← Index

io.github.brunovicco/openfinance-br-mcp

io.github.brunovicco/openfinance-br-mcp·v0.2.0·Finance & Payments

Secure Open Finance Brasil MCP server with typed tools and a credential-free mock mode

In-path gate · all MCP tools

Using io.github.brunovicco/openfinance-br-mcp in Claude, Cursor, Gemini CLI, Cline, or Zed?

MCP tool contracts can change remotely with no version bump. The mcpindex gate pins each contract and HOLDs the call when it drifts-before your agent acts. Zero credentials. This is not the package install for this server itself (use Install this server for that).

Install the mcpindex gate (one command)

Rewrites your MCP host config so each server launches behind the gate. Inspect first: curl -fsSL https://mcpindex.ai/install.sh | less

curl -fsSL https://mcpindex.ai/install.sh | sh
Auditable install path →Watch it hold a drift →
Trust verdict · v1 advisory · method
NOT YET SCREENEDno verdict on file

Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.

Own this server? Screen its description →

Environment variables
ENVIRONMENT

'mock' (default, no credentials needed - runs entirely in-memory), 'sandbox', or 'production'

CLIENT_ID

Client ID registered with the participating institution. Required unless ENVIRONMENT=mock

PRIVATE_KEY_PATH

Path to the RSA private key used for private_key_jwt and JAR signing outside mock mode

PRIVATE_KEY_KID

Key ID matching the registered client JWKS entry outside mock mode

MTLS_CERT_PATH

Path to the client mTLS certificate used outside mock mode

MTLS_KEY_PATH

Path to the client mTLS private key used outside mock mode

REDIS_URL
secret

Optional Redis connection URL for persistent consent and token state

ANTHROPIC_API_KEY
secret

Required only when calling list_transactions with categorize=true (DSPy transaction categorization)

MCP quality score · maturity, not trust · methodology
freshness
25
completeness
10
installability
25
documentation
15
stability
5
Alternatives in Finance & Payments
Agentic Terminal Directory
ai.agenticterminal/directory

Verified merchants accepting agentic payments on Lightning/L402/BOLT12/USDT — search, verify, pay.

AgentUtility Edge Finance
ai.agentutility/mcp-edge-finance

MCP server for the @agentutility edge-finance cluster — pay-per-call x402 tools, no API keys, USDC…

Authoryze
ai.authoryze/authoryze

Payment infrastructure for AI agents: spending rules, approval flows, single-use virtual cards.