BR state-owned public bank. Distinct from private peers: Caixa handles social programs (FGTS, PIS/PASEP, bolsa família), lotteries, and merchants needing state-bank credibility. OAuth2 + mTLS (BACEN Pix v2). Alpha on npm — state-owned onboarding + contract-gated docs.
Caixa gives your agent 23 tools it calls directly — pick the ones it needs, in Claude, Cursor, or any MCP client.
get_oauth_token — Mint or return a cached OAuth2 client_credentials bearer token for the Caixa Developer Portal. Exposed so agents can inspect token freshness; normal tool calls obtain tokens implicitly.send_pix — Initiate an outbound Pix payment from the merchant's Caixa account. Amount in BRL major units (e.g. '10.50').create_pix_qr — Create a dynamic Pix charge with QR code (cob). Returns the txid, copy-paste EMV payload, and location URL.// Your agent calls a tool directly — no glue code.
// CodeSpar's managed tier handles OAuth2, token rotation and rate limits.
const result = await session.call("get_oauth_token", { /* ... */ });$ npm install @codespar/mcp-caixa@alphaAdd this entry to your claude_desktop_config.json (or any MCP-compatible client config).
{
"mcpServers": {
"caixa": {
"command": "npx",
"args": [
"-y",
"@codespar/mcp-caixa@alpha"
],
"env": {
"CAIXA_CLIENT_ID": "<your_caixa_client_id>",
"CAIXA_CLIENT_SECRET": "<your_caixa_client_secret>",
"CAIXA_CERT_PATH": "<your_caixa_cert_path>",
"CAIXA_KEY_PATH": "<your_caixa_key_path>"
}
}
}
}After restart, your agent can call any of the 23 tools below — try get_oauth_token first.
Required to authenticate the server. Stored encrypted when using CodeSpar managed hosting.
CAIXA_CLIENT_IDCaixa OAuth client_id issued via the Developer Portal after contract onboarding.
CAIXA_CLIENT_SECRETCaixa OAuth client_secret.
CAIXA_CERT_PATHAbsolute path to the mTLS client certificate (.crt or .pem). BACEN mandates mTLS for Pix v2.
CAIXA_KEY_PATHAbsolute path to the mTLS private key (.key or .pem).
CAIXA_ENVEnvironment: 'sandbox' or 'production'. Defaults to 'sandbox'.
Each tool is independent — your agent loads only what it needs to reduce context and response time.
get_oauth_tokensend_pixcreate_pix_qrget_pixresolve_dict_keyrefund_pixcreate_boletoget_boletoMCP is a protocol — any framework that speaks it can mount this server.