
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
@codespar/mcp-pluggy
Advanced tools
MCP server for Pluggy — Open Finance Brasil aggregator (ITP/TPP). Pluggy holds the ICP-Brasil certificate and runs Dynamic Client Registration with each Brazilian bank, so you integrate against one API instead of N.
Add to your claude_desktop_config.json:
{
"mcpServers": {
"pluggy": {
"command": "npx",
"args": ["@codespar/mcp-pluggy"],
"env": {
"PLUGGY_CLIENT_ID": "your-client-id",
"PLUGGY_CLIENT_SECRET": "your-client-secret"
}
}
}
}
Same config in .cursor/mcp.json or VS Code's MCP integration.
| Tool | Pluggy endpoint | Notes |
|---|---|---|
list_connectors | GET /connectors | Filter by name / types / countries / sandbox |
get_connector | GET /connectors/{id} | Single connector definition |
list_categories | GET /categories | Transaction categorization taxonomy |
| Tool | Pluggy endpoint | Notes |
|---|---|---|
create_connect_token | POST /connect_token | Embed Pluggy Connect widget on the client |
| Tool | Pluggy endpoint | Notes |
|---|---|---|
create_item | POST /items | New bank connection from credentials |
list_items | GET /items | Lists existing connections |
get_item | GET /items/{id} | Single connection |
update_item | PATCH /items/{id} | Refresh credentials / trigger sync |
delete_item | DELETE /items/{id} | Revoke connection |
| Tool | Pluggy endpoint | Notes |
|---|---|---|
list_accounts | GET /accounts?itemId=... | Checking / savings / credit / investment |
get_account | GET /accounts/{id} | Single account |
list_transactions | GET /transactions?accountId=... | Date-range filter |
get_transaction | GET /transactions/{id} | Single transaction |
list_identities | GET /identity?itemId=... | Legal name + document + address |
| Tool | Pluggy endpoint | Notes |
|---|---|---|
create_payment_intent | POST /payments/intents | Initiate a Pluggy Payments intent |
get_payment_intent | GET /payments/intents/{id} | Poll status |
Pluggy uses an OAuth2 client-credentials flow:
POST /auth with clientId + clientSecretX-API-KEYIssue credentials at the Pluggy dashboard:
Pluggy provides sandbox connectors with synthetic accounts and transactions. The sandbox uses the same API endpoint (https://api.pluggy.ai); the connector list returned by /connectors includes sandbox banks (Pluggy Bank, BR · Pluggy Bank).
| Variable | Required | Description |
|---|---|---|
PLUGGY_CLIENT_ID | yes | Client ID from the Pluggy dashboard |
PLUGGY_CLIENT_SECRET | yes | Client secret from the Pluggy dashboard |
PLUGGY_API_BASE | no | Override API base (default https://api.pluggy.ai) |
If you only need the MCP server, install the package directly. If you're building a commerce agent that needs Pluggy + Pix + NF-e + WhatsApp + dashboard governance, look at the managed tier.
Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.
MIT
FAQs
MCP server for Pluggy — Open Finance Brasil aggregator (ITP/TPP)
The npm package @codespar/mcp-pluggy receives a total of 30 weekly downloads. As such, @codespar/mcp-pluggy popularity was classified as not popular.
We found that @codespar/mcp-pluggy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.