Microsoft Copilot security directory

Square Payments (Independent Publisher)

Published by Troy Taylor

High risk

Square helps millions of sellers run their business - from secure credit card processing to point of sale solutions. This connector contains actions for the following endpoints: Payments, Terminal, Orders, Subscriptions, Invoices, Catalog, Inventory and Customers.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.
  • Can spend money on your behalf: This connector can initiate charges, orders, or subscriptions. An AI executing these actions could trigger unauthorized financial transactions.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 87 tools or capabilities.

  • Accept dispute
  • Add group to customer
  • Batch change inventory
  • Batch delete catalog objects
  • Batch retrieve catalog objects
  • Batch retrieve inventory changes
  • Batch retrieve inventory counts
  • Batch retrieve orders
  • Batch upsert catalog objects
  • Calculate order (Beta)
  • Cancel invoice
  • Cancel payment
  • Cancel payment by idempotency key
  • Cancel subscription
  • Cancel terminal checkout
  • Cancel terminal refund
  • Catalog info
  • Clone order (Beta)
  • Complete payment
  • Create card
  • Create customer
  • Create customer group
  • Create dispute evidence text
  • Create invoice

The interactive security report will load automatically.