
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
@codespar/mcp-dlocal
Advanced tools
MCP server for dLocal — LatAm cross-border payments, payouts, refunds across 15+ countries via one API
MCP server for dLocal — LatAm cross-border payments.
One API, 15+ LatAm countries, local payment methods (Pix, OXXO, PSE, SPEI, Boleto, cards). The abstraction that per-country PSP servers cannot provide on their own.
| Tool | Purpose |
|---|---|
create_payment | Charge a buyer via local method (card, Pix, OXXO, PSE, SPEI, boleto) |
get_payment | Retrieve payment status |
cancel_payment | Cancel an authorized-but-not-captured payment |
create_refund | Refund a captured payment (full or partial) |
get_refund | Retrieve refund status |
create_payout | Send money out to a beneficiary in local currency |
get_payout | Retrieve payout status |
list_payment_methods | Enumerate available methods per country (dynamic) |
get_balance | Merchant account balance per currency |
npm install @codespar/mcp-dlocal
DLOCAL_LOGIN="..." # X-Login header value
DLOCAL_TRANS_KEY="..." # X-Trans-Key header value
DLOCAL_SECRET_KEY="..." # HMAC secret used to sign V2 requests
DLOCAL_BASE_URL="..." # Optional. Defaults to https://api.dlocal.com. Use https://sandbox.dlocal.com for sandbox.
Every request signs with V2 HMAC-SHA256:
X-Date: <ISO-8601 UTC>
X-Login: <login>
X-Trans-Key: <trans_key>
Authorization: V2-HMAC-SHA256, Signature: <hex(hmac_sha256(login + x_date + body, secret_key))>
The server handles signing automatically — you only configure the three env vars.
# stdio (default — for Claude Desktop, Cursor, etc)
npx @codespar/mcp-dlocal
# HTTP (for server-to-server testing)
MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-dlocal
Argentina, Bolivia, Brazil, Chile, Colombia, Costa Rica, Ecuador, Guatemala, Mexico, Peru, Uruguay, and more. Use list_payment_methods to enumerate available methods per country at runtime rather than hard-coding.
MIT
FAQs
MCP server for dLocal — LatAm cross-border payments, payouts, refunds across 15+ countries via one API
The npm package @codespar/mcp-dlocal receives a total of 20 weekly downloads. As such, @codespar/mcp-dlocal popularity was classified as not popular.
We found that @codespar/mcp-dlocal demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.