RevClamp MCP Server

RevClamp MCP Server & CLI (revclamp-mcp)

`revclamp-mcp` is a standalone, zero-dependency Open-Source Model Context Protocol (MCP) Server & CLI (index.mjs + local_engine.mjs) implementing 9 deterministic B2B FinOps, Stripe `2025-03-31.basil`, Visa CE 3.0, EU/XI VIES VAT, Shopify Plus B2B Net-15/30/60, and Webhook Security tools in pure Node.js.

• 100% Local In-Process Execution (Default — Zero Network / Zero API Key Required): All 9 MCP tools (initialize, tools/list, and tools/call) execute locally in-process inside `local_engine.mjs` using pure Node.js (node:crypto HMAC-SHA256 verification, integer-cent double-entry accounting, 72-hour webhook replay state machines, and 18,000 UTF-16 code unit CE 3.0 linting). Zero network calls are ever made unless REVCLAMP_API_KEY or REVCLAMP_MCP_URL is explicitly configured.
• Optional Hosted Cloud Workspace Sync (`REVCLAMP_API_KEY`): When REVCLAMP_API_KEY (rg_live_...) is configured, revclamp-mcp connects to **RevClamp Enterprise** (https://api.revclamp.com/api/mcp) to unlock the 90-day SQLite WAL usage & audit ledger, 24/7 autonomous Stripe dispute & entitlement webhook outbox, and real-time EU Commission VIES SOAP gateway consultation numbers.

Local Open-Core (local_engine.mjs) vs. Hosted Cloud (REVCLAMP_API_KEY)

| Capability | Local Open-Core Default (Zero API Key) | Hosted Cloud (REVCLAMP_API_KEY) | | :--- | :--- | :--- | | Execution & Network | 100% in-process (local_engine.mjs), zero network calls | HTTPS JSON-RPC to https://api.revclamp.com/api/mcp (redirect: "error") | | Usage & Audit Storage | Stateless evaluation of caller-supplied JSON snapshots | Persistent 90-day SQLite WAL ledger + Stripe historical backfill | | Dispute & Entitlement Action | Returns non-destructive submit: false draft & revoke_entitlement decision | 24/7 autonomous Stripe webhook outbox (disputes.update & signed revoke webhooks) | | EU & `XI` B2B VAT (`VIES`) | Deterministic syntax & GR -> EL normalization (FORMAT_ONLY default, valid: null) | Live EU Commission VIES SOAP consultation IDs + circuit-breaker retry queue (viesMode: "LIVE" + REVCLAMP_API_KEY) | | Monthly Event Tiers | Unlimited local in-process evaluations (0 network cost) | Free Sandbox (5,000 events/mo) · Starter $19/mo (100k) · Growth $59/mo (1M) · Scale $199/mo (5M) | | Data Privacy (`INV-SAAS-04`) | Nothing ever leaves your machine | Only explicit tools/call arguments are sent over TLS after local live-secret scrubbing (scanMcpClientPayloadForSecrets in index.mjs blocks sk_live_, non-test whsec_, shpat_ locally) |

Open-Source MCP Tools Implemented in local_engine.mjs (9)

| Tool Name | Domain | Local In-Process Implementation (local_engine.mjs) | Execution Mode | | :---: | :---: | :---: | :---: | | revclamp_audit_revenue_leakage | Stripe Billing & Usage | Evaluates caller-supplied customer/usage arrays (demo: true for synthetic sample) and returns upgrade hooks when no workspace ledger is connected | Local In-Process (or Optional Cloud Key) | | revclamp_evaluate_ghost_usage | Stripe 2025-03-31.basil | Evaluates multi-subscription customer snapshots (has_more: false enforced) and 0–14d dunning grace windows for unpaid API/LLM bleed | Local In-Process (or Optional Cloud Key) | | revclamp_stage_stripe_dispute_ce3 | Visa 10.4 / CE 3.0 | Evaluates 120d–365d prior undisputed charges (ip_subnet/device_id overlap) against caller-supplied usageEvents (demo: true for sample) and stages a non-destructive submit: false draft (<= 18,000 UTF-16 code units) | Local In-Process (or Optional Cloud Key) | | revclamp_validate_eu_vat_vies | EU & XI B2B VAT | Normalizes 27 EU member states + Northern Ireland (XI) VAT IDs (GR -> EL), checks syntax locally (FORMAT_ONLY, valid: null), simulates errorWrappers (demo: true), or queries live EU VIES (viesMode: "LIVE" + REVCLAMP_API_KEY) | Local In-Process (or Optional Live VIES) | | revclamp_reconcile_b2b_net_terms | B2B Wholesale Net-30 | Reconciles Net-15/30/60 upfront deposits and credit notes using integer EUR-cent double-entry accounting | Local In-Process (or Optional Cloud Key) | | revclamp_verify_webhook_signature | Webhook HMAC-SHA256 | Generates and verifies Stripe-Signature, X-Shopify-Hmac-Sha256, and X-RevClamp-Signature over raw UTF-8 bytes (node:crypto) with 300s replay checks | Local In-Process (or Optional Cloud Key) | | revclamp_calculate_roi_and_plan_fit | 0% Take-Rate ROI & Plan Fit | Calculates monthly and annual B2B margin savings in integer USD cents vs. 25%–30% chargeback agencies and recommends the optimal tier | Local In-Process (or Optional Cloud Key) | | revclamp_simulate_webhook_replay | Webhook Replay & FSM | Simulates subscription lifecycle webhooks against a 72h deduplication Set and monotonic createdSec guard vs. naive arrival-order handlers | Local In-Process (or Optional Cloud Key) | | revclamp_lint_dispute_evidence | Dispute Evidence UTF-16 & CE 3.0 | Lints evidence[access_activity_log] payloads against the 18,000 UTF-16 code unit ceiling, non-destructive CE 3.0 markers, and merchant note preservation | Local In-Process (or Optional Cloud Key) |

Quick Start (Claude Desktop / Cursor / Windsurf)

Add revclamp-mcp to your claude_desktop_config.json or .cursor/mcp.json. By default, revclamp-mcp runs 100% locally in-process with zero network calls and zero API keys required:

{
  "mcpServers": {
    "revclamp": {
      "command": "npx",
      "args": ["-y", "github:lhphong09t2/revclamp-mcp"]
    }
  }
}

*(Optional)* To connect to a live workspace on `https://revclamp.com/dashboard`, pass REVCLAMP_API_KEY in env or use the hosted Streamable HTTP endpoint (POST https://api.revclamp.com/api/mcp):

…