Openfinance Br Mcp

io.github.brunoviccoPublished by GitHub account brunoviccov0.2.0Updated Oct 27, 2026

Secure Open Finance Brasil MCP server with typed tools and a credential-free mock mode

The publisher's own server: OpenFinance — Easy Trading: Crypto, Stocks, Perps & Prediction Markets

VerifiedSTDIODesktop onlyFinanceDeveloper Tools

Overview

AI-generated overview

Experimental Open Finance Brasil MCP server exposing typed tools for accounts, cards, investments, PIX and consents, with a credential-free mock mode.

What you can do
  • List accounts, read balances and list transactions, optionally categorized by Claude
  • List credit cards and their bills
  • List investments, funds, variable income and treasury titles
  • List PIX keys and initiate PIX payments
  • Start, complete, check and revoke data and payment consents
  • Expose a banks resource, a monthly spending analysis prompt, and optional URL elicitation for bank authorization
When to use it
Useful for trying Open Finance Brasil style banking queries, such as spending summaries by category, against simulated data for ten Brazilian banks without credentials. Real institution access is experimental and unvalidated, so treat it as a sandbox or prototype rather than a production finance tool.
Requirements
Local Python 3.12 or 3.13 with uv, run via uvx or from source. Mock mode needs no credentials. Sandbox or production needs CLIENT_ID, PRIVATE_KEY_PATH, PRIVATE_KEY_KID and, for production, MTLS_CERT_PATH and MTLS_KEY_PATH. ANTHROPIC_API_KEY is needed only for categorize=true; REDIS_URL is optional for shared state.
Before you install
Non-mock mode requires an RSA private key and mTLS key material on disk, plus a registered client ID; keep these out of shared configs. PIX payment and consent tools can initiate real payments and grant or revoke access when pointed at production. Transaction data and categorization prompts may be sent to Anthropic when categorize=true. The project states it is not certified or validated against real institutions.

Installation

In SourceWeft

  1. Open Openfinance Br Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

English · Português

openfinance-br-mcp

Experimental MCP server for Open Finance Brasil, with a complete mock environment and evolving FAPI-BR integration. It is not certified or validated against real institutions; see VALIDATION.md before using it outside environment=mock.

[Python 3.12] [uv] [Code style: black] [Ruff]

What it is

An MCP Server that abstracts away the complexity of Open Finance Brasil (FAPI 1.0 Advanced, OAuth2, consent, mTLS) and exposes simple tools to Claude:

Claude → "how much did I spend on food in March?"Claude uses list_transactions(bank=nubank, categorize=true, date_from=2024-03-01)Claude → "You spent R$ 847.30 on food in March..."

Supported banks

The mock environment simulates Nubank, Sicoob, Caixa, Banco do Brasil, Bradesco, Itaú, Santander, XP, PicPay, and BTG Pactual with in-memory data and no network access. These are simulations, not certified integrations.

Real adapters and the Payments API journey are experimental and unvalidated. Payments use the v5 payments-consents/payments-pix Directory families, dedicated per-consent tokens, verified response JWS, PAR/JAR, consent-payload binding, and persistent idempotency. list_pix_keys is a demonstration extension rather than a standardized Open Finance Brasil endpoint. See VALIDATION.md for the exact scope.

Available MCP tools

The server exposes 18 tools grouped by journey:

  • Accounts: list_accounts, get_balance, list_transactions
  • Cards: list_credit_cards, get_credit_card_bills
  • Investments: list_investments, list_funds, list_variable_incomes, list_treasure_titles
  • PIX: list_pix_keys, initiate_pix
  • Data consent: start_consent, complete_consent, check_consent_status, revoke_consent
  • Payment consent: start_payment_consent, complete_payment_consent, check_payment_consent_status

It also exposes the openfinance://banks/ resource, the analyze_monthly_spending prompt, and optional URL elicitation when starting an authorization flow.

