mcp-c6

@codespar/mcp-c6

Deprecated: no live endpoint. Measured on 2026-09-27 against two public DNS resolvers (8.8.8.8 and 1.1.1.1): baas.c6bank.com.br (production) and baas-sandbox.c6bank.com.br (sandbox) do not resolve in DNS. C6's developer portal now documents baas-api.c6bank.info (production) and baas-api-sandbox.c6bank.info (sandbox), both behind mTLS; this server's paths and auth were not written against them and have not been checked. No tool in this server reaches a service. The package is deprecated on npm and stays in this repository for reference only. If you have a working endpoint, point the server at it with C6_BASE_URL. To bring the package back, open an issue in mcp-dev-latam with the provider's documented base URL.

MCP server for C6 Bank — a top Brazilian digital bank, JPMorgan-backed.

C6 ranks among the largest Brazilian digital banks by retail account base and has expanded aggressively into SMB and corporate banking. Merchants integrate directly for Pix, boleto, and account-data flows.

Status: alpha (0.1.0-alpha.1)

C6's Developer Portal is contract-gated — full OpenAPI specs for Pix, Cobrança, and account APIs are only visible to onboarded merchants. The endpoint paths in this server are best-guesses based on (a) the BACEN Pix v2 standard, (b) C6's public marketing pages, and (c) conventions shared across Itaú / Santander / Bradesco. Every unverified path is flagged TODO(verify) in the source.

Pin to exact versions during 0.1.x; paths will be corrected to match the portal spec once an onboarded merchant can validate.

Tools (14)

Tool	Purpose
get_oauth_token	Mint or return a cached OAuth2 client_credentials bearer token for the C6 Developer Portal.
create_pix_cob	Create a Pix immediate charge (cob) with QR code.
get_pix_cob	Retrieve a Pix immediate charge (cob) by its txid.
list_pix_cob	List Pix immediate charges (cob) registered by the merchant within a date range.
create_pix_cobv	Create a Pix charge with due date (cobv) — used for boleto-like Pix where the payer can pay at or after a d...
get_pix_cobv	Retrieve a Pix due-date charge (cobv) by its txid.
resolve_dict_key	Resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix.
register_pix_key	Register a DICT key (CPF, CNPJ, email, phone, or EVP) on a C6 account owned by the merchant.
delete_pix_key	Delete a DICT key owned by the merchant.
create_boleto	Issue a boleto via C6 Cobrança.
get_boleto	Retrieve a boleto by its C6 identifier (id or nosso_numero).
cancel_boleto	Cancel (baixa) an outstanding boleto before payment.
get_account_balance	Retrieve the current balance snapshot for a merchant account.
get_statement	Retrieve account statement transactions for a given period.

Install

npm install @codespar/[email protected]

Environment

C6_CLIENT_ID="..."        # OAuth client_id from C6's Developer Portal
C6_CLIENT_SECRET="..."    # OAuth client_secret
C6_CERT_PATH="/abs/path/to/client.crt"   # mTLS client certificate
C6_KEY_PATH="/abs/path/to/client.key"    # mTLS private key
C6_ENV="sandbox"                          # or "production" (default: sandbox)

Authentication

Two factors are both required on every call:

1. OAuth2 client_credentials — the server calls the token endpoint, caches the bearer until ~60s before expiry, and attaches Authorization: Bearer <token> to downstream calls.
2. mTLS — BACEN mandates mutual TLS for Pix v2, and C6 enforces it across product families. The server loads the client certificate and private key from the paths you set, builds a Node https.Agent, and routes every request through it.

You obtain the cert + key bundle from the C6 Developer Portal after your merchant contract is signed.

Run

# stdio (default)
npx @codespar/mcp-c6

Caveats

• Paths are unverified. See the TODO(verify) markers in src/index.ts. Onboarded merchants should validate against their portal-issued OpenAPI spec and open a PR.
• Sandbox host is a guess. C6 issues a sandbox subdomain per merchant; override by editing BASE_URL if your provisioned sandbox URL differs.

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT