{"_id":"@codespar/mcp-pomelo","name":"@codespar/mcp-pomelo","dist-tags":{"latest":"0.1.0"},"versions":{"0.1.0":{"name":"@codespar/mcp-pomelo","version":"0.1.0","description":"MCP server for Pomelo — pan-LATAM card issuing as a service: users, virtual/physical cards, lifecycle, transactions","type":"module","main":"./dist/index.js","bin":{"mcp-pomelo":"dist/index.js"},"scripts":{"build":"tsc","start":"node dist/index.js"},"dependencies":{"@modelcontextprotocol/sdk":"^1.0.0"},"devDependencies":{"@types/node":"^22.0.0","typescript":"^5.8.0"},"license":"MIT","keywords":["mcp","pomelo","card-issuing","cards","visa","mastercard","latam","argentina","brazil","mexico","colombia"],"mcpName":"io.github.codespar/mcp-pomelo","_id":"@codespar/mcp-pomelo@0.1.0","gitHead":"0cf000f9cad29acc97dc1e29789d180431c6fe12","types":"./dist/index.d.ts","_nodeVersion":"22.23.1","_npmVersion":"10.9.8","dist":{"integrity":"sha512-FJ4R+MlMU9/DAi+8ewC3yQjcB/wAt631MVkFAYyKzr6D3J+1vLxInL9BmsUd5RRE4uT+1UZpYOI0EDYYWGkhVw==","shasum":"8e29bce64081879f565c5fe4f7334562c3798e89","tarball":"https://registry.npmjs.org/@codespar/mcp-pomelo/-/mcp-pomelo-0.1.0.tgz","fileCount":4,"unpackedSize":23614,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEYCIQDlaKqbYfWkdquvf1b8632O5PU5NRVHnk2edPUnisuDggIhAPS/eVx1MExDRbj6T7m00Hkhk3AwjGRC2vqihfW7J3Zq"}]},"_npmUser":{"name":"codespar-npm","email":"fabiano@codespar.dev"},"directories":{},"maintainers":[{"name":"codespar-npm","email":"fabiano@codespar.dev"},{"name":"dangazineu","email":"daniel.gazineu@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/mcp-pomelo_0.1.0_1783129569903_0.4599847446984602"},"_hasShrinkwrap":false}},"time":{"created":"2026-07-04T01:46:09.652Z","0.1.0":"2026-07-04T01:46:10.036Z","modified":"2026-07-04T01:46:10.330Z"},"maintainers":[{"name":"codespar-npm","email":"fabiano@codespar.dev"},{"name":"dangazineu","email":"daniel.gazineu@gmail.com"}],"description":"MCP server for Pomelo — pan-LATAM card issuing as a service: users, virtual/physical cards, lifecycle, transactions","keywords":["mcp","pomelo","card-issuing","cards","visa","mastercard","latam","argentina","brazil","mexico","colombia"],"license":"MIT","readme":"# @codespar/mcp-pomelo\n\n> MCP server for **Pomelo** — pan-LATAM card issuing as a service: card-holder users, virtual and physical Visa/Mastercard issuance, lifecycle management, and the transactions feed. Argentina, Brazil, Mexico, Colombia, Peru, Chile.\n\n[![npm](https://img.shields.io/npm/v/@codespar/mcp-pomelo)](https://www.npmjs.com/package/@codespar/mcp-pomelo)\n[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)\n\n## Quick Start\n\n### Claude Desktop\n\nAdd to `~/.config/claude/claude_desktop_config.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"pomelo\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@codespar/mcp-pomelo\"],\n      \"env\": {\n        \"POMELO_CLIENT_ID\": \"your-client-id\",\n        \"POMELO_CLIENT_SECRET\": \"your-client-secret\",\n        \"POMELO_ENV\": \"sandbox\"\n      }\n    }\n  }\n}\n```\n\n### Claude Code\n\n```bash\nclaude mcp add pomelo -- npx @codespar/mcp-pomelo\n```\n\n### Cursor / VS Code\n\nAdd to `.cursor/mcp.json` or `.vscode/mcp.json`:\n\n```json\n{\n  \"servers\": {\n    \"pomelo\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@codespar/mcp-pomelo\"],\n      \"env\": {\n        \"POMELO_CLIENT_ID\": \"your-client-id\",\n        \"POMELO_CLIENT_SECRET\": \"your-client-secret\",\n        \"POMELO_ENV\": \"sandbox\"\n      }\n    }\n  }\n}\n```\n\n## Environment\n\n| Variable | Required | Description |\n|---|---|---|\n| `POMELO_CLIENT_ID` | yes | OAuth2 client id |\n| `POMELO_CLIENT_SECRET` | yes | OAuth2 client secret |\n| `POMELO_ENV` | no | `sandbox` (default) or `production` |\n| `POMELO_BASE_URL` | no | API base override (defaults per env) |\n| `POMELO_AUTH_URL` | no | Auth base override (defaults per env) |\n| `POMELO_AUDIENCE` | no | OAuth2 audience override (defaults per env) |\n\nAuthentication is OAuth2 client-credentials; the server exchanges and caches the Bearer token automatically.\n\n## Tools (9)\n\n| Tool | What it does |\n|---|---|\n| `create_user` | Create a card-holder identity (`POST /users/v1`) |\n| `get_user` | Fetch a user by id |\n| `update_user` | Patch user fields (status, contact, address) |\n| `create_card` | Issue a `VIRTUAL` or `PHYSICAL` card (`POST /cards/v1`) |\n| `get_card` | Fetch a card (masked PAN, status, program) |\n| `list_cards` | List cards, filterable by user/status |\n| `update_card_status` | `ACTIVE` / `BLOCKED` / `DISABLED` lifecycle changes |\n| `list_transactions` | Search the card-transactions feed |\n| `get_transaction` | Fetch one transaction by id |\n\nMutating calls carry an `x-idempotency-key` (auto-generated, overridable per call via `idempotency_key`).\n\n## Example\n\n> \"Issue a virtual card for the new contractor and freeze the old one.\"\n\nThe agent calls `create_user` (if needed) → `create_card` (`card_type: \"VIRTUAL\"`) → `update_card_status` (`status: \"BLOCKED\"`, `status_reason: \"CLIENT_INTERNAL_REASON\"`).\n\n## Notes\n\n- Card credentials (full PAN/CVV) are never returned by these tools; Pomelo exposes sensitive data only through its PCI-scoped widgets.\n- Authorization decisioning (approving each swipe in real time) is a webhook you host, not an API call — pair this server with CodeSpar's governed authorizer if you want mandate checks per transaction.\n\n## Authentication\n\nOAuth2 client-credentials: the server exchanges `POMELO_CLIENT_ID` / `POMELO_CLIENT_SECRET` for a Bearer token at `{AUTH_URL}/oauth/token` and caches it until shortly before expiry. Mutating calls carry an `x-idempotency-key`.\n\n## Enterprise\n\nNeed governance, budget limits, and audit trails for agent-driven card issuing on Pomelo? [CodeSpar Enterprise](https://codespar.dev/enterprise) adds a policy engine, payment routing, and compliance templates on top of these MCP servers.\n\n## License\n\nMIT\n","readmeFilename":"README.md","_rev":"1-abc4f90dfdfe078a7f2700e8ebf82f5a"}