Skip to content

What Is Iyzico MCP (seyithanalkan)? Hosted Checkout Form, Refunds and Cancellations, Sandbox and Live

You ask your assistant about your payments or have it run a refund or cancellation; Iyzico MCP (seyithanalkan) calls the iyzico payment API (iyzico is a Turkish payment provider). It has ten tools: seven read, three write. Money moves only in the cancel and refund tools; the checkout-form tool returns the address of a card entry page hosted by iyzico, and no tool has a card number field. The README describes the project as "unofficial, community-built, not affiliated with or endorsed by iyzico". The default is sandbox; a single variable (IYZICO_ENVIRONMENT=production) is enough to go live, with no extra confirmation flag. The package is not published on npm; you build it from source.

What it does
Lets the assistant read iyzico payment records and run refunds and cancellations
Type
MCP server (community, unofficial)
Maker
seyithanalkan (individual)
Card data
No card field in tool inputs
Going live
One variable, no extra confirmation
Maturity
Version 0.1.0, 1 commit, 0 stars
Cost
Software is free (MIT); iyzico terms are separate

What does Iyzico MCP (seyithanalkan) do?

MCP is the standard that lets AI programs connect to outside tools. This server opens an iyzico merchant account to the assistant: it tests the connection, returns BIN and installment information, fetches payment and subscription records, starts a checkout form, cancels payments and issues refunds.

YouAsk about a payment or request a refund
AssistantAn assistant that supports MCP
Iyzico MCP (seyithanalkan)Runs on your computer
iyzico payment APISandbox by default; live with one variable

Money moves only on cancellation and refund; no tool has a card number field.

ToolTypeMoney movement
ping, check_bin, retrieve_installment_info, retrieve_checkout_form_result, retrieve_payment, search_subscriptions, retrieve_subscriptionReadNone
initialize_checkout_formWriteNone: opens a payment session; money moves when the customer completes the form on the iyzico page
cancel_paymentWriteYes: full cancellation (same day, before settlement), irreversible
refund_paymentWriteYes: refund (full/partial), irreversible

This tool is not an official iyzico product; the README says so itself. The cancel and refund tools, which move real money, should be reviewed very carefully before connecting a project at this maturity level (version 0.1.0, a single commit).

Who it helps: developers building an iyzico integration who want to try API calls in the sandbox through an assistant. This page is not a recommendation; it sets out facts from the sources.

How do you install Iyzico MCP (seyithanalkan)?

Requirements: an iyzico merchant account (sandbox: sandbox-merchant.iyzipay.com, Settings then API Keys) and Node.js 18+. The npx -y iyzico-mcp command in the README does not work: the package is not on npm (404, October 15, 2026); the README marks it as "if the package is published" and gives building from source as the current path.

Build from source (README)› git clone <your-fork-url> iyzico-mcp && cd iyzico-mcp && npm install && npm run build
claude_desktop_config.json› {"mcpServers":{"iyzico":{"command":"node","args":["/absolute/path/to/iyzico-mcp/dist/index.js"],"env":{"IYZICO_API_KEY":"sandbox-xxxx","IYZICO_SECRET_KEY":"sandbox-yyyy","IYZICO_ENVIRONMENT":"sandbox"}}}}

The keys sit in plain text in the MCP client's configuration file and are not tool arguments. The values are placeholders; don't paste your secret key into the chat.

How do you use Iyzico MCP (seyithanalkan)?

Try it only with a sandbox account; approve every call to the refund and cancel tools yourself.

Connection test"Ping with iyzico MCP and tell me whether the connection and authentication work. Don't run any other tool."
Installments"Show the installment options for BIN 454360 and TRY 1,000."
Checkout form"Start a checkout form for TRY 250 in the sandbox and give me the payment page address. I'll complete the form myself."

Where does Iyzico MCP (seyithanalkan) work?

Claude DesktopYesA node command pointing to the built file.
Claude CodeYesThe README includes a claude mcp add command.
Other clientsUnclearNot stated in the documentation.

What does Iyzico MCP (seyithanalkan) access, and where does card data go?

Reads

BIN and installment information, payment details and line-item transactions, form results, subscription records.

Writes

Starting a checkout form, cancelling a payment, refunding. The code marks all write tools as destructive.

Deletes

There is no delete tool, but refunds and cancellations are irreversible operations (tool descriptions).

Data

No tool has a card number field. The checkout-form tool returns the address of a card entry page hosted by iyzico; the tool description says "you never handle card data". The repository does not mention PCI compliance. The text of payment and customer records goes to the AI service you use.

The default environment is sandbox. One variable is enough to go live: IYZICO_ENVIRONMENT=production (the code also accepts the values prod and live); there is no extra confirmation flag. If you accidentally put a live key in the configuration, the refund and cancel tools will act on real customer payments.

The claim in the repository description that it was "tested against the real sandbox API" is the repository owner's own statement. GitHub Security Advisories is empty (the repository has no SECURITY.md and no CI). That does not mean "secure".

Is Iyzico MCP (seyithanalkan) free?

The software is free and MIT-licensed. iyzico API fees and account terms are not in the repository; they depend on your contract with iyzico. There is no price in Turkish lira (TRY). This is not financial or legal advice.

Common problems

What happensWhat to do
npx -y iyzico-mcp cannot find the packageThe package is not published on npm; build it from source.
Authorization errorFirst test the keys and environment with the ping tool; use sandbox keys with the sandbox environment.

How do you remove Iyzico MCP (seyithanalkan)?

  1. In the client: Delete the iyzico entry from the MCP configuration and restart the client (Claude Code: claude mcp remove iyzico).
  2. Keys: Rotate or revoke the API and secret keys in the iyzico dashboard; delete the plain-text key from the configuration file.
  3. Folder: Delete the repository folder you cloned.

Frequently asked questions

Is Iyzico MCP (seyithanalkan) an official iyzico tool?

No. The README describes it as an unofficial, community-built project and says it is not affiliated with or endorsed by iyzico.

Does my card information pass through the assistant?

No tool has a card number field. The checkout-form tool returns the address of a card entry page hosted by iyzico; you enter the card details on that page. The repository does not mention PCI compliance.

How are sandbox and live separated?

The default is sandbox. IYZICO_ENVIRONMENT=production is enough for live; there is no extra confirmation flag.

Which tools move money?

Only cancel_payment and refund_payment. Starting a checkout form does not move money; money moves only when the customer completes the form.

How do you install it?

The npx command in the README does not work because the package is not on npm. You clone the repository and build it with npm install and npm run build; Node 18+ is required.

Related guides

Sources

Not clear in the official sources: Whether the tools actually work · the "tested against the real sandbox API" claim · iyzico API fees and account terms · contents of the test scripts · Turkish support. Each is covered in the relevant section.