
Security News
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.
@codespar/mcp-bigdatacorp
Advanced tools
MCP server for BigDataCorp — Brazilian data enrichment + KYC (CPF/CNPJ/vehicle/property/antifraud datasets)
MCP server for BigDataCorp — the Brazilian data-enrichment + KYC platform. CPF / CNPJ / vehicle / property / antifraud datasets used as the standard rail in BR e-commerce + lending agents for KYC, AML, and fraud scoring.
Add to your claude_desktop_config.json:
{
"mcpServers": {
"bigdatacorp": {
"command": "npx",
"args": ["@codespar/mcp-bigdatacorp"],
"env": {
"BIGDATACORP_ACCESS_TOKEN": "your-access-token",
"BIGDATACORP_TOKEN_ID": "your-token-id"
}
}
}
}
Same config in .cursor/mcp.json.
| Tool | BigDataCorp endpoint | Notes |
|---|---|---|
persons_lookup | POST /v1/datasets/persons | CPF → name, DOB, mother's name, addresses, contacts, deceased flag |
companies_lookup | POST /v1/datasets/companies | CNPJ → razão social, capital, partners, address, CNAE |
vehicles_lookup | POST /v1/datasets/vehicles | Plate / chassis / RENAVAM → make, model, FIPE, ownership, restrictions |
properties_lookup | POST /v1/datasets/properties | Address or registration → owner history + value estimate |
| Tool | BigDataCorp endpoint | Notes |
|---|---|---|
financial_data | POST /v1/datasets/persons | Income, score, declared assets, banking, default history |
employment_data | POST /v1/datasets/persons | Current employer, history, monthly income, category |
sanctions_check | POST /v1/datasets/persons | OFAC / UN / EU / BR PEP / CNJ / INSS / IBAMA screening |
social_signals | POST /v1/datasets/persons | Instagram / LinkedIn / Twitter / Facebook presence |
| Tool | BigDataCorp endpoint | Notes |
|---|---|---|
antifraud_score | POST /v1/datasets/antifraud | Composite fraud score (0-1000) + decision recommendation |
address_validation | POST /v1/datasets/addresses | CORREIOS + IBGE normalization + geocode |
BigDataCorp uses paired headers (not Bearer):
AccessToken: <BIGDATACORP_ACCESS_TOKEN>
TokenId: <BIGDATACORP_TOKEN_ID>
Both are required on every request. Issue both credentials from the BigDataCorp platform dashboard:
| Variable | Required | Description |
|---|---|---|
BIGDATACORP_ACCESS_TOKEN | yes | AccessToken header value |
BIGDATACORP_TOKEN_ID | yes | TokenId header value (paired) |
BIGDATACORP_API_BASE | no | Override base URL (default https://plataforma.bigdatacorp.com.br) |
Three BR identity rails in this catalog, each with a different specialty:
| Provider | Strength | Best for |
|---|---|---|
| BigDataCorp | Broad data enrichment + antifraud | KYC + AML + credit decisioning |
Certta (@codespar/mcp-certta) | KYC + biometrics + ICP-Brasil signature | Onboarding pipelines with signed contracts |
Caf (@codespar/mcp-caf) | KYC + Trust Platform orchestration | Hosted onboarding flows with policy rules |
Need governance, budget limits, and audit trails for agent identity calls? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.
MIT
FAQs
MCP server for BigDataCorp — Brazilian data enrichment + KYC (CPF/CNPJ/vehicle/property/antifraud datasets)
We found that @codespar/mcp-bigdatacorp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.