Belvo

v0.2.0OAuth2

Open Finance aggregator for LatAm: bank connections, transaction enrichment, and income verification across Brazil, Mexico, and Colombia.

24 tools3 env vars🌎 LATAMstable on npm

Install

terminal

$ npm install @codespar/mcp-belvo

Quickstart

Add this entry to your claude_desktop_config.json (or any MCP-compatible client config).

claude_desktop_config.json

{
  "mcpServers": {
    "belvo": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-belvo"
      ],
      "env": {
        "BELVO_SECRET_ID": "<your_belvo_secret_id>",
        "BELVO_SECRET_PASSWORD": "<your_belvo_secret_password>"
      }
    }
  }
}

After restart, your agent can call any of the 24 tools below — try list_institutions first.

Environment variables · 3

Required to authenticate the server. Stored encrypted when using CodeSpar managed hosting.

BELVO_SECRET_ID

requiredsecret

Secret ID for Belvo

BELVO_SECRET_PASSWORD

requiredsecret

Secret password for Belvo

BELVO_SANDBOX

optional

Set to true to use sandbox environment

Available tools · 24

Each tool is independent — your agent loads only what it needs to reduce context and response time.

READlist_institutions

List available financial institutions

WRITEcreate_link

Create a link to a financial institution

READlist_links

List existing links

READget_accounts

Get accounts for a link

READget_balances

Get balances for a link

READget_transactions

Get transactions for a link

READget_owners

Get owner information for a link

READget_incomes

Get income data for a link

Compatible frameworks

MCP is a protocol — any framework that speaks it can mount this server.

Claude Agent SDKAnthropic

OpenAI AgentsOpenAI

Vercel AI SDKVercel

LangChainLangChain

LlamaIndexLlamaIndex

CrewAICrewAI

MastraMastra

Any MCP clientProtocol

Frequently asked questions

All credentials are encrypted at rest in an isolated vault scoped per organization. OAuth2 tokens are automatically refreshed before expiry. Your agent code never sees raw secrets — it receives scoped, short-lived session tokens.