
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@codespar/mcp-celcoin
Advanced tools
MCP server for Celcoin — BaaS infrastructure for Pix, boleto, transfers, and top-ups
Add to ~/.config/claude/claude_desktop_config.json:
{
"mcpServers": {
"celcoin": {
"command": "npx",
"args": ["-y", "@codespar/mcp-celcoin"],
"env": {
"CELCOIN_CLIENT_ID": "your-client-id",
"CELCOIN_CLIENT_SECRET": "your-client-secret",
"CELCOIN_SANDBOX": "true"
}
}
}
}
claude mcp add celcoin -- npx @codespar/mcp-celcoin
Add to .cursor/mcp.json or .vscode/mcp.json:
{
"servers": {
"celcoin": {
"command": "npx",
"args": ["-y", "@codespar/mcp-celcoin"],
"env": {
"CELCOIN_CLIENT_ID": "your-client-id",
"CELCOIN_CLIENT_SECRET": "your-client-secret",
"CELCOIN_SANDBOX": "true"
}
}
}
}
| Tool | Description |
|---|---|
create_pix_payment | Create a Pix payment via Celcoin |
get_pix_payment | Get Pix payment details by transaction ID |
create_boleto | Create a boleto payment via Celcoin |
get_boleto | Get boleto details by transaction ID |
create_transfer | Create a bank transfer (TED/DOC) via Celcoin |
get_balance | Get account balance at Celcoin |
list_banks | List available banks in Brazil (ISPB codes) |
create_topup | Create a mobile/service top-up (recarga) via Celcoin |
Celcoin uses OAuth2 client credentials. The server automatically manages token refresh.
Celcoin provides a sandbox at sandbox-api.celcoin.com.br. Set CELCOIN_SANDBOX=true to use it.
| Variable | Required | Description |
|---|---|---|
CELCOIN_CLIENT_ID | Yes | OAuth2 client ID |
CELCOIN_CLIENT_SECRET | Yes | OAuth2 client secret |
CELCOIN_SANDBOX | No | Set to "true" for sandbox mode |
get_pix_key — Get Pix key details (DICT lookup)create_bill_payment — Create a bill/utility paymentget_bill_payment — Get bill payment detailscreate_scheduled_transfer — Create a scheduled transferlist_providers — List available service providersbatch_topups — Process multiple mobile top-upsdetailed_reports — Generate detailed transaction reportsWant to contribute? Open a PR or request a tool.
Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.
MIT
FAQs
MCP server for Celcoin — Pix, boleto, transfers, bill payments, top-ups
The npm package @codespar/mcp-celcoin receives a total of 22 weekly downloads. As such, @codespar/mcp-celcoin popularity was classified as not popular.
We found that @codespar/mcp-celcoin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.