Caixa MCP Server - install, status & alternatives [2026]

01 · Install Caixa

before you install - you'll need

Set CAIXA_CLIENT_ID, CAIXA_CLIENT_SECRET, CAIXA_CERT_PATH, CAIXA_KEY_PATH, MCP_HTTP before connecting. CAIXA_ENV is optional or environment-specific per the README.

Claude Code

claude mcp add codespar-mcp-dev-latam-packages-banking- -- npx -y @codespar/mcp-caixa

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "codespar-mcp-dev-latam-packages-banking-": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-caixa"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package @codespar/mcp-caixa - published under the repo owner's npm scope (@codespar)

registry namespace io.github.codespar is GitHub-verified and matches the repo owner

03 · What Caixa can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

With this server connected, an agent can create a dynamic Pix charge with QR code (cob), retrieve a Pix transaction by its BCB endToEndId (E), resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix, and retrieve a boleto by its Caixa identifier (id or nosso_numero).

Capability map

Tools grouped from the project's README - what Caixa lets an agent do.

Pix

10 tools - e.g. Initiate an outbound Pix payment from the merchant's Caixa account.; Create a dynamic Pix charge with QR code (cob).; Retrieve a Pix transaction by its BCB endToEndId (E).

send_pix · create_pix_qr · get_pix · refund_pix · get_pix_charge · update_pix_charge…

Boleto

4 tools - e.g. Issue a boleto via Caixa Cobrança (SICOB).; Retrieve a boleto by its Caixa identifier (id or nosso_numero).; Cancel (baixa) an outstanding boleto before payment.

create_boleto · get_boleto · cancel_boleto · download_boleto_pdf

read & search

3 tools - e.g. Mint or return a cached OAuth2 client_credentials bearer token for the Caixa Developer Portal.; Retrieve account statement transactions for a given period.; Return the current balance for a Caixa merchant…

get_oauth_token · get_statement · get_account_balance

Resolve

1 tool - e.g. Resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix.

resolve_dict_key

Register

1 tool - e.g. Register a DICT key (CPF, CNPJ, email, phone, or EVP) to an account owned by the merchant.

register_dict_key

delete

1 tool - e.g. Delete (unregister) a DICT key owned by the merchant.

delete_dict_key

Transfer

1 tool - e.g. Initiate an outbound TED transfer from a Caixa merchant account to an external bank account.

transfer_ted

Consult

1 tool - e.g. Query FGTS balance / extrato.

consult_fgts

Limitations (from the README)

- Paths are unverified. See the TODO(verify) markers in src/index.ts. Onboarded merchants should validate against their portal-issued OpenAPI spec and open a PR. - Sandbox host is a guess. Caixa issues a homologação subdomain per merchant; override by editing BASE_URL if your provisioned sandbox URL differs. - SICOB legacy. Older boleto contracts may still route through the legacy SIGCB surface. The create_boleto / g

04 · Who maintains Caixa

mcp-caixa is maintained by codespar. We track 127 MCP servers from codespar - 127 actively maintained, 269 combined GitHub stars, oldest repo from Mar 2026. Full record: all servers from codespar.

05 · Facts

repository: github.com/codespar/mcp-dev-latam
category: security - actively maintained as of 2026-08-25.
registry: io.github.codespar/mcp-caixa (active, first published 2026-06-20 · 2 versions)
packages: npm:@codespar/mcp-caixa

06 · Caixa FAQ

Is Caixa still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-12. We re-verify nightly.

What can Caixa do?

With this server connected, an agent can create a dynamic Pix charge with QR code (cob), retrieve a Pix transaction by its BCB endToEndId (E), resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix, and retrieve a boleto by its Caixa identifier (id or nosso_numero).

How do I install Caixa?

Run `npx -y @codespar/mcp-caixa`. The README documents 6 environment variables (CAIXA_CLIENT_ID, CAIXA_CLIENT_SECRET, CAIXA_CERT_PATH…) to set first. Set CAIXA_CLIENT_ID, CAIXA_CLIENT_SECRET, CAIXA_CERT_PATH, CAIXA_KEY_PATH, MCP_HTTP before connecting. CAIXA_ENV is optional or environment-specific per the README. You can also paste the ready-made client config above.

Does Caixa run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Caixa

Alternatives to Caixa

Maintained security servers if Caixa isn't the fit.

Pairs well with

Servers that cover what Caixa doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Itau · Santander · Sicoob · Caf · Izipay

More JavaScript MCP servers · Dock · Iniciador · Matera · Midaz · see all