C6 Bank

v0.1.0-alpha.1OAuth2alpha

BR digital bank (JPMorgan-backed). BaaS for Pix, DICT, boleto, accounts. OAuth2 + mTLS. Alpha — developers.c6bank.com.br contract-gated, paths follow BACEN Pix v2 + C6 BaaS conventions.

14 tools5 env vars🇧🇷 Brazilalpha — pending validation

Install

terminal

$ npm install @codespar/mcp-c6@alpha

Quickstart

Add this entry to your claude_desktop_config.json (or any MCP-compatible client config).

claude_desktop_config.json

{
  "mcpServers": {
    "c6": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-c6@alpha"
      ],
      "env": {
        "C6_CLIENT_ID": "<your_c6_client_id>",
        "C6_CLIENT_SECRET": "<your_c6_client_secret>",
        "C6_CERT_PATH": "<your_c6_cert_path>",
        "C6_KEY_PATH": "<your_c6_key_path>"
      }
    }
  }
}

After restart, your agent can call any of the 14 tools below — try get_oauth_token first.

Environment variables · 5

Required to authenticate the server. Stored encrypted when using CodeSpar managed hosting.

C6_CLIENT_ID

required

C6 OAuth client_id issued via the Developer Portal after contract onboarding.

C6_CLIENT_SECRET

requiredsecret

C6 OAuth client_secret.

C6_CERT_PATH

required

Absolute path to the mTLS client certificate (.crt or .pem). BACEN mandates mTLS for Pix v2.

C6_KEY_PATH

requiredsecret

Absolute path to the mTLS private key (.key or .pem).

C6_ENV

optional

Environment: 'sandbox' or 'production'. Defaults to 'sandbox'.

Available tools · 14

Each tool is independent — your agent loads only what it needs to reduce context and response time.

READget_oauth_token

Mint or return a cached OAuth2 client_credentials bearer token for the C6 Developer Portal. Exposed so agents can inspect token freshness; normal tool calls obtain tokens implicitly.

WRITEcreate_pix_cob

Create a Pix immediate charge (cob) with QR code. Returns the txid, copy-paste EMV payload, and location URL per BACEN Pix v2.

READget_pix_cob

Retrieve a Pix immediate charge (cob) by its txid.

READlist_pix_cob

List Pix immediate charges (cob) registered by the merchant within a date range. Paginated per BACEN Pix v2.

WRITEcreate_pix_cobv

Create a Pix charge with due date (cobv) — used for boleto-like Pix where the payer can pay at or after a due date with optional fine/interest. Returns txid, copy-paste EMV payload, and location URL.

READget_pix_cobv

Retrieve a Pix due-date charge (cobv) by its txid.

READresolve_dict_key

Resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix. Subject to BCB rate limits per consenting payer.

WRITEregister_pix_key

Register a DICT key (CPF, CNPJ, email, phone, or EVP) on a C6 account owned by the merchant. Subject to BCB validation flows (e.g. email/SMS confirmation for email/phone keys).

Compatible frameworks

MCP is a protocol — any framework that speaks it can mount this server.

Claude Agent SDKAnthropic

OpenAI AgentsOpenAI

Vercel AI SDKVercel

LangChainLangChain

LlamaIndexLlamaIndex

CrewAICrewAI

MastraMastra

Any MCP clientProtocol

Frequently asked questions

All credentials are encrypted at rest in an isolated vault scoped per organization. OAuth2 tokens are automatically refreshed before expiry. Your agent code never sees raw secrets — it receives scoped, short-lived session tokens.