Model Context Protocol (MCP)

Use Polar’s remote Model Context Protocol (MCP) server to give AI agents secure access to your Polar organization. Agents can look up data and take actions across your products, customers, subscriptions, orders, benefits, and more.

Polar MCP uses OAuth. When you connect a client, your browser opens so you can sign in and authorize access to your organization. You never need to copy an API key into your agent.

Connect your agent

Use the production server at https://mcp.polar.sh/mcp/polar-mcp for your live organization. While building or testing, use the sandbox server at https://mcp.polar.sh/mcp/polar-sandbox and give it a distinct name such as polar-sandbox. Choose your client and add the appropriate server.

Add the following to .cursor/mcp.json in your project, or to ~/.cursor/mcp.json to make Polar available in every project:

{
  "mcpServers": {
    "polar": {
      "url": "https://mcp.polar.sh/mcp/polar-mcp"
    }
  }
}

Open Cursor’s MCP settings and connect to polar to complete authorization.

Run:

claude mcp add --transport http polar https://mcp.polar.sh/mcp/polar-mcp

Then open /mcp in Claude Code and authenticate polar with OAuth.

In ChatGPT, open Settings → Connectors, enable developer mode if prompted, and add a custom connector with:

Name: Polar
MCP server URL: https://mcp.polar.sh/mcp/polar-mcp

Save the connector, select Connect, and complete authorization in the browser.

Open Settings → Connectors, select Add custom connector, and enter:

Name: Polar
MCP server URL: https://mcp.polar.sh/mcp/polar-mcp

Save the connector, select Connect, and complete authorization in the browser.

Run:

codex mcp add "polar" --url "https://mcp.polar.sh/mcp/polar-mcp"

Complete the OAuth authorization when prompted.

Run:

opencode mcp add polar --url https://mcp.polar.sh/mcp/polar-mcp

Complete the OAuth authorization when prompted.

If your client accepts a remote MCP URL, add:

https://mcp.polar.sh/mcp/polar-mcp

If it only supports local commands, use the mcp-remote bridge:

{
  "mcpServers": {
    "polar": {
      "command": "npx",
      "args": [
        "mcp-remote",
        "https://mcp.polar.sh/mcp/polar-mcp"
      ]
    }
  }
}

How the tools work

Polar exposes more than a hundred API operations. Instead of sending every operation and its input schema to your agent at the start of every conversation, the server gives it a few tools and lets it write short JavaScript snippets to find and call what it needs:

Tool	What it does
`search`	Searches Polar’s API specification for operations, parameters and response schemas.
`execute`	Calls the Polar API with `polar.request`. The agent can chain calls, page through results and return only the fields it needs.
`search_docs`	Searches the Polar documentation.
`read_docs_page`	Reads a Polar documentation page as Markdown.
`feedback`	Sends your agent’s feedback about Polar, these tools or the docs to Polar. Available while telemetry is on.

The agent calls search to find the operations for its task, such as “find a customer and check their active subscriptions”, and their exact inputs.

Execute

The agent calls execute with code that makes the API calls and returns the result.

Code runs in an isolated sandbox. It can only call the Polar operations listed below, with the access you granted when you authorized the client, and it cannot reach any other host.

Read-only mode

For agents that should look up data but never change it, add ?readonly=true to the server URL, for example https://mcp.polar.sh/mcp/polar-mcp?readonly=true. Only read operations are available, and the agent asks for read-only access when you authorize it.

Telemetry

The server sends one event per tool call to help us improve it, plus a second event carrying the feedback itself when your agent calls the feedback tool. Each tool-call event carries:

The tool name, whether the call succeeded, the error type and status code, and the duration.
Your agent’s name and version, when its client reports them.
The API operations the call used (for example GET /v1/products/{id}) with their status codes, and the names of any fields the API rejected (for example body.prices.0.price_amount).
The size of the result.
For search, the JavaScript engine’s error message when the agent’s script fails. Search runs against the public API specification without network access, so the message cannot contain your data.
The intent your agent passes: one sentence on the goal of the call.
What your agent writes in the feedback tool.

