C6 MCP Server
mcp-c6 is an MCP server in the security category that exposes 14 tools to an agent, covering pix, read & search, boleto.
People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in JavaScript.
One of 127 MCP servers published from codespar/mcp-dev-latam. Stars and repository activity are shared across all of them. See all 127 →
VERIFIED ACTIVE
LAST COMMIT 2026-08-12 · VERIFIED 2026-08-25
MIT · JavaScript servers · how we verify → /methodology
01 · Install C6
before you install - you'll need
Set C6_CLIENT_ID, C6_CLIENT_SECRET, C6_CERT_PATH, C6_KEY_PATH before connecting. C6_ENV is optional or environment-specific per the README.
Claude Code
claude mcp add codespar-mcp-dev-latam-packages-banking- -- npx -y @codespar/mcp-c6 Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"codespar-mcp-dev-latam-packages-banking-": {
"command": "npx",
"args": [
"-y",
"@codespar/mcp-c6"
]
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions
license MIT - declared in the repository
npm package @codespar/mcp-c6 - published under the repo owner's npm scope (@codespar)
registry namespace io.github.codespar is GitHub-verified and matches the repo owner
03 · What C6 can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
What you can build
With this server connected, an agent can create a Pix immediate charge (cob) with QR code, retrieve a Pix immediate charge (cob) by its txid, create a Pix charge with due date (cobv) - used for boleto-like Pix where the payer can pay at or after a d.., and retrieve a Pix due-date charge (cobv) by its txid.
Capability map
Tools grouped from the project's README - what C6 lets an agent do.
Pix
7 tools - e.g. Create a Pix immediate charge (cob) with QR code.; Retrieve a Pix immediate charge (cob) by its txid.; List Pix immediate charges (cob) registered by the merchant within a date range.
create_pix_cob · get_pix_cob · list_pix_cob · create_pix_cobv · get_pix_cobv · register_pix_key…
read & search
3 tools - e.g. Mint or return a cached OAuth2 client_credentials bearer token for the C6 Developer Portal.; Retrieve the current balance snapshot for a merchant account.; Retrieve account statement transactions for a…
get_oauth_token · get_account_balance · get_statement
Boleto
3 tools - e.g. Issue a boleto via C6 Cobrança.; Retrieve a boleto by its C6 identifier (id or nosso_numero).; Cancel (baixa) an outstanding boleto before payment.
create_boleto · get_boleto · cancel_boleto
Resolve
1 tool - e.g. Resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix.
resolve_dict_key
Limitations (from the README)
- Paths are unverified. See the TODO(verify) markers in src/index.ts. Onboarded merchants should validate against their portal-issued OpenAPI spec and open a PR. - Sandbox host is a guess. C6 issues a sandbox subdomain per merchant; override by editing BASE_URL if your provisioned sandbox URL differs.
04 · Who maintains C6
mcp-c6 is maintained by codespar. We track 127 MCP servers from codespar - 127 actively maintained, 269 combined GitHub stars, oldest repo from Mar 2026. Full record: all servers from codespar.
- mcp-asaas MCP server for Asaas - billing automation, Pix, boleto, credit card, subscriptions ★ 269
- mcp-omie MCP server for Omie - ERP, customers, products, orders, invoices, financials ★ 269
- mcp-sendgrid MCP server for SendGrid - global transactional + marketing email (Twilio-owned) ★ 269
- mcp-evolution-api MCP server for Evolution API - WhatsApp messaging, instances, contacts ★ 269
- mcp-stripe-acp Stripe ACP - AI agent checkout, payment delegation, products, invoices ★ 269
- mcp-mercado-bitcoin MCP server for Mercado Bitcoin - Brazilian crypto exchange, trading, orderbook, withdrawals ★ 269
05 · Facts
- repository
- github.com/codespar/mcp-dev-latam
- category
- security - actively maintained as of 2026-08-25.
- registry
- io.github.codespar/mcp-c6 (active, first published 2026-06-20 · 2 versions)
- packages
- npm:@codespar/mcp-c6
06 · C6 FAQ
Is C6 still maintained?
Yes - as of 2026-08-25, its last commit was 2026-08-12. We re-verify nightly.
What can C6 do?
With this server connected, an agent can create a Pix immediate charge (cob) with QR code, retrieve a Pix immediate charge (cob) by its txid, create a Pix charge with due date (cobv) - used for boleto-like Pix where the payer can pay at or after a d.., and retrieve a Pix due-date charge (cobv) by its txid.
How do I install C6?
Run `npx -y @codespar/mcp-c6`. The README documents 5 environment variables (C6_CLIENT_ID, C6_CLIENT_SECRET, C6_CERT_PATH…) to set first. Set C6_CLIENT_ID, C6_CLIENT_SECRET, C6_CERT_PATH, C6_KEY_PATH before connecting. C6_ENV is optional or environment-specific per the README. You can also paste the ready-made client config above.
Does C6 run locally?
Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.
07 · Alternatives to C6
Alternatives to C6
Maintained security servers if C6 isn't the fit.
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,102 · 2026-08-24
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 632 · 2026-08-24
- Decionis MCP Server Fail-closed policy gate for AI agent actions, with local evaluation and native pre-tool hooks. ★ 533 · 2026-08-24
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 470 · 2026-08-25
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 409 · 2026-08-23
- CrowdStrike Falcon MCP Server Connects AI agents with CrowdStrike Falcon for security analysis and automation. ★ 239 · 2026-08-24
Pairs well with
Servers that cover what C6 doesn't - only shown when the pairing reason fits the companion.