
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
@codespar/mcp-braspag
Advanced tools
MCP server for Braspag — Cielo's enterprise orchestration, token vault (Cartão Protegido), recurrence, and marketplace split
MCP server for Braspag — Cielo Group's enterprise orchestration layer: multi-acquirer routing, token vault (Cartão Protegido), recurrence, marketplace split, antifraud orchestration.
CodeSpar ships two Cielo Group servers with different business contracts:
| Server | Product | What it is | Who uses it |
|---|---|---|---|
@codespar/mcp-cielo | Cielo Acquirer | Direct card acquiring rails (credit, debit, boleto, Pix) | Any merchant taking cards through Cielo |
@codespar/mcp-braspag (this) | Braspag / Pagador | Enterprise orchestration on top of any acquirer | Enterprise BR retail (Magalu-tier): multi-acquirer routing, token vault, marketplace split |
Braspag orchestrates across acquirers. You keep your Cielo (or Rede, or Stone) acquiring contract and layer Braspag on top for: smart routing, failover, vaulting cards once and reusing across acquirers (Cartão Protegido), driving recurrence, and splitting marketplace capture across sub-merchants.
Add to ~/.config/claude/claude_desktop_config.json:
{
"mcpServers": {
"braspag": {
"command": "npx",
"args": ["-y", "@codespar/mcp-braspag"],
"env": {
"BRASPAG_MERCHANT_ID": "your-merchant-uuid",
"BRASPAG_MERCHANT_KEY": "your-merchant-key",
"BRASPAG_ENV": "sandbox"
}
}
}
}
claude mcp add braspag -- npx @codespar/mcp-braspag
Add to .cursor/mcp.json or .vscode/mcp.json:
{
"servers": {
"braspag": {
"command": "npx",
"args": ["-y", "@codespar/mcp-braspag"],
"env": {
"BRASPAG_MERCHANT_ID": "your-merchant-uuid",
"BRASPAG_MERCHANT_KEY": "your-merchant-key",
"BRASPAG_ENV": "sandbox"
}
}
}
}
| Tool | Purpose |
|---|---|
create_sale | Create a sale on the Braspag Transaction API (POST /sales). |
capture_sale | Capture a pre-authorized sale (PUT /sales/{paymentId}/capture). |
void_sale | Void / cancel a sale (PUT /sales/{paymentId}/void). |
create_recurrent | Create a recurrent payment schedule (POST /recurrentPayments). |
disable_recurrent | Deactivate a recurrent payment (PUT /recurrentPayments/{recurrentPaymentId}/Deactivate). |
update_recurrent_amount | Update the charged amount on a recurrent payment (PUT /recurrentPayments/{recurrentPaymentId}/Amount). |
get_sale | Get sale detail by PaymentId (GET /sales/{paymentId} — Query API). |
get_sale_by_order_id | Look up sale(s) by MerchantOrderId (GET /sales?merchantOrderId=X — Query API). |
get_recurrent | Get a recurrent payment's configuration and history (GET /recurrentPayments/{recurrentPaymentId} — Query API). |
tokenize_card | Tokenize a card into the Braspag vault / Cartão Protegido (POST /card). |
get_card_token | Retrieve the stored card data associated with a Cartão Protegido token (GET /card/{token}). |
create_split_sale | Create a sale with marketplace split rules (POST /sales with Payment.SplitPayments). |
create_sale_3ds | Create a 3DS-authenticated credit sale (POST /sales). |
create_zero_auth | Zero-dollar authorization / card validation (POST /zeroauth). |
create_boleto_sale | Convenience wrapper to create a Boleto sale (POST /sales with Payment.Type=Boleto). |
create_pix_sale | Convenience wrapper to create a Pix sale (POST /sales with Payment.Type=Pix). |
reactivate_recurrent | Reactivate a previously deactivated recurrent payment (PUT /recurrentPayments/{recurrentPaymentId}/Reactiva... |
update_recurrent_next_payment | Update the NextPaymentDate on a recurrent payment (PUT /recurrentPayments/{recurrentPaymentId}/NextPaymentD... |
update_recurrent_payment | Update the Payment (CreditCard + Customer) on a recurrent schedule (PUT /recurrentPayments/{recurrentPaymen... |
create_antifraud_analysis | Submit a standalone Antifraud analysis (POST /fraudanalysis) through Braspag's antifraud orchestration (Cyb... |
delete_card_token | Delete a Cartão Protegido vault token (DELETE /card/{token}). |
create_split_capture | Capture a previously authorized split sale with overridden per-sub-merchant amounts (PUT /sales/{paymentId}... |
Braspag uses MerchantId (UUID) and MerchantKey (secret) headers on both the Transaction API and the Query API.
| Env | Transaction API | Query API |
|---|---|---|
sandbox (default) | https://apisandbox.braspag.com.br/v2 | https://apiquerysandbox.braspag.com.br/v2 |
production | https://api.braspag.com.br/v2 | https://apiquery.braspag.com.br/v2 |
Set via BRASPAG_ENV=production to switch.
| Variable | Required | Description |
|---|---|---|
BRASPAG_MERCHANT_ID | Yes | Merchant UUID |
BRASPAG_MERCHANT_KEY | Yes | Merchant secret key |
BRASPAG_ENV | No | sandbox (default) or production |
create_sale_with_card_token — convenience wrapper that uses a Cartão Protegido tokendelete_card_token — revoke a vault tokenget_sale_antifraud — Query API antifraud detailupdate_recurrent_payment — update non-amount fields on a recurrentcreate_zero_auth — zero-dollar auth for card validationWant to contribute? Open a PR or request a tool.
Need governance, budget limits, and audit trails for agent-driven payments on Braspag? CodeSpar Enterprise adds a policy engine, payment routing, and compliance templates on top of these MCP servers.
MIT
FAQs
MCP server for Braspag — Cielo's enterprise orchestration, token vault (Cartão Protegido), recurrence, and marketplace split
The npm package @codespar/mcp-braspag receives a total of 31 weekly downloads. As such, @codespar/mcp-braspag popularity was classified as not popular.
We found that @codespar/mcp-braspag demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.