grade C

2 days ago

glama

mcp-dev-brasil

37 MCP servers for agentic commerce and Brazilian services. Covers Stripe ACP, x402 (Coinbase), AP2 (Google), Google UCP, plus 14 traditional Brazilian payment rails, fiscal, banking, communication, logistics, ERP, identity, and crypto APIs. ~480 tools. Supports stdio and Streamable HTTP.

→ codespar/mcp-dev-latam · listed on glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 61 credentials: ALEGRA_API_TOKEN, ANDREANI_API_KEY, ANDREANI_PASSWORD, ANTHROPIC_API_KEY, AP2_API_KEY, ASAAS_API_KEY, BELVO_SECRET_PASSWORD, BIND_API_KEY, BITSO_API_KEY, BITSO_API_SECRET, BLING_ACCESS_TOKEN, CELCOIN_CLIENT_SECRET, CLIENT_PRIVATE_KEY, COLPPY_API_KEY, CONEKTA_API_KEY, CONTA_AZUL_ACCESS_TOKEN, COORDINADORA_API_KEY, CORREIOS_TOKEN, EBANX_INTEGRATION_KEY, EFI_CLIENT_SECRET, EVOLUTION_API_KEY, FACTURAPI_API_KEY, FOCUS_NFE_TOKEN, INTER_CLIENT_SECRET, IUGU_API_TOKEN, MB_API_KEY, MB_API_SECRET, MELHOR_ENVIO_TOKEN, MELI_ACCESS_TOKEN, MERCADO_PAGO_ACCESS_TOKEN, NEQUI_API_KEY, NEQUI_CLIENT_SECRET, NUBANK_CLIENT_SECRET, NUVEM_FISCAL_CLIENT_SECRET, OMIE_APP_KEY, OMIE_APP_SECRET, OPEN_FINANCE_CLIENT_SECRET, PAGARME_API_KEY, PAGSEGURO_TOKEN, PIX_CLIENT_SECRET, RD_STATION_TOKEN, SIIGO_ACCESS_TOKEN, SKYDROPX_API_TOKEN, STARK_BANK_ACCESS_TOKEN, STONE_CLIENT_SECRET, STP_API_KEY, STRIPE_API_KEY, TAKE_BLIP_ACCESS_KEY, TIENDANUBE_ACCESS_TOKEN, TINY_API_TOKEN, UCP_API_KEY, UNBLOCKPAY_API_KEY, VINDI_API_KEY, VTEX_APP_KEY, VTEX_APP_TOKEN, WOMPI_PRIVATE_KEY, WOMPI_PUBLIC_KEY, X402_API_KEY, ZAPI_TOKEN, ZENVIA_API_TOKEN, ZOOP_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAFIP_CERT_PATH

