
Company News
Free Business Plan Upgrades for Open Source Maintainers
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.
@codespar/mcp-pluggy
Advanced tools
MCP server for Pluggy — Open Finance Brasil aggregator (ITP/TPP). Pluggy holds the ICP-Brasil certificate and runs Dynamic Client Registration with each Brazilian bank, so you integrate against one API instead of N.
Add to your claude_desktop_config.json:
{
"mcpServers": {
"pluggy": {
"command": "npx",
"args": ["@codespar/mcp-pluggy"],
"env": {
"PLUGGY_CLIENT_ID": "your-client-id",
"PLUGGY_CLIENT_SECRET": "your-client-secret"
}
}
}
}
Same config in .cursor/mcp.json or VS Code's MCP integration.
| Tool | Pluggy endpoint | Notes |
|---|---|---|
list_connectors | GET /connectors | Filter by name / types / countries / sandbox |
get_connector | GET /connectors/{id} | Single connector definition |
list_categories | GET /categories | Transaction categorization taxonomy |
| Tool | Pluggy endpoint | Notes |
|---|---|---|
create_connect_token | POST /connect_token | Embed Pluggy Connect widget on the client |
| Tool | Pluggy endpoint | Notes |
|---|---|---|
create_item | POST /items | New bank connection from credentials |
list_items | GET /items | Lists existing connections |
get_item | GET /items/{id} | Single connection |
update_item | PATCH /items/{id} | Refresh credentials / trigger sync |
delete_item | DELETE /items/{id} | Revoke connection |
| Tool | Pluggy endpoint | Notes |
|---|---|---|
list_accounts | GET /accounts?itemId=... | Checking / savings / credit / investment |
get_account | GET /accounts/{id} | Single account |
list_transactions | GET /transactions?accountId=... | Date-range filter |
get_transaction | GET /transactions/{id} | Single transaction |
list_identities | GET /identity?itemId=... | Legal name + document + address |
| Tool | Pluggy endpoint | Notes |
|---|---|---|
create_payment_intent | POST /payments/intents | Initiate a Pluggy Payments intent |
get_payment_intent | GET /payments/intents/{id} | Poll status |
Pluggy uses an OAuth2 client-credentials flow:
POST /auth with clientId + clientSecretX-API-KEYIssue credentials at the Pluggy dashboard:
Pluggy provides sandbox connectors with synthetic accounts and transactions. The sandbox uses the same API endpoint (https://api.pluggy.ai); the connector list returned by /connectors includes sandbox banks (Pluggy Bank, BR · Pluggy Bank).
| Variable | Required | Description |
|---|---|---|
PLUGGY_CLIENT_ID | yes | Client ID from the Pluggy dashboard |
PLUGGY_CLIENT_SECRET | yes | Client secret from the Pluggy dashboard |
PLUGGY_API_BASE | no | Override API base (default https://api.pluggy.ai) |
If you only need the MCP server, install the package directly. If you're building a commerce agent that needs Pluggy + Pix + NF-e + WhatsApp + dashboard governance, look at the managed tier.
Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.
MIT
FAQs
MCP server for Pluggy — Open Finance Brasil aggregator (ITP/TPP)
We found that @codespar/mcp-pluggy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.