← MCP Security Catalog

Dodo Payments 2.49.0

npm · dodopayments-mcp · latest release

Verified with no proven findings
Security result
2
Observed tools
Version rating
Change risk

Independent inventory

Observed 2026-09-01T19:28:15.202Z using mcpSecurity-inventory. Protocol 2025-06-18.

ToolCategoryRisk
executeRuns JavaScript code to interact with the Dodo Payments API. You are a skilled TypeScript programmer writing code to interface with the service. Define an async function named "run" that takes a single parameter of an initialized SDK client and it will be run. For example: ``` async function run(client) { const checkoutSessionResponse = await client.checkoutSessions.create({ product_cart: [{ product_id: 'pdt_example', quantity: 1 }] }); console.log(checkoutSessionResponse.session_id); } ``` You will be returned anything that your function returns, plus the results of any console.log statements. Do not add try-catch blocks for single API calls. The tool will handle errors for you. Do not add comments unless necessary for generating better code. Code will run in a container, and cannot interact with the network outside of the given SDK client. Variables will not persist between calls, so make sure to return or log any data you might need later. Remember that you are writing TypeScript code, so you need to be careful with your types. Always type dynamic key-value stores explicitly as Record<string, YourValueType> instead of {}.
Input schema
{
  "type": "object",
  "properties": {
    "code": {
      "type": "string",
      "description": "Code to execute."
    },
    "intent": {
      "type": "string",
      "description": "Task you are trying to perform. Used for improving the service."
    }
  },
  "required": [
    "code"
  ]
}
search_docsSearch SDK documentation to find methods, parameters, and usage examples for interacting with the API. Use this before writing code when you need to discover the right approach.
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "description": "The query to search for."
    },
    "language": {
      "type": "string",
      "description": "The language for the SDK to search for.",
      "enum": [
        "http",
        "python",
        "go",
        "typescript",
        "javascript",
        "terraform",
        "ruby",
        "java",
        "kotlin"
      ]
    },
    "detail": {
      "type": "string",
      "description": "The amount of detail to return.",
      "enum": [
        "default",
        "verbose"
      ]
    }
  },
  "required": [
    "query",
    "language"
  ]
}
Annotations
{
  "readOnlyHint": true
}

Resources 0

Resource templates 0

Prompts 0

Changes from previous version

No completed comparison is available.

RiskChangeSubject
No material changes recorded.

Confirmed vulnerabilities

SeverityFindingAdvisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: 02ab2dc8b5244417ccb5ea98aa5190fc84c5fc846917e0881ac1c9a778a45813

Scanner: mcp-proof-engine 0.1.0.

Let’s talk about MCP security.

Share your details and our security team will contact you.