Caixa

@codespar/mcp-caixa · v0.2.0-alpha.3

🇧🇷 BrazilBankingAuth · OAuth2beta23 tools5 env varsprerelease

BR state-owned public bank. Distinct from private peers: Caixa handles social programs (FGTS, PIS/PASEP, bolsa família), lotteries, and merchants needing state-bank credibility. OAuth2 + mTLS (BACEN Pix v2). Alpha on npm — state-owned onboarding + contract-gated docs.

Get started · free View docs

MIT · runs locally with your own credentials

Limitations

v0.2.0-alpha.3 is a prerelease; npm has no stable release of this package.
Hosted calls with a test key are not available: connecting this provider needs credentials it issues to an operator.

DetailsSource on GitHub

Package: @codespar/mcp-caixa
Version: 0.2.0-alpha.3 · prerelease
npm dist-tag: latest
Category: Banking
Auth: OAuth2
Country: 🇧🇷 Brazil
License: MIT
Transport: stdio · streamable-http

npm GitHub Server catalog docs

Quickstart

Install, set the credentials, make the first call.

Pick your client. The server runs locally over stdio, with your own credentials.

Add the server to your clientOne config entry. No build step, no SDK required.

Set the environment variables5 variables read by this server's code, listed below.

Restart and make the first callThe agent can call any of the 23 tools. Try get_oauth_token first.

Hosted MCP Build your own server

terminal

# Claude Code
claude mcp add caixa -e CAIXA_CERT_PATH=… -e CAIXA_CLIENT_ID=… -e CAIXA_CLIENT_SECRET=… -e CAIXA_ENV=… -e CAIXA_KEY_PATH=… -- npx -y @codespar/mcp-caixa@0.2.0-alpha.3
# then: /mcp to confirm the server is connected

Environment variables5 variables

CAIXA_CERT_PATHAbsolute path to the mTLS client certificate (.crt or .pem). BACEN mandates mTLS for Pix v2.required

CAIXA_CLIENT_IDCaixa OAuth client_id issued via the Developer Portal after contract onboarding.required

CAIXA_CLIENT_SECRETCaixa OAuth client_secret.requiredsecret

CAIXA_ENVEnvironment: 'sandbox' or 'production'. Defaults to 'sandbox'.optional

CAIXA_KEY_PATHAbsolute path to the mTLS private key (.key or .pem).requiredsecret

Names read from the package code (@codespar/mcp-caixa@0.2.0-alpha.3). Descriptions and flags come from its manifest. Self-hosted, you hold the credentials.

First call demoget_oauth_token

"Mint or return a cached OAuth2 client_credentials bearer token for the Caixa Developer Portal. Exposed so agents can inspect token freshness; normal tool calls obtain tokens implicitly"

tools/callget_oauth_tokenresult returned

Tools

What your agent can call.

23 tools, as the package's tools/list returns them.

get_oauth_token

Mint or return a cached OAuth2 client_credentials bearer token for the Caixa Developer Portal. Exposed so agents can inspect token freshness; normal tool calls obtain tokens implicitly.

send_pix

Initiate an outbound Pix payment from the merchant's Caixa account. Amount in BRL major units (e.g. '10.50').

create_pix_qr

Create a dynamic Pix charge with QR code (cob). Returns the txid, copy-paste EMV payload, and location URL.

get_pix

Retrieve a Pix transaction by its BCB endToEndId (E<ispb><yyyymmddhhmm><sequence>).

resolve_dict_key

Resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix. Subject to BCB rate limits per consenting payer.

refund_pix

Refund (devolução) a previously received Pix. Must reference the original endToEndId and a merchant-side refund id.

create_boleto

Issue a boleto via Caixa Cobrança (SICOB). Returns nosso_numero, linha_digitável, barcode, and PDF URL.

get_boleto

Retrieve a boleto by its Caixa identifier (id or nosso_numero).

cancel_boleto

Cancel (baixa) an outstanding boleto before payment.

get_statement

Retrieve account statement transactions for a given period. Paginated.

get_pix_charge

Retrieve a Pix immediate charge (cob) by its BCB txid. Returns status, QR payload, and associated received Pix (if paid).

update_pix_charge

Update (PATCH) a Pix immediate charge (cob) — e.g. change amount before payment, adjust expiration, or mark as REMOVIDA_PELO_USUARIO_RECEBEDOR.

Names and descriptions come from the package's tools/list (@codespar/mcp-caixa@0.2.0-alpha.3). A kind (read, write, delete) is shown only when the package annotates its tools or each tool was verified one by one; neither exists for this server yet.

Compatibility

MCP is a protocol. Any client that speaks it can mount this server.

codespar_discover lists this server's tools, but connecting it needs credentials the provider issues to an operator (a certificate, signed keys or paired headers), which a test key cannot produce.

Protocol

Any MCP client

stdio · streamable-http

Questions

Before you install.

How do I install the Caixa MCP server?

Run npx -y @codespar/mcp-caixa@0.2.0-alpha.3 and add the config block above to your MCP client: Claude Code, Cursor, Claude Desktop, VS Code, or any MCP-compatible client. No build step, no SDK required.

What can my agent do with Caixa?

Caixa exposes 23 tools for banking. Your agent calls them directly; the full list is above.

How does Caixa authenticate, and how are credentials stored?

Caixa uses OAuth2. Self-hosted, you hold the credentials: the server reads them from its environment variables.

How does Caixa handle upstream API changes?

Every server is versioned independently on npm. The command on this page pins 0.2.0-alpha.3, the version whose tools are listed here; your agent keeps running it until you change the version.

Is Caixa open source? How do I report a bug?

Yes. Caixa is MIT-licensed and published on npm as @codespar/mcp-caixa, source on GitHub (link in the Details panel). Report issues on the package repository; security issues go to security@codespar.dev, and we respond within 24 hours.

Pairs well with