← Index

io.github.codespar/mcp-banco-do-brasil

io.github.codespar/mcp-banco-do-brasil·v0.1.0-alpha.3·Other

MCP server for Banco do Brasil — Pix, Cobrança (boleto), Conta-Corrente, Arrecadação (OAuth2 + mTLS)

Trust verdict · v1 advisory · method
NOT YET SCREENEDno verdict on file

Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.

Own this server? Screen its description →

Environment variables
BB_CLIENT_ID
required

Banco do Brasil OAuth client_id issued via developers.bb.com.br after contract onboarding.

BB_CLIENT_SECRET
requiredsecret

Banco do Brasil OAuth client_secret.

BB_DEVELOPER_APP_KEY
requiredsecret

BB Developer App Key (gw-dev-app-key) — appended as a query param on most BB API calls.

BB_CERT_PATH

Absolute path to the mTLS client certificate (.crt or .pem). BACEN mandates mTLS for Pix v2 in production.

BB_KEY_PATH
secret

Absolute path to the mTLS private key (.key or .pem).

BB_ENV

Environment: 'sandbox' or 'production'. Defaults to 'sandbox'.

MCP quality score · maturity, not trust · methodology
freshness
25
completeness
10
installability
25
documentation
15
stability
5
Alternatives in Other