Sicoob

@codespar/mcp-sicoob · v0.1.0-alpha.4

🇧🇷 BrazilBankingAuth · OAuth2beta13 tools5 env varsprerelease

BR cooperative bank network — top 4 in Pix volume. Pix immediate + cobv, DICT, boleto, account balance. OAuth2 + mTLS. Alpha — developers.sicoob.com.br contract-gated.

Get started · free View docs

MIT · runs locally with your own credentials

Limitations

v0.1.0-alpha.4 is a prerelease; npm has no stable release of this package.
Hosted calls with a test key are not available: connecting this provider needs credentials it issues to an operator.

DetailsSource on GitHub

Package: @codespar/mcp-sicoob
Version: 0.1.0-alpha.4 · prerelease
npm dist-tag: latest
Category: Banking
Auth: OAuth2
Country: 🇧🇷 Brazil
License: MIT
Transport: stdio · streamable-http

npm GitHub Server catalog docs

Quickstart

Install, set the credentials, make the first call.

Pick your client. The server runs locally over stdio, with your own credentials.

Add the server to your clientOne config entry. No build step, no SDK required.

Set the environment variables5 variables read by this server's code, listed below.

Restart and make the first callThe agent can call any of the 13 tools. Try get_oauth_token first.

Hosted MCP Build your own server

terminal

# Claude Code
claude mcp add sicoob -e SICOOB_CERT_PATH=… -e SICOOB_CLIENT_ID=… -e SICOOB_CLIENT_SECRET=… -e SICOOB_ENV=… -e SICOOB_KEY_PATH=… -- npx -y @codespar/mcp-sicoob@0.1.0-alpha.4
# then: /mcp to confirm the server is connected

Environment variables5 variables

SICOOB_CERT_PATHAbsolute path to the mTLS client certificate (.crt or .pem). BACEN mandates mTLS for Pix v2.required

SICOOB_CLIENT_IDSicoob OAuth client_id issued via the Developers Portal after cooperative onboarding.required

SICOOB_CLIENT_SECRETSicoob OAuth client_secret.requiredsecret

SICOOB_ENVEnvironment: 'sandbox' or 'production'. Defaults to 'sandbox'.optional

SICOOB_KEY_PATHAbsolute path to the mTLS private key (.key or .pem).requiredsecret

Names read from the package code (@codespar/mcp-sicoob@0.1.0-alpha.4). Descriptions and flags come from its manifest. Self-hosted, you hold the credentials.

First call demoget_oauth_token

"Mint or return a cached OAuth2 client_credentials bearer token for the Sicoob Developers Portal. Exposed so agents can inspect token freshness; normal tool calls obtain tokens implicitly"

tools/callget_oauth_tokenresult returned

Tools

What your agent can call.

13 tools, as the package's tools/list returns them.

get_oauth_token

Mint or return a cached OAuth2 client_credentials bearer token for the Sicoob Developers Portal. Exposed so agents can inspect token freshness; normal tool calls obtain tokens implicitly.

create_pix_cob

Create an immediate Pix charge (cob) with QR code. Returns the txid, copy-paste EMV payload, and location URL.

get_pix_cob

Retrieve an immediate Pix charge by its txid.

list_pix_cob

List immediate Pix charges (cob) registered by the merchant within a date range. Paginated per BACEN Pix v2.

create_pix_cobv

Create a Pix charge with due date (cobv) — boleto-like Pix payable on or after a due date with optional fine/interest/discount. Returns txid, copy-paste EMV payload, and location URL.

get_pix_cobv

Retrieve a due-date Pix charge (cobv) by its txid.

lookup_dict_key

Resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix. Subject to BCB rate limits per consenting payer.

register_dict_key

Register a DICT key (CPF, CNPJ, email, phone, or EVP) on a Sicoob account owned by the cooperative member. Subject to BCB validation flows (e.g. email/SMS confirmation for email/phone keys).

delete_dict_key

Delete a DICT key owned by the cooperative member. Irreversible — the key becomes available for re-registration by any PSP after BCB lockout window.

create_boleto

Issue a boleto via Sicoob Cobrança. Returns nosso_numero, linha_digitável, barcode, and PDF URL.

get_boleto

Retrieve a boleto by its Sicoob identifier (id or nosso_numero).

cancel_boleto

Cancel (baixa) an outstanding boleto before payment.

Names and descriptions come from the package's tools/list (@codespar/mcp-sicoob@0.1.0-alpha.4). A kind (read, write, delete) is shown only when the package annotates its tools or each tool was verified one by one; neither exists for this server yet.

Compatibility

MCP is a protocol. Any client that speaks it can mount this server.

codespar_discover lists this server's tools, but connecting it needs credentials the provider issues to an operator (a certificate, signed keys or paired headers), which a test key cannot produce.

Protocol

Any MCP client

stdio · streamable-http

Questions

Before you install.

How do I install the Sicoob MCP server?

Run npx -y @codespar/mcp-sicoob@0.1.0-alpha.4 and add the config block above to your MCP client: Claude Code, Cursor, Claude Desktop, VS Code, or any MCP-compatible client. No build step, no SDK required.

What can my agent do with Sicoob?

Sicoob exposes 13 tools for banking. Your agent calls them directly; the full list is above.

How does Sicoob authenticate, and how are credentials stored?

Sicoob uses OAuth2. Self-hosted, you hold the credentials: the server reads them from its environment variables.

How does Sicoob handle upstream API changes?

Every server is versioned independently on npm. The command on this page pins 0.1.0-alpha.4, the version whose tools are listed here; your agent keeps running it until you change the version.

Is Sicoob open source? How do I report a bug?

Yes. Sicoob is MIT-licensed and published on npm as @codespar/mcp-sicoob, source on GitHub (link in the Details panel). Report issues on the package repository; security issues go to security@codespar.dev, and we respond within 24 hours.

Pairs well with