Santander MCP Server
mcp-santander is an MCP server in the security category that exposes 23 tools to an agent, covering pix, boleto, read & search.
People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in JavaScript.
One of 127 MCP servers published from codespar/mcp-dev-latam. Stars and repository activity are shared across all of them. See all 127 →
VERIFIED ACTIVE
LAST COMMIT 2026-08-12 · VERIFIED 2026-08-25
MIT · JavaScript servers · how we verify → /methodology
01 · Install Santander
before you install - you'll need
Set SANTANDER_CLIENT_ID, SANTANDER_CLIENT_SECRET, SANTANDER_CERT_PATH, SANTANDER_KEY_PATH, MCP_HTTP before connecting. SANTANDER_ENV is optional or environment-specific per the README.
Claude Code
claude mcp add codespar-mcp-dev-latam-packages-banking- -- npx -y @codespar/mcp-santander Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"codespar-mcp-dev-latam-packages-banking-": {
"command": "npx",
"args": [
"-y",
"@codespar/mcp-santander"
]
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions
license MIT - declared in the repository
npm package @codespar/mcp-santander - published under the repo owner's npm scope (@codespar)
registry namespace io.github.codespar is GitHub-verified and matches the repo owner
03 · What Santander can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
What you can build
With this server connected, an agent can create a dynamic Pix charge with QR code (cob), retrieve a Pix transaction by its BCB endToEndId (E), resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix, and retrieve a boleto by its Santander bill_id (SONDA query via collection_bill_management v2).
Capability map
Tools grouped from the project's README - what Santander lets an agent do.
Pix
9 tools - e.g. Initiate an outbound Pix payment from the merchant's Santander account.; Create a dynamic Pix charge with QR code (cob).; Retrieve a Pix transaction by its BCB endToEndId (E).
send_pix · create_pix_qr · get_pix · refund_pix · create_pix_cobv · get_pix_cob…
Boleto
4 tools - e.g. Issue a boleto via Santander Cobrança (collection_bill_management v2).; Retrieve a boleto by its Santander bill_id (SONDA query via collection_bill_management v2).; Cancel (baixa) an outstanding boleto…
create_boleto · get_boleto · cancel_boleto · download_boleto_pdf
read & search
3 tools - e.g. Mint or return a cached OAuth2 client_credentials bearer token for the Santander Developer Portal.; Retrieve account statement transactions for a given period.; Get current available and blocked balance…
get_oauth_token · get_statement · get_account_balance
Resolve
1 tool - e.g. Resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix.
resolve_dict_key
Register
1 tool - e.g. Register a new DICT key for one of the merchant's Santander accounts.
register_dict_key
delete
1 tool - e.g. Remove (unregister) a DICT key previously registered for the merchant.
delete_dict_key
run & execute
1 tool - e.g. Initiate a TED transfer from a Santander merchant account to an account at another bank.
send_ted
Transfer
1 tool - e.g. Transfer between two Santander accounts (TEF / mesma instituição).
transfer_internal
Limitations (from the README)
- Pix / Arrecadação / Extrato paths are unverified. See the TODO(verify) markers in src/index.ts. Onboarded merchants should validate against their portal-issued OpenAPI spec and open a PR. - Cobrança cancel is modelled as a PATCH with status: "BAIXADO"; the covenant-specific cancellation semantics may differ. - Arrecadação barcode validation is server-side in this alpha - no client-side mod-10 / mod-11 check yet.
04 · Who maintains Santander
mcp-santander is maintained by codespar. We track 127 MCP servers from codespar - 127 actively maintained, 269 combined GitHub stars, oldest repo from Mar 2026. Full record: all servers from codespar.
- mcp-asaas MCP server for Asaas - billing automation, Pix, boleto, credit card, subscriptions ★ 269
- mcp-omie MCP server for Omie - ERP, customers, products, orders, invoices, financials ★ 269
- mcp-sendgrid MCP server for SendGrid - global transactional + marketing email (Twilio-owned) ★ 269
- mcp-evolution-api MCP server for Evolution API - WhatsApp messaging, instances, contacts ★ 269
- mcp-stripe-acp Stripe ACP - AI agent checkout, payment delegation, products, invoices ★ 269
- mcp-mercado-bitcoin MCP server for Mercado Bitcoin - Brazilian crypto exchange, trading, orderbook, withdrawals ★ 269
05 · Facts
- repository
- github.com/codespar/mcp-dev-latam
- category
- security - actively maintained as of 2026-08-25.
- registry
- io.github.codespar/mcp-santander (active, first published 2026-06-20 · 2 versions)
- packages
- npm:@codespar/mcp-santander
06 · Santander FAQ
Is Santander still maintained?
Yes - as of 2026-08-25, its last commit was 2026-08-12. We re-verify nightly.
What can Santander do?
With this server connected, an agent can create a dynamic Pix charge with QR code (cob), retrieve a Pix transaction by its BCB endToEndId (E), resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix, and retrieve a boleto by its Santander bill_id (SONDA query via collection_bill_management v2).
How do I install Santander?
Run `npx -y @codespar/mcp-santander`. The README documents 6 environment variables (SANTANDER_CLIENT_ID, SANTANDER_CLIENT_SECRET, SANTANDER_CERT_PATH…) to set first. Set SANTANDER_CLIENT_ID, SANTANDER_CLIENT_SECRET, SANTANDER_CERT_PATH, SANTANDER_KEY_PATH, MCP_HTTP before connecting. SANTANDER_ENV is optional or environment-specific per the README. You can also paste the ready-made client config above.
Does Santander run locally?
Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.
07 · Alternatives to Santander
Alternatives to Santander
Maintained security servers if Santander isn't the fit.
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,102 · 2026-08-24
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 632 · 2026-08-24
- Decionis MCP Server Fail-closed policy gate for AI agent actions, with local evaluation and native pre-tool hooks. ★ 533 · 2026-08-24
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 470 · 2026-08-25
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 409 · 2026-08-23
- CrowdStrike Falcon MCP Server Connects AI agents with CrowdStrike Falcon for security analysis and automation. ★ 239 · 2026-08-24
Pairs well with
Servers that cover what Santander doesn't - only shown when the pairing reason fits the companion.