Itau MCP Server - install, status & alternatives [2026]

01 · Install Itau

before you install - you'll need

Set ITAU_CLIENT_ID, ITAU_CLIENT_SECRET, ITAU_CERT_PATH, ITAU_KEY_PATH, MCP_HTTP before connecting. ITAU_ENV is optional or environment-specific per the README.

Claude Code

claude mcp add codespar-mcp-dev-latam-packages-banking- -- npx -y @codespar/mcp-itau

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "codespar-mcp-dev-latam-packages-banking-": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-itau"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package @codespar/mcp-itau - published under the repo owner's npm scope (@codespar)

registry namespace io.github.codespar is GitHub-verified and matches the repo owner

03 · What Itau can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

With this server connected, an agent can create a dynamic Pix charge with QR code (cob), retrieve a Pix transaction by its BCB endToEndId (E), resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix, and retrieve a boleto by its Itaú identifier (id or nosso_numero).

Capability map

Tools grouped from the project's README - what Itau lets an agent do.

Pix

9 tools - e.g. Initiate an outbound Pix payment from the merchant's Itaú account.; Create a dynamic Pix charge with QR code (cob).; Retrieve a Pix transaction by its BCB endToEndId (E).

send_pix · create_pix_qr · get_pix · refund_pix · create_pix_cobv · list_pix_charges…

read & search

4 tools - e.g. Mint or return a cached OAuth2 client_credentials bearer token for the Itaú Developer Portal.; Retrieve account statement transactions for a given period.; Query the tariff schedule applicable to the…

get_oauth_token · get_statement · get_tariffs · list_dda_bills

Boleto

4 tools - e.g. Issue a boleto via Itaú Cobrança.; Retrieve a boleto by its Itaú identifier (id or nosso_numero).; Cancel (baixa) an outstanding boleto before payment.

create_boleto · get_boleto · cancel_boleto · get_boleto_pdf

Resolve

1 tool - e.g. Resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix.

resolve_dict_key

Arrecadacao

1 tool - e.g. Pay a utility, tax, or concessionária bill via Itaú Arrecadação.

arrecadacao_pay

run & execute

1 tool - e.g. Send a TED transfer to an account at another bank.

send_ted

Transfer

1 tool - e.g. TAA - transfer between two Itaú accounts (owned by the merchant or a counterparty).

transfer_between_accounts

Schedule

1 tool - e.g. Schedule a future-dated payment (Pix, boleto, arrecadação, or TED).

schedule_payment

Limitations (from the README)

- Paths are unverified. See the TODO(verify) markers in src/index.ts. Onboarded merchants should validate against their portal-issued OpenAPI spec and open a PR. - Sandbox host is a guess. Itaú issues a sandbox subdomain per merchant; override by editing BASE_URL if your provisioned sandbox URL differs. - Arrecadação barcode validation is server-side in this alpha - no client-side mod-10 / mod-11 check yet.

04 · Who maintains Itau

mcp-itau is maintained by codespar. We track 127 MCP servers from codespar - 127 actively maintained, 271 combined GitHub stars, oldest repo from Mar 2026. Full record: all servers from codespar.

05 · Facts

repository: github.com/codespar/mcp-dev-latam
category: security - actively maintained as of 2026-09-18.
registry: io.github.codespar/mcp-itau (active, first published 2026-06-20 · 2 versions)
packages: npm:@codespar/mcp-itau

06 · Itau FAQ

Is Itau still maintained?

Yes - as of 2026-09-18, its last commit was 2026-08-29. We re-verify nightly.

What can Itau do?

With this server connected, an agent can create a dynamic Pix charge with QR code (cob), retrieve a Pix transaction by its BCB endToEndId (E), resolve a DICT key (CPF, CNPJ, email, phone, EVP) to the owner's account data before sending a Pix, and retrieve a boleto by its Itaú identifier (id or nosso_numero).

How do I install Itau?

Run `npx -y @codespar/mcp-itau`. The README documents 6 environment variables (ITAU_CLIENT_ID, ITAU_CLIENT_SECRET, ITAU_CERT_PATH…) to set first. Set ITAU_CLIENT_ID, ITAU_CLIENT_SECRET, ITAU_CERT_PATH, ITAU_KEY_PATH, MCP_HTTP before connecting. ITAU_ENV is optional or environment-specific per the README. You can also paste the ready-made client config above.

Does Itau run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Itau

Alternatives to Itau

Maintained security servers if Itau isn't the fit.

Pairs well with

Servers that cover what Itau doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Santander · Sicoob · Caf · Izipay · Niubiz

More TypeScript MCP servers · Matera · Midaz · Open Finance · Pluggy · Pomelo · see all