
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
@codespar/mcp-cielo
Advanced tools
MCP server for Cielo — card acquiring, boleto, and recurrent payments
Add to ~/.config/claude/claude_desktop_config.json:
{
"mcpServers": {
"cielo": {
"command": "npx",
"args": ["-y", "@codespar/mcp-cielo"],
"env": {
"CIELO_MERCHANT_ID": "your-merchant-id",
"CIELO_MERCHANT_KEY": "your-merchant-key",
"CIELO_SANDBOX": "true"
}
}
}
}
claude mcp add cielo -- npx @codespar/mcp-cielo
Add to .cursor/mcp.json or .vscode/mcp.json:
{
"servers": {
"cielo": {
"command": "npx",
"args": ["-y", "@codespar/mcp-cielo"],
"env": {
"CIELO_MERCHANT_ID": "your-merchant-id",
"CIELO_MERCHANT_KEY": "your-merchant-key",
"CIELO_SANDBOX": "true"
}
}
}
}
| Tool | Purpose |
|---|---|
create_sale | Create a credit/debit card sale in Cielo |
get_sale | Get sale details by PaymentId |
capture_sale | Capture a pre-authorized sale |
cancel_sale | Cancel/void a sale (full or partial) |
create_recurrent | Create a recurrent (recurring) credit card payment |
get_recurrent | Get recurrent payment details |
tokenize_card | Tokenize a credit card for future use |
create_boleto | Create a boleto payment in Cielo |
create_pix | Create a Pix payment in Cielo (generates QR code) |
get_pix | Get Pix payment details and QR code by PaymentId |
create_debit | Create a debit card sale in Cielo (requires 3DS authentication) |
create_ewallet | Create a digital wallet payment (Google Pay, Samsung Pay, Apple Pay) |
get_antifraud | Get anti-fraud analysis details for a payment |
create_sale_with_token | Create a credit card sale using a previously stored CardToken (avoids re-entering card data) |
update_recurrent_amount | Update the amount of an existing recurrent payment |
update_recurrent_next_date | Update the next charge date of an existing recurrent payment |
deactivate_recurrent | Deactivate (pause) a recurrent payment so it stops charging |
reactivate_recurrent | Reactivate a previously deactivated recurrent payment |
create_payment_link | Create a Cielo Link de Pagamento (shareable checkout URL) |
get_payment_link | Get a Cielo Link de Pagamento by its id |
zero_auth | Zero-dollar authorization to validate a card without charging (card or CardToken) |
create_sale_with_3ds | Create a credit card sale using 3DS 2.0 authentication data (from 3DS flow) |
Cielo uses MerchantId and MerchantKey headers for authentication.
Cielo provides a sandbox at apisandbox.cieloecommerce.cielo.com.br. Set CIELO_SANDBOX=true to use it.
| Variable | Required | Description |
|---|---|---|
CIELO_MERCHANT_ID | Yes | Merchant ID from Cielo |
CIELO_MERCHANT_KEY | Yes | Merchant Key from Cielo |
CIELO_SANDBOX | No | Set to "true" for sandbox mode |
create_pix — Create a Pix paymentget_pix — Get Pix payment detailscreate_debit — Create a debit card paymentcreate_ewallet — Create an e-wallet payment (Apple Pay, Google Pay)get_antifraud — Get anti-fraud analysis for a transactionbatch_captures — Capture multiple pre-authorized transactionsvelocity_rules — Configure velocity/anti-fraud rulesWant to contribute? Open a PR or request a tool.
Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.
MIT
FAQs
MCP server for Cielo — credit card, debit, boleto, recurrent payments
We found that @codespar/mcp-cielo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.