Mcp Banco Do Brasil

io.github.codespar由 GitHub 账号 codespar 发布v0.1.0-alpha.5更新于 Oct 24, 2026

MCP server for Banco do Brasil — Pix, Cobrança (boleto), Conta-Corrente, Arrecadação (OAuth2 + mTLS)

已验证STDIO仅桌面金融商业与电商

概览

AI 生成的概览

面向巴西银行（Banco do Brasil）API 的本地 MCP 服务器，让助手创建和管理 Pix 收款、boleto、DICT 密钥，并读取账户余额和流水。

可以做什么
创建、查询和列出即时 Pix 收款（cob），发起和查询 Pix 退款（devolução）。解析、注册和删除 DICT 密钥（CPF、CNPJ、邮箱、电话、EVP）。通过 BB Cobranças 签发、查询和取消 boleto。按日期范围读取巴西银行活期账户的余额和流水交易。
适用场景
适合直接对接巴西银行、进行高频 Pix 和 boleto 业务的商户或开发者，或需要在助手中查看账户余额与流水。鉴于其 alpha 状态，建议先在沙盒环境试用。
运行要求
通过 npm（npx）以 stdio 在本地运行。需要巴西银行开发者合同及 OAuth 凭据：BB_CLIENT_ID、BB_CLIENT_SECRET 和 BB_DEVELOPER_APP_KEY。生产环境 Pix v2 要求 mTLS，因此 BB_CERT_PATH 和 BB_KEY_PATH 需指向客户端证书和私钥。BB_ENV 选择 sandbox（默认）或 production。需要访问 BB API 和 OAuth 端点的网络。
安装前请注意
需要 OAuth 密钥（BB_CLIENT_SECRET、BB_DEVELOPER_APP_KEY）和 mTLS 私钥文件（BB_KEY_PATH），请妥善保管。工具涉及真实资金操作：创建 Pix 收款、发起退款、注册或删除 DICT 密钥、签发和取消 boleto，以及读取余额和流水。该服务器为 alpha 版本，boleto、账户和流水接口路径为未经核实的推测，请锁定确切版本并在生产前于沙盒测试。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Mcp Banco Do Brasil，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

@codespar/mcp-banco-do-brasil

MCP server for Banco do Brasil — Brazil's top public bank.

BB exposes one of the broadest public-bank API surfaces in the country across Pix, Cobranças, Conta-Corrente, Open Finance, and Arrecadação. Merchants doing high-volume Pix and boleto operations integrate directly with BB instead of going through a PSP.

Status: alpha (0.1.0-alpha.1)

BB's Developer Portal is contract-gated — the full OpenAPI specs are visible only after merchant onboarding. Pix paths follow the BACEN Pix v2 standard; boleto, account, and statement paths are best-guesses based on BB's public marketing pages and conventions shared with peers (Itaú, Santander, Bradesco). Every unverified path is flagged TODO(verify) in src/index.ts. Pin to exact versions during 0.1.x.

Tools (13)

ToolPurpose
create_pix_cobCreate an immediate Pix charge (cob) with QR code.
get_pix_cobRetrieve an immediate Pix charge by its txid.
list_pix_cobList immediate Pix charges (cob) by date range.
create_pix_devolucaoRefund (devolução) a previously received Pix.
get_pix_devolucaoRetrieve a Pix devolução by its endToEndId + refund id.
resolve_dict_keyResolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix.
register_dict_keyRegister a DICT key on a BB account owned by the merchant.
delete_dict_keyDelete a DICT key owned by the merchant.
register_boletoIssue a boleto via BB Cobranças.
get_boletoRetrieve a boleto by nosso_numero.
cancel_boletoCancel (baixa) an outstanding boleto before payment.
get_account_balanceRetrieve the current balance of a BB conta-corrente (checking) account.
get_statementRetrieve account statement transactions for a BB conta-corrente over a date range.

Install

bash
npm install @codespar/[email protected]

Environment

bash
BB_CLIENT_ID="..."             # OAuth client_id from developers.bb.com.brBB_CLIENT_SECRET="..."         # OAuth client_secretBB_DEVELOPER_APP_KEY="..."     # gw-dev-app-key — required on most callsBB_CERT_PATH="/abs/path/client.crt"   # mTLS cert (production only)BB_KEY_PATH="/abs/path/client.key"    # mTLS key  (production only)BB_ENV="sandbox"                       # or "production" (default: sandbox)BB_BASE_URL="..."                      # optional; default api.hm.bb.com.br (sandbox) / api.bb.com.brBB_AUTH_URL="..."                      # optional; default https://oauth.hm.bb.com.br/oauth/token (sandbox) / oauth.bb.com.br

Authentication

  • OAuth2 client_credentials — token endpoint at oauth.{env}.bb.com.br. Bearer cached until ~60s before expiry.
  • mTLS — required by BACEN for Pix v2 in production. Sandbox typically allows TLS-only; cert/key are optional in sandbox and required in production.
  • gw-dev-app-key — BB API gateway key, appended as a query param on all calls.

Run

bash
npx @codespar/mcp-banco-do-brasil

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

来源：packages/banking/banco-do-brasil/README.md，提交 d0a519a

工具

0
SourceWeft 尚未在沙箱中启动过该软件包，因此其工具未知。

版本历史

2
  1. v0.1.0-alpha.5最新Sep 27, 2026
  2. v0.1.0-alpha.4Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手；SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分