@codespar/mcp-dlocal

@codespar/mcp-dlocal

MCP server for dLocal — LatAm cross-border payments.

One API, 15+ LatAm countries, local payment methods (Pix, OXXO, PSE, SPEI, Boleto, cards). The abstraction that per-country PSP servers cannot provide on their own.

Tools (18)

Tool	Purpose
create_payment	Create a payment (pay-in) in a LatAm country using a local payment method.
get_payment	Get payment status and full detail by dLocal payment id.
get_payment_by_order_id	Get a payment by the merchant-side order_id supplied at creation time.
list_payments	List payments with optional date / country / status filters.
capture_payment	Capture an AUTHORIZED card payment.
cancel_payment	Cancel an authorized-but-not-captured payment, or void a PENDING payment.
create_refund	Refund a captured payment.
get_refund	Get refund status by refund id.
list_refunds	List refunds, optionally scoped to a payment_id.
create_payout	Send money out to a beneficiary in a LatAm country.
get_payout	Get payout status by dLocal payout id.
get_payout_by_external_id	Get a payout by the merchant external_id / order_id supplied at creation time.
list_payouts	List payouts with optional date / country / status filters.
list_payment_methods	List all payment methods available for a given country.
get_balance	Get the merchant's current available balance per currency.
get_exchange_rate	Query the dLocal FX rate for a destination country/currency pair.
create_card_token	Tokenize a card for use in DIRECT-flow create_payment.
validate_document	Validate a LatAm tax/identity document (CPF or CNPJ in BR, CUIT/CUIL/DNI in AR, RUT in CL/UY, RFC/CURP in M...

Install

npm install @codespar/mcp-dlocal

Environment

DLOCAL_LOGIN="..."        # X-Login header value
DLOCAL_TRANS_KEY="..."    # X-Trans-Key header value
DLOCAL_SECRET_KEY="..."   # HMAC secret used to sign V2 requests
DLOCAL_BASE_URL="..."     # Optional. Defaults to https://api.dlocal.com. Use https://sandbox.dlocal.com for sandbox.

Authentication

Every request signs with V2 HMAC-SHA256:

X-Date: <ISO-8601 UTC>
X-Login: <login>
X-Trans-Key: <trans_key>
Authorization: V2-HMAC-SHA256, Signature: <hex(hmac_sha256(login + x_date + body, secret_key))>

The server handles signing automatically — you only configure the three env vars.

Run

# stdio (default — for Claude Desktop, Cursor, etc)
npx @codespar/mcp-dlocal

# HTTP (for server-to-server testing)
MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-dlocal

Countries covered

Argentina, Bolivia, Brazil, Chile, Colombia, Costa Rica, Ecuador, Guatemala, Mexico, Peru, Uruguay, and more. Use list_payment_methods to enumerate available methods per country at runtime rather than hard-coding.

License

MIT