Mcp Bradesco

io.github.codesparPublished by GitHub account codesparv0.2.0-alpha.3Updated Oct 24, 2026

MCP server for Bradesco — Pix, Cobrança (boleto), Arrecadação, Extrato (OAuth2 + mTLS)

VerifiedSTDIODesktop onlyFinanceBusiness & Commerce

Overview

AI-generated overview

Alpha MCP server for Bradesco banking APIs, letting an assistant send Pix, issue boletos, pay bills and taxes, and read balances and statements.

What you can do
  • Mint and cache OAuth2 bearer tokens for the Bradesco Developer Portal
  • Send, receive-list, look up and refund Pix, create Pix QR charges and due charges, and register, resolve or delete DICT keys
  • Issue, list, retrieve, cancel and download PDFs of boletos
  • Pay utility, tax and concessionária bills, including DARF and GRU
  • Read account balance and statement transactions, and execute TED or intra-bank transfers
When to use it
For merchants that already hold a Bradesco contract and want an assistant to drive Pix, boleto, arrecadação and cash-management operations directly instead of through a PSP. Best tried in sandbox first, given the alpha status.
Requirements
Runs locally as an npm package (Node.js) over stdio, or over HTTP when MCP_HTTP and MCP_PORT are set. Needs a Bradesco Developer Portal contract with OAuth credentials (BRADESCO_CLIENT_ID, BRADESCO_CLIENT_SECRET) plus an mTLS certificate and private key from the portal (BRADESCO_CERT_PATH, BRADESCO_KEY_PATH). BRADESCO_ENV selects sandbox or production and defaults to sandbox.
Before you install
It moves real money: sending Pix, TED transfers, bill and tax payments, refunds, boleto cancellation and DICT key changes all act on a live account. It requires a private key path (BRADESCO_KEY_PATH) and an OAuth client secret, so protect those files and variables. The project is alpha: endpoint paths and base URLs are unverified best guesses, so validate against your portal-issued OpenAPI spec before using production.

Installation

In SourceWeft

  1. Open Mcp Bradesco in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@codespar/mcp-bradesco

MCP server for Bradesco — Brazil's 2nd largest private bank (after Itaú).

Together with @codespar/mcp-itau, @codespar/mcp-banco-inter, and @codespar/mcp-stark-bank, this covers the major BR private-bank API landscape. Merchants with meaningful Pix, boleto, and cash-management volume integrate directly with Bradesco instead of going through a PSP.

Status: alpha (0.1.0-alpha.1)

Bradesco's Developer Portal is contract-gated — the full OpenAPI specs for Pix, Cobrança, Arrecadação, and Extrato are only visible to onboarded merchants. The endpoint paths in this server are best-guesses based on (a) BACEN Pix v2 standard paths, (b) Bradesco's public integration guides, and (c) conventions shared across Itaú / Santander / BB. Every unverified path is flagged TODO(verify) in the source.

Pin to exact versions during 0.1.x; paths will be corrected to match the portal spec once an onboarded merchant can validate.

Tools (22)

ToolPurpose
get_oauth_tokenMint or return a cached OAuth2 client_credentials bearer token for the Bradesco Developer Portal.
send_pixInitiate an outbound Pix payment from the merchant's Bradesco account.
create_pix_qrCreate a dynamic Pix charge with QR code (cob).
get_pixRetrieve a Pix transaction by its BCB endToEndId (E).
resolve_dict_keyResolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix.
refund_pixRefund (devolução) a previously received Pix.
create_boletoIssue a boleto via Bradesco Cobrança.
get_boletoRetrieve a boleto by its Bradesco identifier (id or nosso_numero).
cancel_boletoCancel (baixa) an outstanding boleto before payment.
get_statementRetrieve account statement transactions for a given period.
arrecadacao_payPay a utility, tax, or concessionária bill via Bradesco Arrecadação.
list_pix_receivedList Pix transactions received by the merchant during a period.
create_pix_due_chargeCreate a Pix charge with a due date (cobv) — commonly used for installments and scheduled invoices.
get_pix_due_chargeRetrieve a Pix due charge (cobv) by txid.
update_pix_due_chargePatch a Pix due charge (cobv) — revise amount, due date, discount, or debtor before payment.
register_dict_keyRegister a DICT key (CPF, CNPJ, email, phone, or EVP) pointing to a merchant account at Bradesco.
delete_dict_keyDelete (unlink) a DICT key that points to a merchant account at Bradesco.
list_boletosList boletos issued by the merchant filtered by status and issue/due period.
get_boleto_pdfDownload the boleto PDF as base64.
get_account_balanceRetrieve the current available balance (saldo disponível) for a merchant account.
transfer_tedExecute a TED (or TEF when intra-Bradesco) transfer from the merchant's account to a beneficiary bank account.
pay_tax_darfPay a federal tax (DARF) or union fee (GRU) via Bradesco Arrecadação.

Install

bash
npm install @codespar/[email protected]

Environment

bash
BRADESCO_CLIENT_ID="..."       # OAuth client_id from Bradesco's Developer PortalBRADESCO_CLIENT_SECRET="..."   # OAuth client_secretBRADESCO_CERT_PATH="/abs/path/to/client.crt"   # mTLS client certificateBRADESCO_KEY_PATH="/abs/path/to/client.key"    # mTLS private keyBRADESCO_ENV="sandbox"                          # or "production" (default: sandbox)

Authentication

Two factors are both required on every call:

  1. OAuth2 client_credentials — the server calls the token endpoint, caches the bearer until ~60s before expiry, and attaches Authorization: Bearer <token> to downstream calls.
  2. mTLS — BACEN mandates mutual TLS for Pix v2, and Bradesco enforces it across product families. The server loads the client certificate and private key from the paths you set, builds a Node https.Agent, and routes every request through it.

You obtain the cert + key bundle from the Bradesco Developer Portal after your merchant contract is signed. They are distinct from the OAuth credentials.

Base URLs

  • Production: https://proxy.api.prebanco.com.br (Bradesco's standard external proxy)
  • Sandbox: https://apihom-bradescorip.bradesco.com.br (homologação)

Both hosts are marked TODO(verify) — Bradesco provisions per-merchant subdomains in some product families and the exact homologação host may differ. Fork and override BASE_URL if your portal provisioning differs.

Run

bash
# stdio (default)npx @codespar/mcp-bradesco
# HTTP transportMCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-bradesco

Caveats

  • Paths are unverified. See the TODO(verify) markers in src/index.ts. Onboarded merchants should validate against their portal-issued OpenAPI spec and open a PR.
  • Base URLs are best-guess. See above — override if your provisioning differs.
  • Arrecadação barcode validation is server-side in this alpha — no client-side mod-10 / mod-11 check yet.

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

Source: packages/banking/bradesco/README.md at commit d0a519a

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.2.0-alpha.3LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts