MCP.Market

Bold Co MCP server

by codespar·io.github.codespar/mcp-bold-co·v0.1.0·271 stars
No reviews yet

MCP server for Bold — Colombian acquirer: payment links for cards, PSE and Nequi

B82/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B82/100

full report

Adoption
Growing

271 stars

Reviews

Write one

Nobody has reviewed Bold Co yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Bold Co tools (7, 3 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • create_card_payment_linkwrite action

    Convenience wrapper: create a Bold payment link restricted to cards (payment_methods=["CREDIT_CARD"]).

  • create_payment_linkwrite action

    Create a Bold payment link (POST /online/link/v1). Returns payload.payment_link (LNK_ id) and payload.url to hand to the payer. Supports cards, PSE, Nequi and Botón Bancolombia; restrict with payment_methods.

  • create_pse_payment_linkwrite action

    Convenience wrapper: create a Bold payment link restricted to PSE bank debit (payment_methods=["PSE"]).

  • generate_checkout_signature

    Generate the SHA-256 integrity signature Bold's embedded checkout button requires: sha256(orderId + amount + currency + secretKey). Runs locally; requires BOLD_SECRET_KEY.

  • get_payment_link

    Query a Bold payment link by id (GET /online/link/v1/{payment_link}). Returns status (ACTIVE, PROCESSING, PAID, REJECTED, EXPIRED), amount, and transaction data once paid.

  • list_payment_methods

    List the payment methods enabled for this merchant (GET /online/link/v1/payment_methods).

  • validate_webhook_signature

    Verify the HMAC-SHA256 signature of a Bold webhook notification against BOLD_SECRET_KEY. Pass the raw request body string and the signature header value. Accepts hex or base64 encodings. Runs locally.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan3 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 28 days ago15/15
  • Maintainer identityregistry namespace matches repository owner7/10
Overall 82/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Bold Co compares

Against every graded Finance MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
82/100
higher than 73% of 1,761 Finance servers
Tools
7
the typical Finance server has 8
Tools that change things
43%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
271
more than 95% of 946 Finance servers

What its tools let an agent do: 3 read · 4 create

Install Bold Co in Claude Code, Cursor or VS Code

Runs npx -y @codespar/mcp-bold-co on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-bold-co -- npx -y @codespar/mcp-bold-co
Add to Cursor

What the publisher says

From the Bold Co repository's README, as published. We do not edit it. Read it on GitHub

MCP Dev LATAM 🌎 Every commerce API your AI agent needs to run a business in Latin America. Brazil 🇧🇷 · Mexico 🇲🇽 · Argentina 🇦🇷 · Colombia 🇨🇴 · Chile 🇨🇱 · Peru 🇵🇪 · plus 4 agentic payment protocols. MCP servers for LATAM commerce · live in the official MCP Registry · MIT License Machine-readable catalog: codespar.dev/api/servers Catalog · Quick Start · Agentic Protocols · All Servers · Contribute

The Problem

AI agents can write code, analyze data, and chat. But they can't operate a business — collect payments, issue invoices, ship products, or notify customers. Especially not in Latin America, where every service has its own API, auth pattern, and quirks (mTLS for BACEN Pix v2, JWT-RSA for STP-SPEI, AFIP web services, contract-gated developer portals, and on).

Meanwhile, four agentic payment protocols are shipping in parallel — checkout protocols (Stripe ACP, Google UCP), authorization layers (AP2), and micropayment rails (x402) — and none of them compose cleanly with each other or with the regional rails businesses actually run on.

MCP Dev LATAM bridges both gaps. Traditional LATAM services + the new agentic payment protocols, all accessible through a single MCP interface.

The Solution

Each MCP server in this repo wraps a real provider — payments, fiscal, logistics, messaging, banking, ERP, identity, fraud, crypto, and the agentic protocols — so your agent can operate a complete business workflow.

🛒 Customer places order
  → 💳 Agent charges via Pix (Asaas / Mercado Pago / Zoop)
  → 📄 Agent issues NFe (Nuvem Fiscal / Focus NFe / NFe.io)
  → 📦 Agent generates shipping label (Melhor Envio / Skydropx)
  → 📱 Agent sends tracking via WhatsApp (Z-API / WhatsApp Cloud)
  → 📊 Agent records in ERP (Omie / Bling / Tiny)
  → 🏦 Agent reconciles balance (Stark Bank / Itaú / BTG)

Six systems. Zero human intervention. One agent.

Agentic Payment Protocols

Four servers for the emerging agentic payment stack:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Bold Co: common questions

Is Bold Co MCP server safe?
Mostly: it is graded B (82/100). Read the Bold Co safety report
How do I install Bold Co?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Bold Co need an API key?
Yes. The registry entry asks for BOLD_API_KEY, BOLD_SECRET_KEY.
Is Bold Co maintained?
The last commit was 67 days ago (2026-08-29). The latest release is v0.1.0.
What can I use instead of Bold Co?
Servers from other publishers that do the same job: Fortrip MCP server, three.ws Agent Payments MCP server and Yolfi Payments MCP server.
How does Bold Co compare with other Finance MCP servers?
safety score 82/100 (higher than 73% of 1,761 Finance servers); tools 7 (the typical Finance server has 8); tools that change things 43% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Bold Co

Same job from other publishers: the closest match first, then the best rated.

  • Fortrip
    Search hotels worldwide, compare live room rates, and create booking payment links.
    A
  • three.ws Agent Payments
    Governed x402 payment sessions: pay any endpoint with budget, allowlist & per-tx caps, no key.
    More from nirholas →
    B
  • Yolfi Payments MCP
    Let AI agents add Yolfi crypto checkout, paylinks, webhooks, and status checks.
    A
  • X402 List
    Find and vet x402 payment APIs before your agent pays one: uptime, price, on-chain volume.
    A
  • SatGate – Economic Firewall for AI Agents
    Budget, payment and audit controls for AI agent API calls and MCP tool calls.
    A

More from codespar →