Mcp Sicoob

io.github.codespar由 GitHub 账号 codespar 发布v0.1.0-alpha.4更新于 Oct 24, 2026

MCP server for Sicoob — Pix (cob/cobv/DICT), Cobrança (boleto), SPB (OAuth2 + mTLS)

已验证STDIO仅桌面金融商业与电商

概览

AI 生成的概览

面向巴西合作银行网络 Sicoob 的本地 MCP 服务器，让助手创建和查询 Pix 收款、管理 DICT 密钥、开具 boleto 并查询账户余额。

可以做什么
获取或复用 Sicoob 开发者门户的 OAuth2 令牌（get_oauth_token）。
适用场景
当助手需要处理 Sicoob 的 Pix 收款、DICT 密钥、boleto 或合作账户余额时使用，通常先在沙箱中验证接口路径。
运行要求
以本地 Node.js 进程运行，通过 npm 包安装。需要 SICOOB_CLIENT_ID、SICOOB_CLIENT_SECRET、SICOOB_CERT_PATH 和 SICOOB_KEY_PATH，以及可选的 SICOOB_ENV（sandbox 或 production，默认 sandbox）。凭据和 mTLS 证书包需在合作社会员开户后从 Sicoob 开发者门户获取，并需要访问 Sicoob 接口的网络。
安装前请注意
该服务器处于 alpha 阶段，接口路径为未经核实的推测，调用可能失败或指向错误路由。它涉及客户端密钥和 mTLS 私钥路径，在生产模式下可创建、取消和删除真实的金融记录（Pix 收款、DICT 密钥、boleto）。在路径验证前应保持 SICOOB_ENV 为 sandbox。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Mcp Sicoob，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

@codespar/mcp-sicoob

MCP server for Sicoob — Brazil's largest cooperative bank network.

Sicoob is consistently a top-4 PSP by Pix volume in Brazil. The Sistema de Cooperativas de Crédito do Brasil aggregates hundreds of regional cooperatives behind a single Developers Portal exposing Pix, Cobrança (boleto), and SPB APIs.

Status: alpha (0.1.0-alpha.1)

Sicoob's Developers Portal is gated by cooperative onboarding. The endpoint paths in this server are best-guesses based on (a) BACEN Pix v2 standard paths, (b) Sicoob's public documentation snippets, and (c) conventions shared across Itaú / Bradesco / BB. Every unverified path is flagged TODO(verify) in the source.

Pin to exact versions during 0.1.x; paths will be corrected to match the portal spec once an onboarded cooperative member can validate.

Tools (13)

ToolPurpose
get_oauth_tokenMint or return a cached OAuth2 client_credentials bearer token for the Sicoob Developers Portal.
create_pix_cobCreate an immediate Pix charge (cob) with QR code.
get_pix_cobRetrieve an immediate Pix charge by its txid.
list_pix_cobList immediate Pix charges (cob) registered by the merchant within a date range.
create_pix_cobvCreate a Pix charge with due date (cobv) — boleto-like Pix payable on or after a due date with optional fin...
get_pix_cobvRetrieve a due-date Pix charge (cobv) by its txid.
lookup_dict_keyResolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix.
register_dict_keyRegister a DICT key (CPF, CNPJ, email, phone, or EVP) on a Sicoob account owned by the cooperative member.
delete_dict_keyDelete a DICT key owned by the cooperative member.
create_boletoIssue a boleto via Sicoob Cobrança.
get_boletoRetrieve a boleto by its Sicoob identifier (id or nosso_numero).
cancel_boletoCancel (baixa) an outstanding boleto before payment.
get_account_balanceQuery the merchant cooperative account balance via Sicoob SPB.

Install

bash
npm install @codespar/[email protected]

Environment

bash
SICOOB_CLIENT_ID="..."       # OAuth client_id from Sicoob's Developers PortalSICOOB_CLIENT_SECRET="..."   # OAuth client_secretSICOOB_CERT_PATH="/abs/path/to/client.crt"   # mTLS client certificateSICOOB_KEY_PATH="/abs/path/to/client.key"    # mTLS private keySICOOB_ENV="sandbox"                          # or "production" (default: sandbox)

Authentication

Two factors are both required on every call:

  1. OAuth2 client_credentials — the server calls the token endpoint, caches the bearer until ~60s before expiry, and attaches Authorization: Bearer <token> to downstream calls.
  2. mTLS — BACEN mandates mutual TLS for Pix v2, and Sicoob enforces it across product families. The server loads the client certificate and private key from the paths you set, builds a Node https.Agent, and routes every request through it.

The cert + key bundle is issued by Sicoob's Developers Portal after cooperative onboarding and is distinct from the OAuth credentials.

Run

bash
# stdio (default)npx @codespar/mcp-sicoob
# HTTP transportMCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-sicoob

Caveats

  • Paths are unverified. See the TODO(verify) markers in src/index.ts. Onboarded cooperatives should validate against their portal-issued OpenAPI spec and open a PR.
  • Sandbox host is a guess. Sicoob issues a sandbox subdomain per cooperative; override by editing BASE_URL if your provisioned sandbox URL differs.

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

来源：packages/banking/sicoob/README.md，提交 d0a519a

工具

0
SourceWeft 尚未在沙箱中启动过该软件包，因此其工具未知。

版本历史

1
  1. v0.1.0-alpha.4最新Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手；SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分