
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@codespar/mcp-rede
Advanced tools
MCP server for Rede — Itaú-owned Brazilian card acquirer. Authorize/capture/refund, zero-auth, card tokens, and native recurrences.
MCP server for Rede — Itaú-owned Brazilian card acquirer.
Rede closes the "big four" BR acquirer quadrant alongside Cielo, Stone, and Getnet. Merchants with an Itaú commercial contract integrate directly via eRede instead of going through a PSP.
| Tool | Purpose |
|---|---|
authorize_transaction | Authorize a credit card transaction (optional auto-capture) |
capture_transaction | Capture a previously authorized transaction |
cancel_transaction | Cancel an uncaptured authorization (refund endpoint, full amount) |
refund_transaction | Refund a captured transaction (full or partial) |
get_transaction | Retrieve by TID or merchant reference |
zero_auth | Validate a card without charging (zero-auth / account verification) |
tokenize_card | Store a card as a reusable token |
delete_token | Delete a stored card token |
create_recurrence | Create a native recurrence (subscription) |
get_recurrence | Retrieve a recurrence by id |
disable_recurrence | Disable an active recurrence |
npm install @codespar/mcp-rede
REDE_PV="..." # Merchant filiação (PV)
REDE_TOKEN="..." # Security token (paired with PV)
REDE_ENV="sandbox" # Optional. 'sandbox' (default) or 'production'
HTTP Basic auth with base64(PV:TOKEN). The server builds the Authorization header on every request — transparent to callers.
https://api.userede.com.br/erede/v1https://sandbox-erede.useredecloud.com.br/v1# stdio (default)
npx @codespar/mcp-rede
# HTTP
MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-rede
MIT
FAQs
MCP server for Rede — Itaú-owned Brazilian card acquirer. Authorize/capture/refund, zero-auth, card tokens, and native recurrences.
The npm package @codespar/mcp-rede receives a total of 14 weekly downloads. As such, @codespar/mcp-rede popularity was classified as not popular.
We found that @codespar/mcp-rede demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.