Mcp Bold Co

io.github.codesparPublished by GitHub account codesparv0.1.0Updated Oct 24, 2026

MCP server for Bold — Colombian acquirer: payment links for cards, PSE and Nequi

VerifiedSTDIODesktop onlyFinanceBusiness & Commerce

Overview

AI-generated overview

Local MCP server for Bold, a Colombian acquirer, letting an assistant create and check payment links for cards, PSE, Nequi and Botón Bancolombia.

What you can do
Create payment links for cards, PSE, Nequi or Botón Bancolombia, including links restricted to a single method or a fixed or open amount, and hand the payer the link URL to complete payment. Check a link's status (active, processing, paid, rejected, expired) to confirm payment. List the payment methods enabled for the merchant. Locally compute the SHA-256 checkout integrity signature and verify HMAC signatures on Bold webhooks.
When to use it
Use it when an assistant should take payments through Bold in Colombia, for example generating a payment link in a chat or checking whether a link has been paid, or when you need the checkout signature and webhook validation helpers alongside that flow.
Requirements
Runs locally via npx (Node.js) over stdio, configured in the client's MCP config. Requires a Bold merchant account and the BOLD_API_KEY identity key, sent as the x-api-key header. BOLD_SECRET_KEY is optional and only needed for the local signature and webhook tools. Test mode uses test keys from the Bold dashboard; there is no separate sandbox host.
Before you install
BOLD_API_KEY and BOLD_SECRET_KEY are merchant credentials; keep them out of shared configs and logs. Creating a payment link is a write action against a live merchant account and can lead to real charges, so confirm amounts and methods before calling it. The signature and webhook tools handle secret material locally. The README also advertises a paid managed tier and enterprise offering, which are separate from this package.

Installation

In SourceWeft

  1. Open Mcp Bold Co in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@codespar/mcp-bold-co

MCP server for Bold — Colombian acquirer (bold.co): payment links for cards, PSE, Nequi and Botón Bancolombia, plus the checkout integrity-signature and webhook-validation helpers.

[npm] [License: MIT]

Bold's public integrations API is link-first: create a payment link (fixed or open amount), hand the payer payload.url, then poll the link until it reports PAID. The embedded checkout button flow is secured with a SHA-256 integrity signature and webhooks are HMAC-signed — both covered here as local tools.

Quick Start

Claude Desktop

Add to ~/.config/claude/claude_desktop_config.json:

json
{  "mcpServers": {    "bold-co": {      "command": "npx",      "args": ["-y", "@codespar/mcp-bold-co"],      "env": {        "BOLD_API_KEY": "your-identity-key",        "BOLD_SECRET_KEY": "your-secret-key"      }    }  }}

Claude Code

bash
claude mcp add bold-co --env BOLD_API_KEY=your-identity-key -- npx -y @codespar/mcp-bold-co

Tools (7)

ToolDescription
create_payment_linkCreate a payment link (POST /online/link/v1) — cards, PSE, Nequi, Botón Bancolombia
create_pse_payment_linkConvenience: link restricted to PSE bank debit
create_card_payment_linkConvenience: link restricted to cards
get_payment_linkQuery a link's status: ACTIVE, PROCESSING, PAID, REJECTED, EXPIRED
list_payment_methodsPayment methods enabled for this merchant
generate_checkout_signatureSHA-256 integrity hash for the embedded checkout button (local)
validate_webhook_signatureVerify the HMAC signature on a Bold webhook (local)

Environment

VariableRequiredDescription
BOLD_API_KEYyesIdentity key (llave de identidad), sent as Authorization: x-api-key
BOLD_SECRET_KEYnoSecret key — only for the local signature/webhook tools

Bold has no separate sandbox host; test mode is driven by test keys from the Bold dashboard.

Docs

Enterprise

Need governance, budget limits, and audit trails for agent-driven payments on Bold? CodeSpar Enterprise adds a policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

Source: packages/colombia/bold-co/README.md at commit d0a519a

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts