Open Finance

v0.2.0OAuth2

Open Finance Brasil standard: account data, transactions, consent management, and payment initiation across 100+ institutions.

18 tools1 env vars🇧🇷 Brazilstable on npm

Install

terminal

$ npm install @codespar/mcp-open-finance

Quickstart

Add this entry to your claude_desktop_config.json (or any MCP-compatible client config).

claude_desktop_config.json

{
  "mcpServers": {
    "open-finance": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-open-finance"
      ],
      "env": {
        "OPEN_FINANCE_CLIENT_SECRET": "<your_open_finance_client_secret>"
      }
    }
  }
}

After restart, your agent can call any of the 18 tools below — try list_accounts first.

Environment variables · 1

Required to authenticate the server. Stored encrypted when using CodeSpar managed hosting.

OPEN_FINANCE_CLIENT_SECRET

requiredsecret

API key for open-finance

Available tools · 18

Each tool is independent — your agent loads only what it needs to reduce context and response time.

READlist_accounts

List customer bank accounts via Open Finance

READget_account_balance

Get account balance via Open Finance

READlist_transactions

List account transactions via Open Finance

READget_account_overdraft_limits

Get account overdraft (limites) via Open Finance

READget_consent

Get consent details by ID

WRITEcreate_consent

Create a new consent request for data access

DELETErevoke_consent

Revoke an existing consent (data or payment)

READlist_credit_cards

List credit card accounts via Open Finance

Compatible frameworks

MCP is a protocol — any framework that speaks it can mount this server.

Claude Agent SDKAnthropic

OpenAI AgentsOpenAI

Vercel AI SDKVercel

LangChainLangChain

LlamaIndexLlamaIndex

CrewAICrewAI

MastraMastra

Any MCP clientProtocol

Frequently asked questions

All credentials are encrypted at rest in an isolated vault scoped per organization. OAuth2 tokens are automatically refreshed before expiry. Your agent code never sees raw secrets — it receives scoped, short-lived session tokens.