Events from the same account share an identifier, a keyed one-way hash of your user or organization ID, so we can see how a session unfolds. Never sent: the ID itself, access tokens, every other tool argument (including the code that execute runs), results, field values, request and response bodies, and IDs in URLs. intent and feedback are the only text your agent writes that the server sends. Every tool asks the agent to write them without customer names, emails or IDs, and before they are sent or logged the server redacts anything that looks like an identifier or a secret, such as emails, IDs, card numbers and API keys. Redaction matches shapes, not meaning, so a name written in plain words can still pass. If your agent handles data you don’t want to share with us at all, opt out. To opt out, add ?telemetry=false (or 0, no, off) to the server URL, for example https://mcp.polar.sh/mcp/polar-mcp?telemetry=false. The server then ignores intent, which is neither sent nor written to its request logs, and removes the feedback tool. It combines with read-only mode: ?readonly=true&telemetry=false. The server still keeps request logs to operate and secure the service, as the Polar API does.

Available operations

Available operations (103)

Operation	Description
`organizations_list`	List organizations.
`organizations_get`	Get an organization by ID.
`subscriptions_list`	List subscriptions.
`subscriptions_get`	Get a subscription by ID.
`subscriptions_update`	Update a subscription.
`subscriptions_revoke`	Revoke a subscription, i.e cancel immediately.
`benefits_list`	List benefits.
`benefits_create`	Create a benefit, for example license keys, file downloads or Discord access.
`benefits_get`	Get a benefit by ID.
`benefits_update`	Update a benefit.
`benefits_delete`	Delete a benefit. Every grants associated with the benefit will be revoked. Users will lose access to the benefit.
`benefits_files`	List the downloadable files for a benefit with their download statistics.
`benefits_grants`	List the individual grants for a benefit. It’s especially useful to check if a user has been granted a benefit.
`benefit_grants_list`	List benefit grants across all benefits accessible to the authenticated subject.
`webhooks_list_webhook_endpoints`	List webhook endpoints.
`webhooks_create_webhook_endpoint`	Create a webhook endpoint.
`webhooks_get_webhook_endpoint`	Get a webhook endpoint by ID.
`webhooks_update_webhook_endpoint`	Update a webhook endpoint.
`webhooks_delete_webhook_endpoint`	Delete a webhook endpoint.
`webhooks_reset_webhook_endpoint_secret`	Regenerate a webhook endpoint secret.
`webhooks_list_webhook_deliveries`	List webhook deliveries. Deliveries are all the attempts to deliver a webhook event to an endpoint.
`webhooks_redeliver_webhook_event`	Schedule the re-delivery of a webhook event.
`products_list`	List products.
`products_create`	Create a product.
`products_get`	Get a product by ID.
`products_update`	Update a product.
`products_delete`	Delete a product. Only products without orders, subscriptions, trials or discounts can be deleted. Products that are in use can only be archived.
`products_update_benefits`	Update benefits granted by a product.
`orders_list`	List orders.
`orders_get`	Get an order by ID.
`orders_update`	Update an order.
`orders_invoice`	Get an order’s invoice data.
`orders_generate_invoice`	Trigger generation of an order’s invoice.
`orders_receipt`	Get a presigned URL to download an order’s receipt PDF.
`refunds_list`	List refunds.
`refunds_create`	Create a refund.
`checkouts_list`	List checkout sessions.
`checkouts_get`	Get a checkout session by ID.
`files_list`	List files.
`files_delete`	Delete a file.
`metrics_get`	Get metrics about your orders and subscriptions. Currency values are output in cents.
`metrics_limits`	Get the interval limits for the metrics endpoint.
`license_keys_list`	Get license keys connected to the given organization & filters.
`license_keys_get`	Get a license key.
`license_keys_update`	Update a license key.
`license_keys_rotate`	Rotate a license key. Generates a new key string for the same license key record. The previous key string immediately stops validating. Status, usage, limits, expiry, and activations are preserved.
`license_keys_get_activation`	Get a license key activation.
`checkout_links_list`	List checkout links.
`checkout_links_create`	Create a checkout link.
`checkout_links_get`	Get a checkout link by ID.
`checkout_links_update`	Update a checkout link.
`checkout_links_delete`	Delete a checkout link.
