Skip to content

Square

Monitor your Square payment activity, refunds, low inventory, customer activity, and gift card balances. Powered by the official Square MCP server from Block (Apache-2.0 licensed).

Quick Setup

Square uses an access token from your Square Developer dashboard.

  1. Go to developer.squareup.com/apps
  2. Create an application (or open an existing one)
  3. Under Credentials → copy the Access token (Production or Sandbox)
  4. In Phyllax → Integrations → Square → paste the token → Save → Connect

Production vs Sandbox

The Square Developer dashboard gives you both a Production token and a Sandbox token. Production sees your real Square account; Sandbox is for testing. Make sure you're pasting the right one.

Required Credentials

FieldWhere to find it
Access Tokendeveloper.squareup.com/apps → Your App → Credentials → Access tokens
Environmentproduction (real account) or sandbox (test)

What Phyllax Monitors

The official Square MCP exposes 37 services covering most of the Square API. Phyllax pre-builds these schedules:

ScheduleWhat it checks
Failed paymentsDeclined or failed transactions in the last N hours
Refunds processedNew refunds (could indicate customer dissatisfaction)
Large ordersOrders above a threshold you set ($50, $500, etc.)
Low inventoryItems running low at a specific location
New customersNewly created customer profiles
Gift cards activatedNew gift card sales
Cash flow summaryDaily revenue summary across all locations

Notification Actions

  • Open in Square — opens the order, customer, or item in Square's Seller dashboard
  • Issue refund — open the refund flow for an order (with confirmation)
  • Reorder inventory — open the catalog page for the low-stock item

Troubleshooting

"Authorization failed"

Common causes:

  • Pasted a Sandbox token but the integration is set to Production (or vice versa)
  • Token was revoked from the Square dashboard
  • Token has wrong permissions — make sure the application has access to Payments, Customers, Catalog, and Inventory

Orders missing from a specific location

Square access tokens are scoped to your account, but each location has its own settings. Make sure the location is active in the Square dashboard.

"Rate limit exceeded"

Square API limits are per-minute. Phyllax backs off and retries. Reduce schedule frequency if you hit this often.

Phyllax — a local desktop sentinel for your work tools