Quick start

Prerequisites

  • Python 3.12 or 3.13
  • uv installed
bash
# Run the published release in credential-free mock modeuvx --from openfinance-br-mcp==0.2.0 openfinance-mcp

From source

bash
git clone https://github.com/brunovicco/openfinance-br-mcp.gitcd openfinance-br-mcp
# Optional: needed only for sandbox/production or DSPy categorizationcp .env.example .env
# Install dependenciesuv sync
# Run the serveruv run openfinance-mcp

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

json
{  "mcpServers": {    "openfinance-br": {      "command": "uvx",      "args": ["--from", "openfinance-br-mcp==0.2.0", "openfinance-mcp"]    }  }}

Development

bash
# Install with dev-dependenciesuv sync
# Run the testsuv run pytest tests/ -v
# Lint and formattinguv run ruff check src/ tests/uv run black src/ tests/
# Type checkuv run mypy src/

Containers and Kubernetes

bash
docker compose up openfinance-mcpdocker compose --profile test up

The k8s/ directory contains a two-replica Streamable HTTP example with Redis-backed state. Replace every credential, signing-key, OAuth issuer, resource-server, and domain placeholder before applying it. The server fails closed when HTTP is exposed outside loopback without MCP client OAuth.

Architecture

Claude (MCP Client)        │ stdio or streamable-http        ▼openfinance-br-mcp (MCP Server)  ├── Auth + Consent  (FAPI-BR 2.2.0: private_key_jwt, PAR/JAR, PKCE, mTLS)  ├── MCP Primitives  (18 tools + 1 resource + 1 prompt)  │   ├── Pydantic v2 input/output schemas  │   ├── Optional URL elicitation for bank authorization  │   └── Categorizer (DSPy + Claude for transaction classification)  ├── Bank Adapters   (10 banks - extensible)  └── Directory Client (resolves real bank endpoints from the BCB                         Directory of Participants)        │ HTTPS/mTLS        ▼Open Finance BR (BCB) - Directory of Participants        │        ▼  Nubank · Sicoob · Caixa · + 100 participating institutions

Environment variables

VariableRequiredDescription
ENVIRONMENT❌mock (default, no credentials needed), sandbox, or production
CLIENT_ID⚠️ non-mockClient ID registered with the institution
PRIVATE_KEY_PATH⚠️ non-mockRSA private key for private_key_jwt/JAR signing
PRIVATE_KEY_KID⚠️ non-mockkid matching the registered client JWKS
MTLS_CERT_PATH⚠️ prodPath to the mTLS certificate
MTLS_KEY_PATH⚠️ prodmTLS private key
ANTHROPIC_API_KEY⚠️ DSPyRequired for categorize=true
REDIS_URL❌Shares TokenStore/ConsentManager state across replicas
MCP_TRANSPORT❌stdio (default) or streamable-http
MCP_HTTP_ALLOWED_ORIGINS⚠️ remote HTTPRequired allowlist for any non-loopback bind
LANGFUSE_OTLP_ENDPOINT❌Enables tracing to Langfuse (with LANGFUSE_PUBLIC_KEY/LANGFUSE_SECRET_KEY)
LOG_LEVEL❌INFO, DEBUG, WARNING (default: INFO)
LOG_FORMAT❌json or console (default: json)

See .env.example for the full list.

Documentation

  • Authorization - the two token universes and why they can never cross
  • Contributing - dev setup, CI checks, and adding an adapter
  • Security - scope, disclaimer, and vulnerability reporting
  • Sources - specifications and RFCs followed by the implementation
  • Validation - what has and has not been validated
  • Changelog - release history
  • Releasing - maintainer release procedure

License

MIT

Source: README.md at commit 0b42e27

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.2.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Openfinance integrations

OpenFinance — Easy Trading: Crypto, Stocks, Perps & Prediction Markets

tech.openfinanceOfficial publisher

OpenFinance — Easy Trading: Crypto, Stocks, Perps & Prediction Markets's hosted MCP server, published by openfinance.tech; credential required; Streamable HTTP.

Streamable HTTPWeb executableAuth
FinanceCredential requiredOct 24, 2026

Openfinance

Published by GitHub account Openfinanceorg

Connects an assistant to your OpenFinance financial accounts so it can view balances, search transactions and surface spending insights.

STDIODesktop only
FinanceNot validated yetOct 24, 2026