configAFIP_CUIT

configAFIP_ENV

configAFIP_KEY_PATH

🔐 secretALEGRA_API_TOKEN

configALEGRA_EMAIL

🔐 secretANDREANI_API_KEY

🔐 secretANDREANI_PASSWORD

configANDREANI_USER

🔐 secretANTHROPIC_API_KEY

configAP2_AGENT_ID

🔐 secretAP2_API_KEY

configAP2_SANDBOX

🔐 secretASAAS_API_KEY

configASAAS_SANDBOX

configBELVO_SANDBOX

configBELVO_SECRET_ID

🔐 secretBELVO_SECRET_PASSWORD

🔐 secretBIND_API_KEY

🔐 secretBITSO_API_KEY

🔐 secretBITSO_API_SECRET

🔐 secretBLING_ACCESS_TOKEN

configCELCOIN_CLIENT_ID

🔐 secretCELCOIN_CLIENT_SECRET

configCELCOIN_SANDBOX

🔐 secretCLIENT_PRIVATE_KEY

🔐 secretCOLPPY_API_KEY

configCOLPPY_COMPANY_ID

🔐 secretCONEKTA_API_KEY

🔐 secretCONTA_AZUL_ACCESS_TOKEN

🔐 secretCOORDINADORA_API_KEY

configCOORDINADORA_NIT

🔐 secretCORREIOS_TOKEN

configCORREIOS_USER

🔐 secretEBANX_INTEGRATION_KEY

configEBANX_SANDBOX

configEFI_CLIENT_ID

🔐 secretEFI_CLIENT_SECRET

configEFI_SANDBOX

🔐 secretEVOLUTION_API_KEY

configEVOLUTION_API_URL

configFACILITATOR_URL

🔐 secretFACTURAPI_API_KEY

configFOCUS_NFE_SANDBOX

🔐 secretFOCUS_NFE_TOKEN

configINTER_CLIENT_ID

🔐 secretINTER_CLIENT_SECRET

🔐 secretIUGU_API_TOKEN

🔐 secretMB_API_KEY

🔐 secretMB_API_SECRET

configMCP_DEMO

configMCP_HTTP— true npx @codespar/mcp-asaas

configMCP_PORT

configMELHOR_ENVIO_SANDBOX

🔐 secretMELHOR_ENVIO_TOKEN

🔐 secretMELI_ACCESS_TOKEN

configMELI_SITE_ID

🔐 secretMERCADO_PAGO_ACCESS_TOKEN

🔐 secretNEQUI_API_KEY

configNEQUI_CLIENT_ID

🔐 secretNEQUI_CLIENT_SECRET

configNEQUI_ENV

configNUBANK_CERT_PATH

configNUBANK_CLIENT_ID

🔐 secretNUBANK_CLIENT_SECRET

configNUVEM_FISCAL_CLIENT_ID

🔐 secretNUVEM_FISCAL_CLIENT_SECRET

🔐 secretOMIE_APP_KEY

🔐 secretOMIE_APP_SECRET

configOPEN_FINANCE_BASE_URL

configOPEN_FINANCE_CLIENT_ID

🔐 secretOPEN_FINANCE_CLIENT_SECRET

🔐 secretPAGARME_API_KEY

configPAGSEGURO_SANDBOX

🔐 secretPAGSEGURO_TOKEN

configPIX_BASE_URL

configPIX_CERT_PATH

configPIX_CLIENT_ID

🔐 secretPIX_CLIENT_SECRET

🔐 secretRD_STATION_TOKEN

configSERVER_ADDRESS

🔐 secretSIIGO_ACCESS_TOKEN

🔐 secretSKYDROPX_API_TOKEN

🔐 secretSTARK_BANK_ACCESS_TOKEN

configSTARK_BANK_SANDBOX

configSTONE_CLIENT_ID

🔐 secretSTONE_CLIENT_SECRET

🔐 secretSTP_API_KEY

configSTP_COMPANY

configSTRIPE_ACP_BASE

🔐 secretSTRIPE_API_KEY— "": "sk_test_..."

🔐 secretTAKE_BLIP_ACCESS_KEY

configTAKE_BLIP_BOT_ID

🔐 secretTIENDANUBE_ACCESS_TOKEN

configTIENDANUBE_STORE_ID

🔐 secretTINY_API_TOKEN

🔐 secretUCP_API_KEY

configUCP_MERCHANT_ID

configUCP_SANDBOX

🔐 secretUNBLOCKPAY_API_KEY

🔐 secretVINDI_API_KEY

configVTEX_ACCOUNT_NAME

🔐 secretVTEX_APP_KEY

🔐 secretVTEX_APP_TOKEN

🔐 secretWOMPI_PRIVATE_KEY

🔐 secretWOMPI_PUBLIC_KEY

configWOMPI_SANDBOX

🔐 secretX402_API_KEY

configX402_NETWORK

configX402_WALLET_ADDRESS

configZAPI_INSTANCE_ID

🔐 secretZAPI_TOKEN

🔐 secretZENVIA_API_TOKEN

🔐 secretZOOP_API_KEY— "": "your-api-key",

configZOOP_MARKETPLACE_ID— "": "your-marketplace-id"

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/codespar-mcp-dev-latam-17icgn)](https://m8ven.ai/mcp/codespar-mcp-dev-latam-17icgn)

commit: 703a6203018b4446cb4fa4a27d23a860112a7bc0

code hash: f702000f5de9d74ec1fc380862e6c71d0c66c859217fa03602f936cf0be5fa39

verified: 4/18/2026, 6:18:29 PM

view raw JSON →