{"name":"io.github.codespar/mcp-itau","slug":"codespar-mcp-itau","title":null,"description":"MCP server for Itaú Unibanco — Pix, Cobrança (boleto), Arrecadação, Extrato (OAuth2 + mTLS)","url":"https://mcp.market/server/codespar-mcp-itau","rating":null,"grade":"B","score":82,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":46,"stars":271,"forks":50,"downloads_week":35,"last_push_at":"2026-08-29T02:02:48.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/codespar/mcp-dev-latam","website":null,"version":"0.2.0-alpha.3","remotes":[],"packages":[{"registryType":"npm","identifier":"@codespar/mcp-itau","version":"0.2.0-alpha.3","transport":{"type":"stdio"},"environmentVariables":[{"description":"Itaú OAuth client_id issued via the Developer Portal after contract onboarding.","isRequired":true,"format":"string","name":"ITAU_CLIENT_ID"},{"description":"Itaú OAuth client_secret.","isRequired":true,"format":"string","isSecret":true,"name":"ITAU_CLIENT_SECRET"},{"description":"Absolute path to the mTLS client certificate (.crt or .pem). BACEN mandates mTLS for Pix v2.","isRequired":true,"format":"string","name":"ITAU_CERT_PATH"},{"description":"Absolute path to the mTLS private key (.key or .pem).","isRequired":true,"format":"string","isSecret":true,"name":"ITAU_KEY_PATH"},{"description":"Environment: 'sandbox' or 'production'. Defaults to 'sandbox'.","format":"string","name":"ITAU_ENV"}]}],"tools":[{"name":"arrecadacao_pay","description":"Pay a utility, tax, or concessionária bill via Itaú Arrecadação. Works with barcode (código de barras) or linha digitável.","write_action":true,"price_micros":0,"input_schema":null},{"name":"cancel_boleto","description":"Cancel (baixa) an outstanding boleto before payment.","write_action":true,"price_micros":0,"input_schema":null},{"name":"create_boleto","description":"Issue a boleto via Itaú Cobrança. Returns nosso_numero, linha_digitável, barcode, and PDF URL.","write_action":true,"price_micros":0,"input_schema":null},{"name":"create_pix_cobv","description":"Create a Pix charge with due date (cobv) — used for boleto-like Pix where the payer can pay at or after a due date with optional fine/interest. Returns txid, copy-paste EMV payload, and location URL.","write_action":true,"price_micros":0,"input_schema":null},{"name":"create_pix_qr","description":"Create a dynamic Pix charge with QR code (cob). Returns the txid, copy-paste EMV payload, and location URL.","write_action":true,"price_micros":0,"input_schema":null},{"name":"delete_pix_key","description":"Delete a DICT key owned by the merchant. Irreversible — the key becomes available for re-registration by any PSP after BCB lockout window.","write_action":true,"price_micros":0,"input_schema":null},{"name":"get_boleto","description":"Retrieve a boleto by its Itaú identifier (id or nosso_numero).","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_boleto_pdf","description":"Download the PDF of an issued boleto. Returns the document as base64 (content-type application/pdf).","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_oauth_token","description":"Mint or return a cached OAuth2 client_credentials bearer token for the Itaú Developer Portal. Exposed so agents can inspect token freshness; normal tool calls obtain tokens implicitly.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_pix","description":"Retrieve a Pix transaction by its BCB endToEndId (E<ispb><yyyymmddhhmm><sequence>).","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_statement","description":"Retrieve account statement transactions for a given period. Paginated.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_tariffs","description":"Query the tariff schedule applicable to the merchant's active contracts (Pix per-transaction, boleto registration, TED, arrecadação, etc.).","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_dda_bills","description":"List bills registered for the merchant under the DDA (Débito Direto Autorizado) enrolment. Returns pending boletos/concessionária bills the merchant has opted in to.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_pix_charges","description":"List immediate Pix charges (cob) registered by the merchant within a date range. Paginated per BACEN Pix v2.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_pix_keys","description":"List DICT keys currently registered to the merchant's Itaú accounts.","write_action":false,"price_micros":0,"input_schema":null},{"name":"refund_pix","description":"Refund (devolução) a previously received Pix. Must reference the original endToEndId and a merchant-side refund id.","write_action":true,"price_micros":0,"input_schema":null},{"name":"register_pix_key","description":"Register a DICT key (CPF, CNPJ, email, phone, or EVP) on an Itaú account owned by the merchant. Subject to BCB validation flows (e.g. email/SMS confirmation for email/phone keys).","write_action":false,"price_micros":0,"input_schema":null},{"name":"resolve_dict_key","description":"Resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix. Subject to BCB rate limits per consenting payer.","write_action":false,"price_micros":0,"input_schema":null},{"name":"schedule_payment","description":"Schedule a future-dated payment (Pix, boleto, arrecadação, or TED). Itaú executes the debit on the scheduled date at D+0 cut-off.","write_action":false,"price_micros":0,"input_schema":null},{"name":"send_pix","description":"Initiate an outbound Pix payment from the merchant's Itaú account. Amount in BRL major units (e.g. '10.50').","write_action":true,"price_micros":0,"input_schema":null},{"name":"send_ted","description":"Send a TED transfer to an account at another bank. Same-day settlement within banking hours; otherwise queued.","write_action":true,"price_micros":0,"input_schema":null},{"name":"transfer_between_accounts","description":"TAA — transfer between two Itaú accounts (owned by the merchant or a counterparty). Instant settlement, no BCB fee.","write_action":true,"price_micros":0,"input_schema":null}],"scan":{"score":82,"grade":"B","scanned_at":"2026-09-26T21:18:55.393Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-26T21:18:55.354Z","components":{"code":{"score":25,"max":25,"notes":["5 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":15,"max":15,"notes":["last push 29 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"@codespar/mcp-itau","version":"0.2.0-alpha.3","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":1,"publishedAt":"2026-06-22T19:54:33.811Z","weeklyDownloads":35}],"repo":{"found":true,"owner":"codespar","repo":"mcp-dev-latam","archived":false,"pushedAt":"2026-08-29T02:02:48Z","stars":271,"forks":50,"openIssues":10,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/269058982?v=4","ownerCreatedAt":"2026-03-18T00:40:56Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/269058982?v=4&s=128","source":"github"},"presence":{"stars":271,"forks":50,"downloadsWeek":35,"license":"MIT","lastPushAt":"2026-08-29T02:02:48.000Z","score":46}}}},"grade_history":[],"reviews":[]}