Mcp Santander

io.github.codesparPublished by GitHub account codesparv0.2.0-alpha.3Updated Oct 24, 2026

MCP server for Santander Brasil — Pix, Cobrança (boleto), Arrecadação, Extrato (OAuth2 + mTLS)

VerifiedSTDIODesktop onlyFinanceBusiness & Commerce

Overview

AI-generated overview

Alpha MCP server for Santander Brasil banking: Pix, boletos, Arrecadação, statements and transfers via OAuth2 plus mTLS.

What you can do
  • Mint and cache OAuth2 tokens for the Santander gateway
  • Send Pix, create Pix charges and QR codes, look up transactions, resolve DICT keys, refund Pix, register or delete DICT keys
  • Issue, retrieve, cancel and download PDFs of boletos, and create Pix charges with due date
  • Read account statements and balances
  • Send TED transfers, move money between Santander accounts, pay utility or tax bills, and create Open Finance consents
When to use it
For merchants with a signed Santander Brasil contract who want an assistant to handle Pix, boleto and cash-management operations directly rather than through a PSP. Best tried in sandbox first, since the package is an early alpha.
Requirements
Runs locally as an npm package (Node.js) over stdio, or over HTTP when MCP_HTTP and MCP_PORT are set. Needs a Santander Developer Portal contract, SANTANDER_CLIENT_ID, SANTANDER_CLIENT_SECRET, an mTLS certificate and key via SANTANDER_CERT_PATH and SANTANDER_KEY_PATH, and SANTANDER_ENV (sandbox by default). Network access to Santander's trust-open or trust-sandbox gateway.
Before you install
Tools move real money: send_pix, send_ted, transfer_internal, refund_pix and arrecadacao_pay initiate payments, and boleto or DICT changes write data. Requires a private key file (SANTANDER_KEY_PATH) and client secret; keep both out of logs and version control. Setting SANTANDER_ENV to production points at live accounts. Pix, Arrecadação and Extrato paths are unverified guesses in this alpha, and boleto cancellation semantics may differ.

Installation

In SourceWeft

  1. Open Mcp Santander in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@codespar/mcp-santander

MCP server for Santander Brasil — 3rd largest private bank in Brazil.

Completes the top-3 BR private-bank trio: Itaú + Bradesco + Santander. Same OAuth2 + mTLS shape as its peers; different merchant contract.

Merchants with meaningful Pix, boleto, and cash-management volume integrate directly with Santander instead of going through a PSP.

Status: alpha (0.1.0-alpha.1)

Santander's Developer Portal is contract-gated — the full OpenAPI specs for Pix, Cobrança, Arrecadação, and Extrato are only visible to onboarded merchants. The following pieces are verified against Santander's public integration guides:

  • Production host: https://trust-open.api.santander.com.br
  • Sandbox host: https://trust-sandbox.api.santander.com.br
  • OAuth2 token: /auth/oauth/v2/token
  • Cobrança v2 base: /collection_bill_management/v2/workspaces/{workspace_id}/bank_slips

Remaining paths (Pix, Arrecadação, Extrato) are best-guesses based on (a) BACEN Pix v2 standard paths, (b) Santander public marketing, and (c) conventions shared across Itaú / Bradesco / BB. Every unverified path is flagged TODO(verify) in the source.

Pin to exact versions during 0.1.x; paths will be corrected to match the portal spec once an onboarded merchant can validate.

Tools (23)

ToolPurpose
get_oauth_tokenMint or return a cached OAuth2 client_credentials bearer token for the Santander Developer Portal.
send_pixInitiate an outbound Pix payment from the merchant's Santander account.
create_pix_qrCreate a dynamic Pix charge with QR code (cob).
get_pixRetrieve a Pix transaction by its BCB endToEndId (E).
resolve_dict_keyResolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix.
refund_pixRefund (devolução) a previously received Pix.
create_boletoIssue a boleto via Santander Cobrança (collection_bill_management v2).
get_boletoRetrieve a boleto by its Santander bill_id (SONDA query via collection_bill_management v2).
cancel_boletoCancel (baixa) an outstanding boleto before payment.
get_statementRetrieve account statement transactions for a given period.
create_pix_cobvCreate a Pix charge with due date (cobv — cobrança com vencimento).
get_pix_cobRetrieve a Pix immediate charge (cob) by its txid.
list_pix_cobList Pix immediate charges (cob) created in a given period.
update_pix_cobUpdate (PATCH) an existing Pix immediate charge.
list_pix_receivedList received Pix (Pix recebidos) in a given period.
register_dict_keyRegister a new DICT key for one of the merchant's Santander accounts.
delete_dict_keyRemove (unregister) a DICT key previously registered for the merchant.
download_boleto_pdfFetch the PDF (second copy / segunda via) of a registered boleto.
get_account_balanceGet current available and blocked balance for a Santander merchant account.
send_tedInitiate a TED transfer from a Santander merchant account to an account at another bank.
transfer_internalTransfer between two Santander accounts (TEF / mesma instituição).
create_openfinance_consentCreate an Open Finance consent (BACEN-regulated) for data access or payment initiation against a third-part...
arrecadacao_payPay a utility, tax, or concessionária bill via Santander Arrecadação / Pagamento de Contas.

Install

bash
npm install @codespar/[email protected]

Environment

bash
SANTANDER_CLIENT_ID="..."       # OAuth client_id from Santander's Developer PortalSANTANDER_CLIENT_SECRET="..."   # OAuth client_secretSANTANDER_CERT_PATH="/abs/path/to/client.crt"   # mTLS client certificateSANTANDER_KEY_PATH="/abs/path/to/client.key"    # mTLS private keySANTANDER_ENV="sandbox"                         # or "production" (default: sandbox)

Authentication

Two factors are both required on every call:

  1. OAuth2 client_credentials — the server POSTs to /auth/oauth/v2/token on the trust-open (or trust-sandbox) gateway, caches the bearer until ~60s before expiry, and attaches Authorization: Bearer <token> to downstream calls.
  2. mTLS — BACEN mandates mutual TLS for Pix v2, and Santander's trust-open gateway enforces it across product families. The server loads the client certificate and private key from the paths you set, builds a Node https.Agent, and routes every request through it.

You obtain the cert + key bundle from the Santander Developer Portal after your merchant contract is signed. They are distinct from the OAuth credentials.

Cobrança: workspace model

Santander's Cobrança v2 is workspace-scoped. Before registering boletos you provision one or more workspace_ids via the Developer Portal — each binds a convênio, boleto/Pix billing mode, and webhook URL. The create_boleto, get_boleto, and cancel_boleto tools all take a workspace_id argument.

Run

bash
# stdio (default)npx @codespar/mcp-santander
# HTTP transportMCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-santander

Caveats

  • Pix / Arrecadação / Extrato paths are unverified. See the TODO(verify) markers in src/index.ts. Onboarded merchants should validate against their portal-issued OpenAPI spec and open a PR.
  • Cobrança cancel is modelled as a PATCH with status: "BAIXADO"; the covenant-specific cancellation semantics may differ.
  • Arrecadação barcode validation is server-side in this alpha — no client-side mod-10 / mod-11 check yet.

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

Source: packages/banking/santander/README.md at commit d0a519a

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.2.0-alpha.3LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts