Wompi

v0.2.0API Key

Colombian payment gateway by Bancolombia: cards, PSE bank transfers, and Nequi wallet. Your agent accepts COP with local checkout.

22 tools3 env vars🇨🇴 Colombiastable on npm

Install

terminal

$ npm install @codespar/mcp-wompi

Quickstart

Add this entry to your claude_desktop_config.json (or any MCP-compatible client config).

claude_desktop_config.json

{
  "mcpServers": {
    "wompi": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-wompi"
      ],
      "env": {
        "WOMPI_PUBLIC_KEY": "<your_wompi_public_key>",
        "WOMPI_PRIVATE_KEY": "<your_wompi_private_key>"
      }
    }
  }
}

After restart, your agent can call any of the 22 tools below — try create_transaction first.

Environment variables · 3

Required to authenticate the server. Stored encrypted when using CodeSpar managed hosting.

WOMPI_PUBLIC_KEY

required

Public key for Wompi

WOMPI_PRIVATE_KEY

requiredsecret

Private key for Wompi

WOMPI_EVENTS_SECRET

optionalsecret

Events/webhook secret for signature validation

Available tools · 22

Each tool is independent — your agent loads only what it needs to reduce context and response time.

WRITEcreate_transaction

Create a payment transaction

READget_transaction

Get transaction details by ID

READlist_transactions

List transactions

READsearch_transaction_by_reference

Find transaction(s) by merchant reference

DELETEvoid_transaction

Void a transaction

WRITEcreate_payment_link

Create a payment link

WRITEget_payment_link

Get payment link details

WRITEupdate_payment_link

Update a payment link

Compatible frameworks

MCP is a protocol — any framework that speaks it can mount this server.

Claude Agent SDKAnthropic

OpenAI AgentsOpenAI

Vercel AI SDKVercel

LangChainLangChain

LlamaIndexLlamaIndex

CrewAICrewAI

MastraMastra

Any MCP clientProtocol

Frequently asked questions

All credentials are encrypted at rest in an isolated vault scoped per organization. OAuth2 tokens are automatically refreshed before expiry. Your agent code never sees raw secrets — it receives scoped, short-lived session tokens.