
Company News
Free Business Plan Upgrades for Open Source Maintainers
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.
@codespar/mcp-nubank
Advanced tools
MCP server for Nubank — Brazilian neobank via Open Finance, accounts, PIX, transfers
Alpha release — published under the
alphanpm dist-tag. Endpoint paths follow public docs and BACEN/provider conventions but have not been fully live-validated. Pin exact versions during0.x.x-alpha. Install withnpm install <pkg>@alpha.
MCP server for Nubank — Brazil's largest digital bank, using the Open Finance Brasil standard.
# Set your credentials
export NUBANK_CLIENT_ID="your-client-id"
export NUBANK_CLIENT_SECRET="your-client-secret"
export NUBANK_CERT_PATH="/path/to/certificate.pem"
# Run via stdio
npx tsx packages/payments/nubank/src/index.ts
# Run via HTTP
npx tsx packages/payments/nubank/src/index.ts --http
| Variable | Required | Description |
|---|---|---|
NUBANK_CLIENT_ID | Yes | OAuth2 client ID |
NUBANK_CLIENT_SECRET | Yes | OAuth2 client secret |
NUBANK_CERT_PATH | Yes | Path to mTLS certificate file |
MCP_HTTP | No | Set to "true" to enable HTTP transport |
MCP_PORT | No | HTTP port (default: 3000) |
| Tool | Purpose |
|---|---|
get_accounts | List all accounts (checking, savings) |
get_balance | Get account balance |
get_transactions | List transactions with filters |
get_credit_card_bill | Get credit card bill details |
get_investments | List investments and yields |
initiate_pix | Initiate a PIX transfer |
get_pix_keys | List registered PIX keys |
get_statement | Get account statement for a period |
get_profile | Get authenticated user profile information |
list_cards | List debit and credit cards |
get_pix_transfer | Get status and details of a specific PIX transfer |
schedule_pix | Schedule a future-dated PIX transfer |
cancel_scheduled_pix | Cancel a previously scheduled PIX transfer |
create_pix_key | Register a new PIX key for the authenticated account |
delete_pix_key | Remove a registered PIX key |
get_card_details | Get details for a single debit or credit card |
block_card | Block a card (reports lost/stolen or temporarily disables it) |
unblock_card | Unblock a previously blocked card (only valid for temporary blocks) |
get_credit_card_transactions | List transactions for a given credit card bill |
pay_credit_card_bill | Pay a credit card bill from a linked account |
get_boleto | Retrieve boleto details by barcode or digitable line |
pay_boleto | Pay a boleto from a linked account |
Uses OAuth2 client credentials flow with mTLS certificate. Register your application through Nubank's Open Finance portal to obtain credentials.
Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.
Set these environment variables before launching the server:
NUBANK_CLIENT_ID (required, secret) — API key/token for nubankIssue credentials at the provider's developer portal: https://openfinancebrasil.org.br.
MIT
FAQs
MCP server for Nubank — Brazilian neobank via Open Finance, accounts, PIX, transfers
We found that @codespar/mcp-nubank demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.