C6 MCP Server
mcp-c6 is an MCP server in the security category that exposes 14 tools to an agent, covering pix, read & search, boleto.
People who work with pix, cob and boleto and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.
One of 127 MCP servers published from codespar/mcp-dev-latam. Stars and repository activity are shared across all of them. See all 127 →
VERIFIED ACTIVE
LAST COMMIT 2026-08-29 · VERIFIED 2026-09-18
MIT · TypeScript servers · how we verify → /methodology
01 · Install C6
before you install - you'll need
Set C6_CLIENT_ID, C6_CLIENT_SECRET, C6_CERT_PATH, C6_KEY_PATH before connecting. C6_ENV is optional or environment-specific per the README.
Claude Code
claude mcp add codespar-mcp-dev-latam-packages-banking- -- npx -y @codespar/mcp-c6 Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"codespar-mcp-dev-latam-packages-banking-": {
"command": "npx",
"args": [
"-y",
"@codespar/mcp-c6"
]
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions
license MIT - declared in the repository
npm package @codespar/mcp-c6 - published under the repo owner's npm scope (@codespar)
registry namespace io.github.codespar is GitHub-verified and matches the repo owner
03 · What C6 can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
What you can build
With this server connected, an agent can create a Pix immediate charge (cob) with QR code, retrieve a Pix immediate charge (cob) by its txid, create a Pix charge with due date (cobv) - used for boleto-like Pix where the payer can pay at or after a d.., and retrieve a Pix due-date charge (cobv) by its txid.
Capability map
Tools grouped from the project's README - what C6 lets an agent do.
Pix
7 tools - e.g. Create a Pix immediate charge (cob) with QR code.; Retrieve a Pix immediate charge (cob) by its txid.; List Pix immediate charges (cob) registered by the merchant within a date range.
create_pix_cob · get_pix_cob · list_pix_cob · create_pix_cobv · get_pix_cobv · register_pix_key…
read & search
3 tools - e.g. Mint or return a cached OAuth2 client_credentials bearer token for the C6 Developer Portal.; Retrieve the current balance snapshot for a merchant account.; Retrieve account statement transactions for a…
get_oauth_token · get_account_balance · get_statement
Boleto
3 tools - e.g. Issue a boleto via C6 Cobrança.; Retrieve a boleto by its C6 identifier (id or nosso_numero).; Cancel (baixa) an outstanding boleto before payment.
create_boleto · get_boleto · cancel_boleto
Resolve
1 tool - e.g. Resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix.
resolve_dict_key
Limitations (from the README)
- Paths are unverified. See the TODO(verify) markers in src/index.ts. Onboarded merchants should validate against their portal-issued OpenAPI spec and open a PR. - Sandbox host is a guess. C6 issues a sandbox subdomain per merchant; override by editing BASE_URL if your provisioned sandbox URL differs.
04 · Who maintains C6
mcp-c6 is maintained by codespar. We track 127 MCP servers from codespar - 127 actively maintained, 271 combined GitHub stars, oldest repo from Mar 2026. Full record: all servers from codespar.
- mcp-brasil-api MCP server for BrasilAPI - CEP, CNPJ, banks, FIPE, holidays, weather ★ 271
- mcp-iugu MCP server for iugu - invoices, subscriptions, customers, payment methods ★ 271
- mcp-asaas MCP server for Asaas - billing automation, Pix, boleto, credit card, subscriptions ★ 271
- mcp-omie MCP server for Omie - ERP, customers, products, orders, invoices, financials ★ 271
- mcp-mercado-bitcoin MCP server for Mercado Bitcoin - Brazilian crypto exchange, trading, orderbook, withdrawals ★ 271
- mcp-sendgrid MCP server for SendGrid - global transactional + marketing email (Twilio-owned) ★ 271
05 · Facts
- repository
- github.com/codespar/mcp-dev-latam
- category
- security - actively maintained as of 2026-09-18.
- registry
- io.github.codespar/mcp-c6 (active, first published 2026-06-20 · 2 versions)
- packages
- npm:@codespar/mcp-c6
06 · C6 FAQ
Is C6 still maintained?
Yes - as of 2026-09-18, its last commit was 2026-08-29. We re-verify nightly.
What can C6 do?
With this server connected, an agent can create a Pix immediate charge (cob) with QR code, retrieve a Pix immediate charge (cob) by its txid, create a Pix charge with due date (cobv) - used for boleto-like Pix where the payer can pay at or after a d.., and retrieve a Pix due-date charge (cobv) by its txid.
How do I install C6?
Run `npx -y @codespar/mcp-c6`. The README documents 5 environment variables (C6_CLIENT_ID, C6_CLIENT_SECRET, C6_CERT_PATH…) to set first. Set C6_CLIENT_ID, C6_CLIENT_SECRET, C6_CERT_PATH, C6_KEY_PATH before connecting. C6_ENV is optional or environment-specific per the README. You can also paste the ready-made client config above.
Does C6 run locally?
Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.
07 · Alternatives to C6
Alternatives to C6
Maintained security servers if C6 isn't the fit.
- Treg To OpenRouter for tools and data. Compare catalog providers and call them from one hosted MCP endpoint. ★ 1,627 · 2026-09-18
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,105 · 2026-09-16
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 652 · 2026-09-17
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 625 · 2026-09-18
- Decionis CommerceGate MCP Commerce preflights, D365 authorization, signed evidence, and reports; no marketplace or ERP writes. ★ 533 · 2026-09-18
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 353 · 2026-09-15
Pairs well with
Servers that cover what C6 doesn't - only shown when the pairing reason fits the companion.