Sicoob MCP Server
mcp-sicoob is an MCP server in the security category that exposes 13 tools to an agent, covering pix, dict, boleto.
People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in JavaScript.
One of 127 MCP servers published from codespar/mcp-dev-latam. Stars and repository activity are shared across all of them. See all 127 →
VERIFIED ACTIVE
LAST COMMIT 2026-08-12 · VERIFIED 2026-08-25
MIT · JavaScript servers · how we verify → /methodology
01 · Install Sicoob
before you install - you'll need
Set SICOOB_CLIENT_ID, SICOOB_CLIENT_SECRET, SICOOB_CERT_PATH, SICOOB_KEY_PATH, MCP_HTTP before connecting. SICOOB_ENV is optional or environment-specific per the README.
Claude Code
claude mcp add codespar-mcp-dev-latam-packages-banking- -- npx -y @codespar/mcp-sicoob Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"codespar-mcp-dev-latam-packages-banking-": {
"command": "npx",
"args": [
"-y",
"@codespar/mcp-sicoob"
]
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions
license MIT - declared in the repository
npm package @codespar/mcp-sicoob - published under the repo owner's npm scope (@codespar)
registry namespace io.github.codespar is GitHub-verified and matches the repo owner
03 · What Sicoob can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
What you can build
With this server connected, an agent can create an immediate Pix charge (cob) with QR code, retrieve an immediate Pix charge by its txid, list immediate Pix charges (cob) registered by the merchant within a date range, and create a Pix charge with due date (cobv) - boleto-like Pix payable on or after a due date with optional fin...
Capability map
Tools grouped from the project's README - what Sicoob lets an agent do.
Pix
5 tools - e.g. Create an immediate Pix charge (cob) with QR code.; Retrieve an immediate Pix charge by its txid.; List immediate Pix charges (cob) registered by the merchant within a date range.
create_pix_cob · get_pix_cob · list_pix_cob · create_pix_cobv · get_pix_cobv
Dict
3 tools - e.g. Resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix.; Register a DICT key (CPF, CNPJ, email, phone, or EVP) on a Sicoob account owned by the cooperative…
lookup_dict_key · register_dict_key · delete_dict_key
Boleto
3 tools - e.g. Issue a boleto via Sicoob Cobrança.; Retrieve a boleto by its Sicoob identifier (id or nosso_numero).; Cancel (baixa) an outstanding boleto before payment.
create_boleto · get_boleto · cancel_boleto
read & search
2 tools - e.g. Mint or return a cached OAuth2 client_credentials bearer token for the Sicoob Developers Portal.; Query the merchant cooperative account balance via Sicoob SPB.
get_oauth_token · get_account_balance
Limitations (from the README)
- Paths are unverified. See the TODO(verify) markers in src/index.ts. Onboarded cooperatives should validate against their portal-issued OpenAPI spec and open a PR. - Sandbox host is a guess. Sicoob issues a sandbox subdomain per cooperative; override by editing BASE_URL if your provisioned sandbox URL differs.
04 · Who maintains Sicoob
mcp-sicoob is maintained by codespar. We track 127 MCP servers from codespar - 127 actively maintained, 269 combined GitHub stars, oldest repo from Mar 2026. Full record: all servers from codespar.
- mcp-asaas MCP server for Asaas - billing automation, Pix, boleto, credit card, subscriptions ★ 269
- mcp-omie MCP server for Omie - ERP, customers, products, orders, invoices, financials ★ 269
- mcp-sendgrid MCP server for SendGrid - global transactional + marketing email (Twilio-owned) ★ 269
- mcp-evolution-api MCP server for Evolution API - WhatsApp messaging, instances, contacts ★ 269
- mcp-stripe-acp Stripe ACP - AI agent checkout, payment delegation, products, invoices ★ 269
- mcp-mercado-bitcoin MCP server for Mercado Bitcoin - Brazilian crypto exchange, trading, orderbook, withdrawals ★ 269
05 · Facts
- repository
- github.com/codespar/mcp-dev-latam
- category
- security - actively maintained as of 2026-08-25.
- registry
- io.github.codespar/mcp-sicoob (active, first published 2026-06-20 · 2 versions)
- packages
- npm:@codespar/mcp-sicoob
06 · Sicoob FAQ
Is Sicoob still maintained?
Yes - as of 2026-08-25, its last commit was 2026-08-12. We re-verify nightly.
What can Sicoob do?
With this server connected, an agent can create an immediate Pix charge (cob) with QR code, retrieve an immediate Pix charge by its txid, list immediate Pix charges (cob) registered by the merchant within a date range, and create a Pix charge with due date (cobv) - boleto-like Pix payable on or after a due date with optional fin...
How do I install Sicoob?
Run `npx -y @codespar/mcp-sicoob`. The README documents 6 environment variables (SICOOB_CLIENT_ID, SICOOB_CLIENT_SECRET, SICOOB_CERT_PATH…) to set first. Set SICOOB_CLIENT_ID, SICOOB_CLIENT_SECRET, SICOOB_CERT_PATH, SICOOB_KEY_PATH, MCP_HTTP before connecting. SICOOB_ENV is optional or environment-specific per the README. You can also paste the ready-made client config above.
Does Sicoob run locally?
Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.
07 · Alternatives to Sicoob
Alternatives to Sicoob
Maintained security servers if Sicoob isn't the fit.
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,102 · 2026-08-24
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 632 · 2026-08-24
- Decionis MCP Server Fail-closed policy gate for AI agent actions, with local evaluation and native pre-tool hooks. ★ 533 · 2026-08-24
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 470 · 2026-08-25
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 409 · 2026-08-23
- CrowdStrike Falcon MCP Server Connects AI agents with CrowdStrike Falcon for security analysis and automation. ★ 239 · 2026-08-24
Pairs well with
Servers that cover what Sicoob doesn't - only shown when the pairing reason fits the companion.