooks.sh` before making commits. This is required to activate the pre-commit hook. The validation command expects `claude` to be available on the machine.\n\n### 3. Connect your account when needed\n\nScaffolding, bundled test cards, and local security checks do not require a connection. When an operation needs live account data or an MCP action, the plugin starts OAuth at that point. To connect or verify the status manually, run:\n\n```\n/mp-connect\n```\n\nNo Access Token or keychain setup is required — the MCP server handles authentication via OAuth.\n\nFor other IDEs (Cursor, VS Code, Windsurf), add `https://mcp.mercadopago.com/mcp` via your IDE's MCP settings panel. Run `/mp-connect` for IDE-specific snippets.\n\n## Skills\n\n| Skill | What it does |\n|-------|-------------|\n| `mp-integrate` | Wizard for Checkout Pro, Checkout API, Bricks, QR, Point, Subscriptions, Marketplace, Wallet Connect, Payouts (formerly Money Out), and SmartApps, subject to country/account eligibility |\n| `mp-webhooks` | Receiver pattern with HMAC-SHA256 validation; configures and diagnoses webhooks on demand |\n| `mp-test-setup` | Creates test users and loads funds via MCP; bundled test-card guidance remains available offline |\n| `mp-review` | Runs a local security floor and connects only when the official quality or homologation tools are requested |\n\nStable, high-impact integration anchors are bundled for offline scaffolding. Live account data, actions, and documentation fallbacks come from the Mercado Pago MCP server only when needed.\n\n## Commands\n\n| Command | Purpose |\n|---------|---------|\n| `/mp-connect` | Verify or trigger the Mercado Pago MCP OAuth flow |\n| `/mp-integrate [product] [options]` | Scaffold a new integration via the wizard. Sub-modes: `webhook`, `test-setup` |\n| `/mp-review [scope]` | Review an integration. Scopes: `security`, `webhooks`, `checkout`, `qr`, `subscriptions`, `marketplace`, `quality`, `full` |\n| `/mp-test-cards [country]` | Return bundled test cards without MCP authentication |\n\n## When MCP connection is required\n\nOAuth is requested only after the developer selects an operation that is about to call one of these tools:\n\n| Operation | MCP tools |\n|---|---|\n| List applications or import credentials | `application_list`, `get_credentials` |\n| Create an application | `create_application` |\n| Fill a gap not covered by official `llms.txt` or bundled references | `search_documentation` |\n| Search or verify a payment/order | `search_payments`, `get_payment`, `get_order` |\n| Create or fund test users | `create_test_user`, `add_money_test_user` |\n| Register or diagnose webhooks | `save_webhook`, `notifications_history` |\n| Run official quality checks or homologation | `quality_checklist`, `quality_evaluation`, `form_homologation` |\n\nThe `authenticate` and `complete_authentication` tools only bootstrap OAuth. They are not used as pre-flight checks. The plugin first attempts the selected data/action tool and starts OAuth only if that operation needs authentication.\n\n## Architecture\n\n```\n┌────────────────────────────────────────────────────────┐\n│  mp-integration-expert  (router, ~120 lines)           │\n│  - routes requests; MCP connection happens on demand  │\n│  - country detection                                   │\n│  - mode detection (Orders API vs legacy)               │\n│  - delegates to one of four skills                     │\n└──────────────────────────┬─────────────────────────────┘\n                           │\n        ┌──────────────────┼──────────────────┬──────────────────┐\n        ▼                  ▼                  ▼                  ▼\n   mp-integrate       mp-webhooks       mp-test-setup        mp-review\n   (wizard)           (HMAC + MCP        (create_test_user   (quality_checklist\n                       webhook tools)     + add_money)        + security floor)\n        │                  │                  │                  │\n        └──────────────────┴──────────────────┴──────────────────┘\n                           │\n                           ▼\n              ┌───────────────────────────┐\n              │  Mercado Pago MCP server  │\n              │  (mcp.mercadopago.com)    │\n              │                           │\n              │  search_documentation     │\n              │  quality_checklist        │\n              │  quality_evaluation       │\n              │  save_webhook             │\n              │  notifications_history…   │\n              │  create_test_user         │\n              │  add_money_test_user      │\n              └───────────────────────────┘\n```\n\n**The agent is a router** with no embedded product implementation guide. **Skills** assemble offline-capable scaffolds from curated references and use MCP tools for live documentation gaps, account data, test-user actions, webhook configuration, quality evaluation, and homologation. OAuth is never requested as a generic pre-flight check.\n\n## Infrastructure\n\n| Component | Name | Purpose |\n|-----------|------|---------|\n| Agent | `mp-integration-expert` | Single router — detects country and mode, delegates to the right skill |\n| Hook | `validate_mp_credentials` | Credential scanner — blocks hardcoded MP tokens from reaching source files |\n| Hook | `check-version` | Runs on every prompt to verify plugin version compatibility |\n| MCP | `mercadopago` | Live Mercado Pago API access via OAuth (`mcp.mercadopago.com`) |\n| CI | `validate.yml` | Hook tests, all deterministic product suites, strict plugin validation, and catalog integrity |\n\n## Compatibility and requirements\n\nFor plugin users:\n\n- [Claude Code](https://claude.com/claude-code); release validation uses 2.1.228 or newer.\n- Python 3.8+ for the credential scanning hook.\n- macOS or Linux. On Windows, use WSL; native Windows is not yet part of the release gate.\n\nThe Mercado Pago MCP server is remote and does **not** require a local Node.js server. Repository contributors need Node.js 20+ and npm 10+; see [CONTRIBUTING.md](./CONTRIBUTING.md).\n\n## Security and privacy\n\nRead [SECURITY.md](./SECURITY.md) before reporting a vulnerability or credential exposure. [PRIVACY.md](./PRIVACY.md) documents which operations remain local and what an explicitly selected MCP call may transmit.\n\n## Contributing\n\nHave a bug to report, a feature to suggest, or a question? Open an issue — that's the best way to contribute. See our [Contributing Guidelines](./CONTRIBUTING.md) for details on how to write a good report or feature request.\n\n## Code of Conduct\n\nThis project is governed by our [Code of Conduct](./CODE_OF_CONDUCT.md). By participating, you are expected to uphold these standards and help maintain a welcoming and respectful environment for everyone.\n\n## Support\n\nYou may find technical documentation about Mercado Pago's products and services on the [Developer's Website](https://www.mercadopago.com.ar/developers/en).\n\nTechnical Support is available within the [Developer's Website Support Section](https://www.mercadopago.com.ar/developers/en/support/center).\n\n## License\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this project except in compliance with the License.\nYou may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n\nSee the [LICENSE](./LICENSE) file for the full license text, and [NOTICE](./NOTICE)\nfor attribution information.\n\n### Copyright\n\nCopyright (c) 2026 Mercado Pago (MercadoLibre S.R.L.)\n",
  "bytes": 11641,
  "sha": "9355a2e195b0b888e66f7b032d4b2e6c7ee47ea60613791ec5dc38364df1fd99",
  "repo_slug": "mercadopago/mercadopago-claude-marketplace",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/plg_mercadopago_mercadopago_claude_marketpla_3259092d/readme"
}