GoCardless API and hosted MCP for bank payments

GoCardless is automatable today through its REST API and a hosted MCP server. Live calls use https://api.gocardless.com/ and sandbox calls use https://api-sandbox.gocardless.com/. Authentication is an access token in Authorization Bearer. The set-up guide sends GoCardless-Version 2015-07-06. Official libraries cover Python, Java, Go, Ruby, Node.js, PHP, and .NET, and the same guide also names iOS and Android SDKs. The reference lists billing requests, customers, mandates, payments, refunds, subscriptions, payouts, and webhooks. Webhooks are HTTPS POSTs with a Webhook-Signature header checked against the endpoint secret. The MCP server is https://mcp.gocardless.com. After GoCardless sign-in, a client can choose sandbox or live and authorise read or write scopes. Money-moving actions, including creating a payment, issuing a refund, and cancelling a mandate, wait for confirmation, and the docs say not to share API keys with the model. The gocardless CLI can list and create resources, listen for webhooks, and trigger test events, and it is sandbox-only. Connector catalogs were not opened. Computer-use viability is unassessed. API scores 8 and is the best path. MCP scores 7 because confirmation and permission selection gate account changes. The CLI scores 4 because it cannot operate the live environment.

Best path today: api · Overall automatability: 8/10