C6 MCP Server

mcp-c6 is an MCP server in the security category that exposes 14 tools to an agent, covering pix, read & search, boleto.

People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in JavaScript.

One of 127 MCP servers published from codespar/mcp-dev-latam. Stars and repository activity are shared across all of them. See all 127 →

VERIFIED ACTIVE

LAST COMMIT 2026-08-12 · VERIFIED 2026-08-25

MIT · JavaScript servers · how we verify → /methodology

01 · Install C6

before you install - you'll need

Set C6_CLIENT_ID, C6_CLIENT_SECRET, C6_CERT_PATH, C6_KEY_PATH before connecting. C6_ENV is optional or environment-specific per the README.

Claude Code

claude mcp add codespar-mcp-dev-latam-packages-banking- -- npx -y @codespar/mcp-c6

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "codespar-mcp-dev-latam-packages-banking-": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-c6"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package @codespar/mcp-c6 - published under the repo owner's npm scope (@codespar)

registry namespace io.github.codespar is GitHub-verified and matches the repo owner

03 · What C6 can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

With this server connected, an agent can create a Pix immediate charge (cob) with QR code, retrieve a Pix immediate charge (cob) by its txid, create a Pix charge with due date (cobv) - used for boleto-like Pix where the payer can pay at or after a d.., and retrieve a Pix due-date charge (cobv) by its txid.

Capability map

Tools grouped from the project's README - what C6 lets an agent do.

Pix

7 tools - e.g. Create a Pix immediate charge (cob) with QR code.; Retrieve a Pix immediate charge (cob) by its txid.; List Pix immediate charges (cob) registered by the merchant within a date range.

create_pix_cob · get_pix_cob · list_pix_cob · create_pix_cobv · get_pix_cobv · register_pix_key…

read & search

3 tools - e.g. Mint or return a cached OAuth2 client_credentials bearer token for the C6 Developer Portal.; Retrieve the current balance snapshot for a merchant account.; Retrieve account statement transactions for a…

get_oauth_token · get_account_balance · get_statement

Boleto

3 tools - e.g. Issue a boleto via C6 Cobrança.; Retrieve a boleto by its C6 identifier (id or nosso_numero).; Cancel (baixa) an outstanding boleto before payment.

create_boleto · get_boleto · cancel_boleto

Resolve

1 tool - e.g. Resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix.

resolve_dict_key

Limitations (from the README)

- Paths are unverified. See the TODO(verify) markers in src/index.ts. Onboarded merchants should validate against their portal-issued OpenAPI spec and open a PR. - Sandbox host is a guess. C6 issues a sandbox subdomain per merchant; override by editing BASE_URL if your provisioned sandbox URL differs.

04 · Who maintains C6

mcp-c6 is maintained by codespar. We track 127 MCP servers from codespar - 127 actively maintained, 269 combined GitHub stars, oldest repo from Mar 2026. Full record: all servers from codespar.

  1. mcp-asaas MCP server for Asaas - billing automation, Pix, boleto, credit card, subscriptions ★ 269
  2. mcp-omie MCP server for Omie - ERP, customers, products, orders, invoices, financials ★ 269
  3. mcp-sendgrid MCP server for SendGrid - global transactional + marketing email (Twilio-owned) ★ 269
  4. mcp-evolution-api MCP server for Evolution API - WhatsApp messaging, instances, contacts ★ 269
  5. mcp-stripe-acp Stripe ACP - AI agent checkout, payment delegation, products, invoices ★ 269
  6. mcp-mercado-bitcoin MCP server for Mercado Bitcoin - Brazilian crypto exchange, trading, orderbook, withdrawals ★ 269

05 · Facts

category
security - actively maintained as of 2026-08-25.
registry
io.github.codespar/mcp-c6 (active, first published 2026-06-20 · 2 versions)
packages
npm:@codespar/mcp-c6

06 · C6 FAQ

Is C6 still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-12. We re-verify nightly.

What can C6 do?

With this server connected, an agent can create a Pix immediate charge (cob) with QR code, retrieve a Pix immediate charge (cob) by its txid, create a Pix charge with due date (cobv) - used for boleto-like Pix where the payer can pay at or after a d.., and retrieve a Pix due-date charge (cobv) by its txid.

How do I install C6?

Run `npx -y @codespar/mcp-c6`. The README documents 5 environment variables (C6_CLIENT_ID, C6_CLIENT_SECRET, C6_CERT_PATH…) to set first. Set C6_CLIENT_ID, C6_CLIENT_SECRET, C6_CERT_PATH, C6_KEY_PATH before connecting. C6_ENV is optional or environment-specific per the README. You can also paste the ready-made client config above.

Does C6 run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to C6

More security MCP servers · Caixa · Itau · Santander · Sicoob · Caf

More JavaScript MCP servers · Dock · Iniciador · Matera · see all