Mcp Nubank

io.github.codesparPublished by GitHub account codesparv0.2.0-alpha.4Updated Oct 24, 2026

DEPRECATED: no live endpoint (api.nubank.com.br does not resolve)

VerifiedSTDIODesktop onlyFinanceBusiness & Commerce

Overview

AI-generated overview

Deprecated MCP server for Nubank banking via Open Finance Brasil; its API host no longer resolves, so no tool reaches a live service.

What you can do
  • Read accounts, balances, statements, transactions and profile data
  • Read credit card bills, card transactions and card details
  • Read investments, yields and registered PIX keys
  • Initiate, schedule and cancel PIX transfers, and create or delete PIX keys
  • Block or unblock cards, pay credit card bills and pay boletos
  • Note: the README states no tool in this server reaches a service, since the API host does not resolve in DNS.
When to use it
Only for reference or research into how a Nubank Open Finance MCP server was structured. It is deprecated and not usable for real banking tasks; for NuPay for Business, the README points to a separate package.
Requirements
Local Node.js process run via npx. The README lists NUBANK_CLIENT_ID, NUBANK_CLIENT_SECRET and NUBANK_CERT_PATH (mTLS certificate path) as required, plus optional MCP_HTTP and MCP_PORT. Credentials would come from Nubank's Open Finance portal. The manifest declares only NUBANK_CLIENT_ID.
Before you install
Deprecated and non-functional: the API host does not resolve and the package is deprecated on npm. The listed tools would move money and change account state (PIX transfers, bill and boleto payments, card blocking, PIX key creation and deletion). It asks for an OAuth2 client secret and an mTLS certificate path. The README also mentions a commercial enterprise offering.

Installation

In SourceWeft

  1. Open Mcp Nubank in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@codespar/mcp-nubank

Deprecated: no live endpoint. Measured on 2026-09-27 against two public DNS resolvers (8.8.8.8 and 1.1.1.1): api.nubank.com.br, the host this server calls, does not resolve in DNS. Nubank's only public API we found is NuPay for Business (api.spinpay.com.br), which @codespar/mcp-nupay already covers. No tool in this server reaches a service. The package is deprecated on npm and stays in this repository for reference only. If you have a working endpoint, point the server at it with NUBANK_BASE_URL. To bring the package back, open an issue in mcp-dev-latam with the provider's documented base URL.

MCP server for Nubank, Brazil's largest digital bank, using the Open Finance Brasil standard

[npm] [License: MIT]

Alpha release — published under the alpha npm dist-tag. Endpoint paths follow public docs and BACEN/provider conventions but have not been fully live-validated. Pin exact versions during 0.x.x-alpha. Install with npm install @codespar/mcp-nubank@alpha.

Quick Start

bash
# Set your credentialsexport NUBANK_CLIENT_ID="your-client-id"export NUBANK_CLIENT_SECRET="your-client-secret"export NUBANK_CERT_PATH="/path/to/certificate.pem"
# Run via stdionpx -y @codespar/mcp-nubank@alpha
# Run via HTTPMCP_HTTP=true MCP_PORT=3000 npx -y @codespar/mcp-nubank@alpha

Environment Variables

VariableRequiredDescription
NUBANK_CLIENT_IDYesOAuth2 client ID
NUBANK_CLIENT_SECRETYesOAuth2 client secret
NUBANK_CERT_PATHYesPath to mTLS certificate file
MCP_HTTPNoSet to "true" to enable HTTP transport
MCP_PORTNoHTTP port (default: 3000)

Tools (22)

ToolPurpose
get_accountsList all accounts (checking, savings)
get_balanceGet account balance
get_transactionsList transactions with filters
get_credit_card_billGet credit card bill details
get_investmentsList investments and yields
initiate_pixInitiate a PIX transfer
get_pix_keysList registered PIX keys
get_statementGet account statement for a period
get_profileGet authenticated user profile information
list_cardsList debit and credit cards
get_pix_transferGet status and details of a specific PIX transfer
schedule_pixSchedule a future-dated PIX transfer
cancel_scheduled_pixCancel a previously scheduled PIX transfer
create_pix_keyRegister a new PIX key for the authenticated account
delete_pix_keyRemove a registered PIX key
get_card_detailsGet details for a single debit or credit card
block_cardBlock a card (reports lost/stolen or temporarily disables it)
unblock_cardUnblock a previously blocked card (only valid for temporary blocks)
get_credit_card_transactionsList transactions for a given credit card bill
pay_credit_card_billPay a credit card bill from a linked account
get_boletoRetrieve boleto details by barcode or digitable line
pay_boletoPay a boleto from a linked account

Auth

Uses OAuth2 client credentials flow with mTLS certificate. Register your application through Nubank's Open Finance portal to obtain credentials.

API Reference

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

Authentication

Set these environment variables before launching the server:

  • NUBANK_CLIENT_ID (required, secret) — API key/token for nubank

Issue credentials at the provider's developer portal: https://openfinancebrasil.org.br.

License

MIT

Source: packages/payments/nubank/README.md at commit d0a519a

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

2
  1. v0.2.0-alpha.4LatestSep 27, 2026
  2. v0.2.0-alpha.3Sep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts