{"_id":"@codespar/mcp-caixa","_rev":"5-0fa7a31ef7ba29e0c20962da483f479d","name":"@codespar/mcp-caixa","dist-tags":{"latest":"0.2.0-alpha.3","alpha":"0.2.0-alpha.2"},"versions":{"0.1.0-alpha.1":{"name":"@codespar/mcp-caixa","version":"0.1.0-alpha.1","keywords":["mcp","caixa","caixa-economica","banking","pix","boleto","sicob","cobranca","extrato","brazil","public-bank"],"license":"MIT","_id":"@codespar/mcp-caixa@0.1.0-alpha.1","maintainers":[{"name":"codespar-npm","email":"contact@codespar.dev"}],"bin":{"mcp-caixa":"dist/index.js"},"dist":{"shasum":"2e2e5a40b60f9562e4ac93081f771929496802b9","tarball":"https://registry.npmjs.org/@codespar/mcp-caixa/-/mcp-caixa-0.1.0-alpha.1.tgz","fileCount":6,"integrity":"sha512-ee5xEJiUaQGM+8GPJRGyIkhnsi2CJhtxVMt9FUBWvRZsQhOesWCy/daIbMvwzu6Z8Ec68NnCIgVB45gjxzYKug==","signatures":[{"sig":"MEUCIQDSQ2fu5VDQ9hvQUJOgn3AiwbQgFA7XEqsZomyERIQXXwIga06+uBx8zno3iVr77uj4rnRAiD96SWr2+83rdul8aCY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":53629},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","gitHead":"9529bebc044ae16a46a6722419594f660d719c2e","mcpName":"io.github.codespar/mcp-caixa","scripts":{"build":"tsc","start":"node dist/index.js"},"_npmUser":{"name":"codespar-npm","email":"contact@codespar.dev"},"_npmVersion":"11.8.0","description":"MCP server for Caixa Econômica Federal — Brazil's largest state-owned bank. Pix, Cobrança (SICOB boleto), and Extrato via Caixa's Developer Portal APIs (OAuth2 + mTLS).","directories":{},"_nodeVersion":"25.5.0","dependencies":{"@modelcontextprotocol/sdk":"^1.0.0"},"_hasShrinkwrap":false,"devDependencies":{"typescript":"^5.8.0","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp-caixa_0.1.0-alpha.1_1777031869836_0.16593792627056203","host":"s3://npm-registry-packages-npm-production"}},"0.2.0-alpha.1":{"name":"@codespar/mcp-caixa","version":"0.2.0-alpha.1","keywords":["mcp","caixa","caixa-economica","banking","pix","boleto","sicob","cobranca","extrato","brazil","public-bank"],"license":"MIT","_id":"@codespar/mcp-caixa@0.2.0-alpha.1","maintainers":[{"name":"codespar-npm","email":"contact@codespar.dev"}],"bin":{"mcp-caixa":"dist/index.js"},"dist":{"shasum":"744f51cf821318e68e6151e7f0f4c5b8dcf2063f","tarball":"https://registry.npmjs.org/@codespar/mcp-caixa/-/mcp-caixa-0.2.0-alpha.1.tgz","fileCount":6,"integrity":"sha512-2nczPsJ2Pjn7Icll0RfunK4XQUd9Ovv0opjmFivqCK5MIu9oDKS/1GxmyV2R0mNqGZo4+LzFzNs79Ey1bDxBSw==","signatures":[{"sig":"MEUCIQDcVTCTi5pjhiQnJK4mdWUiicIWY4jml6s93EMb6QNsnAIgfMWgdnYd64B/htUNYP3qUVcBDN178Wg3Ow0DFFmfYgY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":95038},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","gitHead":"206367773b96786003af53c16c38c7c3d6f823bd","mcpName":"io.github.codespar/mcp-caixa","scripts":{"build":"tsc","start":"node dist/index.js"},"_npmUser":{"name":"codespar-npm","email":"contact@codespar.dev"},"_npmVersion":"11.8.0","description":"MCP server for Caixa Econômica Federal — Brazil's largest state-owned bank. Pix, Cobrança (SICOB boleto), and Extrato via Caixa's Developer Portal APIs (OAuth2 + mTLS).","directories":{},"_nodeVersion":"25.5.0","dependencies":{"@modelcontextprotocol/sdk":"^1.0.0"},"_hasShrinkwrap":false,"readmeFilename":"README.md","devDependencies":{"typescript":"^5.8.0","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp-caixa_0.2.0-alpha.1_1777069530046_0.1944952365628252","host":"s3://npm-registry-packages-npm-production"}},"0.2.0-alpha.2":{"name":"@codespar/mcp-caixa","version":"0.2.0-alpha.2","keywords":["mcp","caixa","caixa-economica","banking","pix","boleto","sicob","cobranca","extrato","brazil","public-bank"],"license":"MIT","_id":"@codespar/mcp-caixa@0.2.0-alpha.2","maintainers":[{"name":"codespar-npm","email":"contact@codespar.dev"}],"bin":{"mcp-caixa":"dist/index.js"},"dist":{"shasum":"fd329ffef744bc01f61da67918b3f79e391449ae","tarball":"https://registry.npmjs.org/@codespar/mcp-caixa/-/mcp-caixa-0.2.0-alpha.2.tgz","fileCount":6,"integrity":"sha512-uZ881LU6R/+lPI3rO6hZ2tpXe7IUN6yYgQTl7+J+NSU+I9JOYozS1IXWnc5kR27wyLIZ8k3ezssLBKFXsy+9zw==","signatures":[{"sig":"MEUCIQC2s/YX6/xwoQMkkT/yvxFn1OOZ2yDGtJTE7yKr9nDdNgIgck5k9O4vk4iY6CXTxWnoLbFYd4FKTImyygKjLGXJo84=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":96341},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","gitHead":"b8f7e5b70db9046319ed757225e0eae8f2dc4451","mcpName":"io.github.codespar/mcp-caixa","scripts":{"build":"tsc","start":"node dist/index.js"},"_npmUser":{"name":"codespar-npm","email":"contact@codespar.dev"},"_npmVersion":"11.8.0","description":"MCP server for Caixa Econômica Federal — Brazil's largest state-owned bank. Pix, Cobrança (SICOB boleto), and Extrato via Caixa's Developer Portal APIs (OAuth2 + mTLS).","directories":{},"_nodeVersion":"25.5.0","dependencies":{"@modelcontextprotocol/sdk":"^1.0.0"},"_hasShrinkwrap":false,"readmeFilename":"README.md","devDependencies":{"typescript":"^5.8.0","@types/node":"^25.5.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp-caixa_0.2.0-alpha.2_1777122916150_0.807701005957125","host":"s3://npm-registry-packages-npm-production"}},"0.2.0-alpha.3":{"name":"@codespar/mcp-caixa","version":"0.2.0-alpha.3","description":"MCP server for Caixa Econômica Federal — Brazil's largest state-owned bank. Pix, Cobrança (SICOB boleto), and Extrato via Caixa's Developer Portal APIs (OAuth2 + mTLS).","type":"module","main":"./dist/index.js","bin":{"mcp-caixa":"dist/index.js"},"scripts":{"build":"tsc","start":"node dist/index.js"},"dependencies":{"@modelcontextprotocol/sdk":"^1.0.0"},"devDependencies":{"@types/node":"^25.5.0","typescript":"^5.8.0"},"license":"MIT","keywords":["mcp","caixa","caixa-economica","banking","pix","boleto","sicob","cobranca","extrato","brazil","public-bank"],"mcpName":"io.github.codespar/mcp-caixa","_id":"@codespar/mcp-caixa@0.2.0-alpha.3","gitHead":"8e115a5cb8aed75e812af698b03aa996ccd8d7c1","types":"./dist/index.d.ts","_nodeVersion":"22.22.3","_npmVersion":"10.9.8","dist":{"integrity":"sha512-YjzDUX6e4XtCRN4A44lDRnkAMt9gKxshBDYnKICP0OQU251Ms2rvs/Cg+sWhS3RlAgddcBOMQiCruKEJhcb1ig==","shasum":"9ae169a9f72cae7ff85248bf036e5c061c704f01","tarball":"https://registry.npmjs.org/@codespar/mcp-caixa/-/mcp-caixa-0.2.0-alpha.3.tgz","fileCount":6,"unpackedSize":97765,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQCoIFK4WWSfLD2Lk/QsDKyFmsM42cXp29i1s2J2iUIGnQIgFJKXcjHqckfG8sc5zZBIl7FyZjzXe57RFhK0XkxSAd8="}]},"_npmUser":{"name":"codespar-npm","email":"fabiano@codespar.dev"},"directories":{},"maintainers":[{"name":"codespar-npm","email":"fabiano@codespar.dev"},{"name":"dangazineu","email":"daniel.gazineu@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/mcp-caixa_0.2.0-alpha.3_1782158058464_0.10453620723216073"},"_hasShrinkwrap":false}},"time":{"created":"2026-04-24T11:57:49.737Z","modified":"2026-06-22T19:54:18.781Z","0.1.0-alpha.1":"2026-04-24T11:57:49.985Z","0.2.0-alpha.1":"2026-04-24T22:25:30.198Z","0.2.0-alpha.2":"2026-04-25T13:15:16.296Z","0.2.0-alpha.3":"2026-06-22T19:54:18.625Z"},"license":"MIT","keywords":["mcp","caixa","caixa-economica","banking","pix","boleto","sicob","cobranca","extrato","brazil","public-bank"],"description":"MCP server for Caixa Econômica Federal — Brazil's largest state-owned bank. Pix, Cobrança (SICOB boleto), and Extrato via Caixa's Developer Portal APIs (OAuth2 + mTLS).","maintainers":[{"name":"codespar-npm","email":"fabiano@codespar.dev"},{"name":"dangazineu","email":"daniel.gazineu@gmail.com"}],"readme":"# @codespar/mcp-caixa\n\nMCP server for [Caixa Econômica Federal](https://developers.caixa) — Brazil's largest state-owned bank.\n\nCaixa occupies a segment none of the private tier-1 banks (Itaú, Bradesco, Santander, BB) can cover: it runs federal social programs (PIS/PASEP, FGTS, Bolsa Família / Auxílio Brasil), operates the national lottery (Loterias Caixa), and is the preferred bank for merchants that value state-bank credibility or serve beneficiaries of federal transfer programs. For the payment surface that matters to merchants — Pix, boleto (Cobrança / SICOB), and extrato — Caixa follows the BACEN Pix v2 standard shared across every tier-1 bank, so the integration shape mirrors its private-sector peers.\n\n## Status: alpha (`0.1.0-alpha.1`)\n\nCaixa's Developer Portal is **contract-gated**, and as a state-owned institution the onboarding is additionally bureaucratic: vendor registration and credenciamento are required on top of the commercial merchant contract. Full OpenAPI specs for Pix, Cobrança (SICOB), and Extrato are only visible to onboarded merchants. The endpoint paths in this server are best-guesses based on (a) BACEN Pix v2 standard paths, (b) Caixa's public SICOB / Cobrança integration guides, and (c) conventions shared with Itaú / Bradesco / BB. Every unverified path is flagged `TODO(verify)` in the source.\n\nPin to exact versions during `0.1.x`; paths will be corrected to match the portal spec once an onboarded merchant can validate.\n\n## Tools (23)\n\n| Tool | Purpose |\n|---|---|\n| `get_oauth_token` | Mint or return a cached OAuth2 client_credentials bearer token for the Caixa Developer Portal. |\n| `send_pix` | Initiate an outbound Pix payment from the merchant's Caixa account. |\n| `create_pix_qr` | Create a dynamic Pix charge with QR code (cob). |\n| `get_pix` | Retrieve a Pix transaction by its BCB endToEndId (E<ispb><yyyymmddhhmm><sequence>). |\n| `resolve_dict_key` | Resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix. |\n| `refund_pix` | Refund (devolução) a previously received Pix. |\n| `create_boleto` | Issue a boleto via Caixa Cobrança (SICOB). |\n| `get_boleto` | Retrieve a boleto by its Caixa identifier (id or nosso_numero). |\n| `cancel_boleto` | Cancel (baixa) an outstanding boleto before payment. |\n| `get_statement` | Retrieve account statement transactions for a given period. |\n| `get_pix_charge` | Retrieve a Pix immediate charge (cob) by its BCB txid. |\n| `update_pix_charge` | Update (PATCH) a Pix immediate charge (cob) — e.g. |\n| `list_pix_charges` | List Pix immediate charges (cob) filtered by date range and optional status / CPF / CNPJ. |\n| `create_pix_due_charge` | Create a Pix due-date charge (cobv) with mandatory payer data and due date. |\n| `get_pix_due_charge` | Retrieve a Pix due-date charge (cobv) by its BCB txid. |\n| `list_pix_received` | List received Pix transactions (pix recebidos) by date range. |\n| `register_dict_key` | Register a DICT key (CPF, CNPJ, email, phone, or EVP) to an account owned by the merchant. |\n| `delete_dict_key` | Delete (unregister) a DICT key owned by the merchant. |\n| `download_boleto_pdf` | Fetch the rendered boleto PDF for an issued boleto. |\n| `get_account_balance` | Return the current balance for a Caixa merchant account, including available, blocked, and overdraft limit... |\n| `transfer_ted` | Initiate an outbound TED transfer from a Caixa merchant account to an external bank account. |\n| `consult_fgts` | Query FGTS balance / extrato. |\n| `pay_tribute` | Pay a federal tribute (DARF, GPS, GRU) or other guia de arrecadação via Caixa. |\n\n## Why Caixa (vs. a private bank)\n\n- **Social-program beneficiaries.** If a meaningful slice of your customer base receives federal transfers, Caixa is where the money lands first.\n- **State-bank credibility.** Government-adjacent merchants, concessionárias, and regulated verticals often prefer — or are required — to hold accounts at a state-owned bank.\n- **Lottery / Loterias Caixa corridor.** Retailers in the lotérica network settle through Caixa.\n- **Same Pix / boleto rails as the private banks.** No technical tradeoff — the BACEN Pix v2 standard is identical.\n\n## Install\n\n```bash\nnpm install @codespar/mcp-caixa@0.1.0-alpha.1\n```\n\n## Environment\n\n```bash\nCAIXA_CLIENT_ID=\"...\"       # OAuth client_id from Caixa's Developer Portal\nCAIXA_CLIENT_SECRET=\"...\"   # OAuth client_secret\nCAIXA_CERT_PATH=\"/abs/path/to/client.crt\"   # mTLS client certificate\nCAIXA_KEY_PATH=\"/abs/path/to/client.key\"    # mTLS private key\nCAIXA_ENV=\"sandbox\"                          # or \"production\" (default: sandbox)\n```\n\n## Authentication\n\nTwo factors are **both** required on every call:\n\n1. **OAuth2 `client_credentials`** — the server calls the token endpoint, caches the bearer until ~60s before expiry, and attaches `Authorization: Bearer <token>` to downstream calls.\n2. **mTLS** — BACEN mandates mutual TLS for Pix v2, and Caixa enforces it across product families. The server loads the client certificate and private key from the paths you set, builds a Node `https.Agent`, and routes every request through it.\n\nYou obtain the cert + key bundle from the Caixa Developer Portal after your merchant contract and credenciamento are approved. They are distinct from the OAuth credentials.\n\n## Run\n\n```bash\n# stdio (default)\nnpx @codespar/mcp-caixa\n\n# HTTP transport\nMCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-caixa\n```\n\n## Caveats\n\n- **Paths are unverified.** See the `TODO(verify)` markers in `src/index.ts`. Onboarded merchants should validate against their portal-issued OpenAPI spec and open a PR.\n- **Sandbox host is a guess.** Caixa issues a homologação subdomain per merchant; override by editing `BASE_URL` if your provisioned sandbox URL differs.\n- **SICOB legacy.** Older boleto contracts may still route through the legacy SIGCB surface. The `create_boleto` / `get_boleto` / `cancel_boleto` tools target Cobrança v2; if your contract predates it, paths will differ.\n- **Onboarding timeline.** Factor weeks, not days. State-owned vendor registration is the critical path — start it before you start coding.\n\n## Enterprise\n\nNeed governance, budget limits, and audit trails for agent payments? [CodeSpar Enterprise](https://codespar.dev/enterprise) adds policy engine, payment routing, and compliance templates on top of these MCP servers.\n\n## License\n\nMIT\n","readmeFilename":"README.md"}