Mcp Sicoob

io.github.codespar由 GitHub 帳號 codespar 發布v0.1.0-alpha.4更新於 Oct 24, 2026

MCP server for Sicoob — Pix (cob/cobv/DICT), Cobrança (boleto), SPB (OAuth2 + mTLS)

已驗證STDIO僅桌面金融商業與電商

概覽

AI 產生的概覽

針對巴西合作銀行網絡 Sicoob 的本機 MCP 伺服器，讓助理建立與查詢 Pix 收款、管理 DICT 金鑰、開立 boleto 並查詢帳戶餘額。

可以做什麼
取得或重複使用 Sicoob 開發者入口網站的 OAuth2 權杖（get_oauth_token）。
適用情境
當助理需要處理 Sicoob 的 Pix 收款、DICT 金鑰、boleto 或合作帳戶餘額時使用，通常先在沙箱中驗證介面路徑。
執行需求
以本機 Node.js 程序執行，透過 npm 套件安裝。需要 SICOOB_CLIENT_ID、SICOOB_CLIENT_SECRET、SICOOB_CERT_PATH 與 SICOOB_KEY_PATH，以及選用的 SICOOB_ENV（sandbox 或 production，預設 sandbox）。憑證與 mTLS 憑證包需在合作社會員開通後從 Sicoob 開發者入口網站取得，並需要連線至 Sicoob 介面的網路。
安裝前請注意
此伺服器處於 alpha 階段，介面路徑為未經核實的推測，呼叫可能失敗或指向錯誤路由。它涉及用戶端密鑰與 mTLS 私鑰路徑，在 production 模式下可建立、取消與刪除真實的金融紀錄（Pix 收款、DICT 金鑰、boleto）。在路徑驗證前應讓 SICOOB_ENV 保持 sandbox。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Mcp Sicoob，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

@codespar/mcp-sicoob

MCP server for Sicoob — Brazil's largest cooperative bank network.

Sicoob is consistently a top-4 PSP by Pix volume in Brazil. The Sistema de Cooperativas de Crédito do Brasil aggregates hundreds of regional cooperatives behind a single Developers Portal exposing Pix, Cobrança (boleto), and SPB APIs.

Status: alpha (0.1.0-alpha.1)

Sicoob's Developers Portal is gated by cooperative onboarding. The endpoint paths in this server are best-guesses based on (a) BACEN Pix v2 standard paths, (b) Sicoob's public documentation snippets, and (c) conventions shared across Itaú / Bradesco / BB. Every unverified path is flagged TODO(verify) in the source.

Pin to exact versions during 0.1.x; paths will be corrected to match the portal spec once an onboarded cooperative member can validate.

Tools (13)

ToolPurpose
get_oauth_tokenMint or return a cached OAuth2 client_credentials bearer token for the Sicoob Developers Portal.
create_pix_cobCreate an immediate Pix charge (cob) with QR code.
get_pix_cobRetrieve an immediate Pix charge by its txid.
list_pix_cobList immediate Pix charges (cob) registered by the merchant within a date range.
create_pix_cobvCreate a Pix charge with due date (cobv) — boleto-like Pix payable on or after a due date with optional fin...
get_pix_cobvRetrieve a due-date Pix charge (cobv) by its txid.
lookup_dict_keyResolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix.
register_dict_keyRegister a DICT key (CPF, CNPJ, email, phone, or EVP) on a Sicoob account owned by the cooperative member.
delete_dict_keyDelete a DICT key owned by the cooperative member.
create_boletoIssue a boleto via Sicoob Cobrança.
get_boletoRetrieve a boleto by its Sicoob identifier (id or nosso_numero).
cancel_boletoCancel (baixa) an outstanding boleto before payment.
get_account_balanceQuery the merchant cooperative account balance via Sicoob SPB.

Install

bash
npm install @codespar/[email protected]

Environment

bash
SICOOB_CLIENT_ID="..."       # OAuth client_id from Sicoob's Developers PortalSICOOB_CLIENT_SECRET="..."   # OAuth client_secretSICOOB_CERT_PATH="/abs/path/to/client.crt"   # mTLS client certificateSICOOB_KEY_PATH="/abs/path/to/client.key"    # mTLS private keySICOOB_ENV="sandbox"                          # or "production" (default: sandbox)

Authentication

Two factors are both required on every call:

  1. OAuth2 client_credentials — the server calls the token endpoint, caches the bearer until ~60s before expiry, and attaches Authorization: Bearer <token> to downstream calls.
  2. mTLS — BACEN mandates mutual TLS for Pix v2, and Sicoob enforces it across product families. The server loads the client certificate and private key from the paths you set, builds a Node https.Agent, and routes every request through it.

The cert + key bundle is issued by Sicoob's Developers Portal after cooperative onboarding and is distinct from the OAuth credentials.

Run

bash
# stdio (default)npx @codespar/mcp-sicoob
# HTTP transportMCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-sicoob

Caveats

  • Paths are unverified. See the TODO(verify) markers in src/index.ts. Onboarded cooperatives should validate against their portal-issued OpenAPI spec and open a PR.
  • Sandbox host is a guess. Sicoob issues a sandbox subdomain per cooperative; override by editing BASE_URL if your provisioned sandbox URL differs.

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

來源：packages/banking/sicoob/README.md，提交 d0a519a

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

1
  1. v0.1.0-alpha.4最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分