What Is Iyzico MCP (seyithanalkan)? Hosted Checkout Form, Refunds and Cancellations, Sandbox and Live
You ask your assistant about your payments or have it run a refund or cancellation; Iyzico MCP (seyithanalkan) calls the iyzico payment API (iyzico is a Turkish payment provider). It has ten tools: seven read, three write. Money moves only in the cancel and refund tools; the checkout-form tool returns the address of a card entry page hosted by iyzico, and no tool has a card number field. The README describes the project as "unofficial, community-built, not affiliated with or endorsed by iyzico". The default is sandbox; a single variable (IYZICO_ENVIRONMENT=production) is enough to go live, with no extra confirmation flag. The package is not published on npm; you build it from source.
- What it does
- Lets the assistant read iyzico payment records and run refunds and cancellations
- Type
- MCP server (community, unofficial)
- Maker
- seyithanalkan (individual)
- Card data
- No card field in tool inputs
- Going live
- One variable, no extra confirmation
- Maturity
- Version 0.1.0, 1 commit, 0 stars
- Cost
- Software is free (MIT); iyzico terms are separate
What does Iyzico MCP (seyithanalkan) do?
MCP is the standard that lets AI programs connect to outside tools. This server opens an iyzico merchant account to the assistant: it tests the connection, returns BIN and installment information, fetches payment and subscription records, starts a checkout form, cancels payments and issues refunds.
Money moves only on cancellation and refund; no tool has a card number field.
| Tool | Type | Money movement |
|---|---|---|
| ping, check_bin, retrieve_installment_info, retrieve_checkout_form_result, retrieve_payment, search_subscriptions, retrieve_subscription | Read | None |
| initialize_checkout_form | Write | None: opens a payment session; money moves when the customer completes the form on the iyzico page |
| cancel_payment | Write | Yes: full cancellation (same day, before settlement), irreversible |
| refund_payment | Write | Yes: refund (full/partial), irreversible |
!This tool is not an official iyzico product; the README says so itself. The cancel and refund tools, which move real money, should be reviewed very carefully before connecting a project at this maturity level (version 0.1.0, a single commit).
Who it helps: developers building an iyzico integration who want to try API calls in the sandbox through an assistant. This page is not a recommendation; it sets out facts from the sources.
How do you install Iyzico MCP (seyithanalkan)?
Requirements: an iyzico merchant account (sandbox: sandbox-merchant.iyzipay.com, Settings then API Keys) and Node.js 18+. The npx -y iyzico-mcp command in the README does not work: the package is not on npm (404, October 15, 2026); the README marks it as "if the package is published" and gives building from source as the current path.
› git clone <your-fork-url> iyzico-mcp && cd iyzico-mcp && npm install && npm run build› {"mcpServers":{"iyzico":{"command":"node","args":["/absolute/path/to/iyzico-mcp/dist/index.js"],"env":{"IYZICO_API_KEY":"sandbox-xxxx","IYZICO_SECRET_KEY":"sandbox-yyyy","IYZICO_ENVIRONMENT":"sandbox"}}}}› claude mcp add iyzico --env IYZICO_API_KEY=sandbox-xxxx --env IYZICO_SECRET_KEY=sandbox-yyyy --env IYZICO_ENVIRONMENT=sandbox -- node /absolute/path/to/iyzico-mcp/dist/index.jsTo list the tools without keys: node dist/index.js --list-tools.
!The keys sit in plain text in the MCP client's configuration file and are not tool arguments. The values are placeholders; don't paste your secret key into the chat.
How do you use Iyzico MCP (seyithanalkan)?
Try it only with a sandbox account; approve every call to the refund and cancel tools yourself.
Where does Iyzico MCP (seyithanalkan) work?
| Claude DesktopYes | A node command pointing to the built file. |
|---|---|
| Claude CodeYes | The README includes a claude mcp add command. |
| Other clientsUnclear | Not stated in the documentation. |
What does Iyzico MCP (seyithanalkan) access, and where does card data go?
BIN and installment information, payment details and line-item transactions, form results, subscription records.
Starting a checkout form, cancelling a payment, refunding. The code marks all write tools as destructive.
There is no delete tool, but refunds and cancellations are irreversible operations (tool descriptions).
No tool has a card number field. The checkout-form tool returns the address of a card entry page hosted by iyzico; the tool description says "you never handle card data". The repository does not mention PCI compliance. The text of payment and customer records goes to the AI service you use.
!The default environment is sandbox. One variable is enough to go live: IYZICO_ENVIRONMENT=production (the code also accepts the values prod and live); there is no extra confirmation flag. If you accidentally put a live key in the configuration, the refund and cancel tools will act on real customer payments.
The claim in the repository description that it was "tested against the real sandbox API" is the repository owner's own statement. GitHub Security Advisories is empty (the repository has no SECURITY.md and no CI). That does not mean "secure".
Is Iyzico MCP (seyithanalkan) free?
The software is free and MIT-licensed. iyzico API fees and account terms are not in the repository; they depend on your contract with iyzico. There is no price in Turkish lira (TRY). This is not financial or legal advice.
Common problems
| What happens | What to do |
|---|---|
| npx -y iyzico-mcp cannot find the package | The package is not published on npm; build it from source. |
| Authorization error | First test the keys and environment with the ping tool; use sandbox keys with the sandbox environment. |
How do you remove Iyzico MCP (seyithanalkan)?
- In the client: Delete the iyzico entry from the MCP configuration and restart the client (Claude Code:
claude mcp remove iyzico). - Keys: Rotate or revoke the API and secret keys in the iyzico dashboard; delete the plain-text key from the configuration file.
- Folder: Delete the repository folder you cloned.
Frequently asked questions
Is Iyzico MCP (seyithanalkan) an official iyzico tool?
No. The README describes it as an unofficial, community-built project and says it is not affiliated with or endorsed by iyzico.
Does my card information pass through the assistant?
No tool has a card number field. The checkout-form tool returns the address of a card entry page hosted by iyzico; you enter the card details on that page. The repository does not mention PCI compliance.
How are sandbox and live separated?
The default is sandbox. IYZICO_ENVIRONMENT=production is enough for live; there is no extra confirmation flag.
Which tools move money?
Only cancel_payment and refund_payment. Starting a checkout form does not move money; money moves only when the customer completes the form.
How do you install it?
The npx command in the README does not work because the package is not on npm. You clone the repository and build it with npm install and npm run build; Node 18+ is required.
Related guides
Sources
Not clear in the official sources: Whether the tools actually work · the "tested against the real sandbox API" claim · iyzico API fees and account terms · contents of the test scripts · Turkish support. Each is covered in the relevant section.