`custom_fields_list`	List custom fields.
`custom_fields_create`	Create a custom field.
`custom_fields_get`	Get a custom field by ID.
`custom_fields_update`	Update a custom field.
`custom_fields_delete`	Delete a custom field.
`discounts_list`	List discounts.
`discounts_create`	Create a discount.
`discounts_get`	Get a discount by ID.
`discounts_update`	Update a discount.
`discounts_delete`	Delete a discount.
`customers_list`	List customers.
`customers_create`	Create a customer. Set `external_id` to the customer’s ID in your system to look it up by that ID.
`customers_get`	Get a customer by ID.
`customers_update`	Update a customer.
`customers_delete`	Delete a customer. This action cannot be undone and will immediately: - Cancel any active subscriptions for the customer - Revoke all their benefits - Clear any `external_id` Use it only in the context of deleting a user within your own service. Otherwise, use more granular API endpoints to cancel a specific subscription or revoke certain benefits. Note: The customers information will nonetheless be retained for historic orders and subscriptions. Set `anonymize=true` to also anonymize PII for GDPR compliance.
`customers_get_external`	Get a customer by external ID.
`customers_update_external`	Update a customer by external ID.
`customers_delete_external`	Delete a customer by external ID. Immediately cancels any active subscriptions and revokes any active benefits. Set `anonymize=true` to also anonymize PII for GDPR compliance.
`customers_get_state`	Get a customer state by ID. The customer state includes information about the customer’s active subscriptions and benefits. It’s the ideal endpoint to use when you need to get a full overview of a customer’s status.
`customers_get_state_external`	Get a customer state by external ID. The customer state includes information about the customer’s active subscriptions and benefits. It’s the ideal endpoint to use when you need to get a full overview of a customer’s status.
`customers_list_payment_methods`	Get saved payment methods of a customer.
`customers_list_payment_methods_external`	Get saved payment methods of a customer by external ID.
`customers_members_list`	List the members of a customer.
`customers_members_create`	Create a new member for a customer. Only B2B customers with the member management feature enabled can add members. The authenticated user or organization must have access to the customer’s organization.
`customers_members_list_external`	List the members of a customer identified by its external ID.
`customers_members_create_external`	Create a new member for a customer identified by its external ID.
`customers_members_get`	Get a member of a customer by its ID.
`customers_members_update`	Update a member of a customer. Only name, email and role can be updated.
`customers_members_delete`	Delete a member of a customer.
`customers_members_get_external`	Get a member by external ID for a customer identified by its external ID.
`customers_members_update_external`	Update a member by external ID for a customer identified by its external ID.
`customers_members_delete_external`	Delete a member by external ID for a customer identified by its external ID.
`customer_seats_list_seats`	List seats for a subscription or order.
`customer_seats_assign_seat`	Assign a seat for a subscription or order.
`customer_seats_revoke_seat`	Revoke a customer seat.
`customer_seats_resend_invitation`	Resend an invitation for a pending customer seat.
`customer_seats_get_claim_info`	Get claim information for a customer seat invitation.
`customer_seats_claim_seat`	Claim a customer seat with an invitation token.
`events_list_names`	List event names.
`events_get`	Get an event by ID.
`event_types_list`	List event types with aggregated statistics.
`event_types_update`	Update an event type’s label.
`meters_list`	List meters.
`meters_create`	Create a meter.
`meters_get`	Get a meter by ID.
`meters_update`	Update a meter.
`meters_quantities`	Get quantities of a meter over a time period.
`customer_meters_list`	List customer meters.
`customer_meters_get`	Get a customer meter by ID.
`payments_list`	List payments.
`payments_get`	Get a payment by ID.

Bootup

Features

Integrate

Merchant of Record (MoR)

Model Context Protocol (MCP)

Connect your agent

How the tools work

Read-only mode

Telemetry

Available operations

​Connect your agent

​How the tools work

​Read-only mode

​Telemetry

​Available operations

Connect your agent

How the tools work

Read-only mode

Telemetry

Available operations