74
/ 100
1 month ago
github_topic
mcp-dev-latam
Open-source MCP servers for Latin American commerce — Pix, NF-e, banking, fiscal, logistics, and messaging across Brazil, Mexico, Argentina, Colombia, Chile, and Peru. MIT, on npm.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
🚨
Secret credentials may flow to a network call
4 flows detected: INICIADOR_API_KEY, PLUGGY_CLIENT_SECRET, CAF_API_KEY. We can’t prove the destination matches the brand the credential belongs to.
🚨
Known vulnerabilities in dependencies: 1 critical
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 136 credentials: ADYEN_API_KEY, AIRWALLEX_API_KEY, ALEGRA_API_TOKEN, AMAZON_LWA_CLIENT_SECRET, AMAZON_REFRESH_TOKEN, ANDREANI_API_KEY, ANDREANI_PASSWORD, AP2_API_KEY, ASAAS_API_KEY, BB_CLIENT_SECRET, BB_DEVELOPER_APP_KEY, BELVO_SECRET_PASSWORD, BIGDATACORP_ACCESS_TOKEN, BIND_API_KEY, BITSO_API_KEY, BITSO_API_SECRET, BLING_ACCESS_TOKEN, BRADESCO_CLIENT_SECRET, BRAINTREE_PRIVATE_KEY, BRAINTREE_PUBLIC_KEY, BRASPAG_MERCHANT_KEY, BTG_CLIENT_SECRET, C6_CLIENT_SECRET, CAF_API_KEY, CAIXA_CLIENT_SECRET, CELCOIN_CLIENT_SECRET, CERTTA_API_KEY, CHARGEBEE_API_KEY, CLEARSALE_API_KEY, COINBASE_CDP_PRIVATE_KEY, COINBASE_COMMERCE_API_KEY, COINBASE_COMMERCE_WEBHOOK_SECRET, COLPPY_API_KEY, CONEKTA_API_KEY, CONTA_AZUL_ACCESS_TOKEN, COORDINADORA_API_KEY, CORREIOS_TOKEN, CULQI_SECRET_KEY, DLOCAL_SECRET_KEY, DLOCAL_TRANS_KEY, DOCK_CLIENT_SECRET, EBANX_INTEGRATION_KEY, EFI_CLIENT_SECRET, EVOLUTION_API_KEY, FACTURAPI_API_KEY, FOCUS_NFE_TOKEN, FOXBIT_API_KEY, FOXBIT_API_SECRET, GETNET_CLIENT_SECRET, INICIADOR_API_KEY, INTER_CLIENT_SECRET, INTER_PIX_KEY, ITAU_CLIENT_SECRET, IUGU_API_TOKEN, IZIPAY_PASSWORD, JUMIO_API_SECRET, JUMIO_API_TOKEN, KHIPU_API_KEY, KHIPU_SECRET, KONDUTO_API_KEY, LEGITI_API_KEY, MATERA_CLIENT_SECRET, MB_API_KEY, MB_API_SECRET, MELHOR_ENVIO_TOKEN, MELI_ACCESS_TOKEN, MERCADO_PAGO_ACCESS_TOKEN, MOONPAY_API_KEY, MOONPAY_PUBLISHABLE_KEY, MOONPAY_SECRET_KEY, NEQUI_API_KEY, NEQUI_CLIENT_SECRET, NFEIO_API_KEY, NUBANK_CLIENT_SECRET, NUPAY_MERCHANT_KEY, NUPAY_MERCHANT_TOKEN, NUVEM_FISCAL_CLIENT_SECRET, OMIE_APP_KEY, OMIE_APP_SECRET, ONFIDO_API_TOKEN, OPENPAY_PRIVATE_KEY, OPEN_FINANCE_CLIENT_SECRET, PAGARME_API_KEY, PAGARME_PUBLIC_KEY, PAGSEGURO_TOKEN, PAYPAL_CLIENT_SECRET, PERSONA_API_KEY, PICPAY_SELLER_TOKEN, PICPAY_TOKEN, PIX_CLIENT_SECRET, PLUGGY_CLIENT_SECRET, QB_ACCESS_TOKEN, RAPYD_ACCESS_KEY, RAPYD_SECRET_KEY, RD_STATION_TOKEN, REDE_TOKEN, SAFRAPAY_CLIENT_SECRET, SANTANDER_CLIENT_SECRET, SENDGRID_API_KEY, SHOPEE_ACCESS_TOKEN, SHOPEE_PARTNER_KEY, SHOPIFY_ACCESS_TOKEN, SICOOB_CLIENT_SECRET, SIFT_API_KEY, SIIGO_ACCESS_TOKEN, SKYDROPX_API_TOKEN, STARK_BANK_ACCESS_TOKEN, STONE_CLIENT_SECRET, STP_API_KEY, STRIPE_API_KEY, STRIPE_SECRET_KEY, TAKE_BLIP_ACCESS_KEY, TIENDANUBE_ACCESS_TOKEN, TINY_API_TOKEN, TRANSAK_ACCESS_TOKEN, TRANSAK_API_KEY, TRANSAK_API_SECRET, TRANSBANK_API_KEY_SECRET, TWILIO_AUTH_TOKEN, UCP_API_KEY, UNBLOCKPAY_API_KEY, UNICO_CLIENT_SECRET, VINDI_API_KEY, VTEX_APP_KEY, VTEX_APP_TOKEN, WHATSAPP_ACCESS_TOKEN, WISE_API_TOKEN, WOMPI_EVENTS_SECRET, WOMPI_PRIVATE_KEY, WOMPI_PUBLIC_KEY, WORLDPAY_PASSWORD, X402_API_KEY, XERO_ACCESS_TOKEN, ZAPI_TOKEN, ZENVIA_API_TOKEN, ZOOP_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 critical
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
When Vitest UI server is listening, arbitrary file can be read and executed
Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.🔐 secret
ADYEN_API_KEYconfig
ADYEN_ENVconfig
ADYEN_LIVE_URL_PREFIXconfig
ADYEN_MERCHANT_ACCOUNTconfig
AFIP_CERT_PATHconfig
AFIP_CUITconfig
AFIP_ENVconfig
AFIP_KEY_PATH🔐 secret
AIRWALLEX_API_KEYconfig
AIRWALLEX_CLIENT_IDconfig
AIRWALLEX_ENV🔐 secret
ALEGRA_API_TOKENconfig
ALEGRA_EMAILconfig
AMAZON_LWA_CLIENT_ID🔐 secret
AMAZON_LWA_CLIENT_SECRETconfig
AMAZON_MARKETPLACE_ID🔐 secret
AMAZON_REFRESH_TOKENconfig
AMAZON_REGIONconfig
AMAZON_SELLER_ID🔐 secret
ANDREANI_API_KEY🔐 secret
ANDREANI_PASSWORDconfig
ANDREANI_USERconfig
AP2_AGENT_ID🔐 secret
AP2_API_KEYconfig
AP2_SANDBOX🔐 secret
ASAAS_API_KEY— "": "your-api-key",config
ASAAS_SANDBOX— "": "true"config
BB_CERT_PATHconfig
BB_CLIENT_ID🔐 secret
BB_CLIENT_SECRET🔐 secret
BB_DEVELOPER_APP_KEYconfig
BB_ENVconfig
BB_KEY_PATHconfig
BELVO_SANDBOXconfig
BELVO_SECRET_ID🔐 secret
BELVO_SECRET_PASSWORD🔐 secret
BIGDATACORP_ACCESS_TOKENconfig
BIGDATACORP_API_BASEconfig
BIGDATACORP_TOKEN_ID🔐 secret
BIND_API_KEY🔐 secret
BITSO_API_KEY🔐 secret
BITSO_API_SECRET🔐 secret
BLING_ACCESS_TOKENconfig
BRADESCO_CERT_PATHconfig
BRADESCO_CLIENT_ID🔐 secret
BRADESCO_CLIENT_SECRETconfig
BRADESCO_ENVconfig
BRADESCO_KEY_PATHconfig
BRAINTREE_API_VERSIONconfig
BRAINTREE_ENVconfig
BRAINTREE_MERCHANT_ID🔐 secret
BRAINTREE_PRIVATE_KEY🔐 secret
BRAINTREE_PUBLIC_KEYconfig
BRASPAG_ENVconfig
BRASPAG_MERCHANT_ID🔐 secret
BRASPAG_MERCHANT_KEYconfig
BTG_CERT_PATHconfig
BTG_CLIENT_ID🔐 secret
BTG_CLIENT_SECRETconfig
BTG_ENVconfig
BTG_KEY_PATHconfig
C6_CERT_PATHconfig
C6_CLIENT_ID🔐 secret
C6_CLIENT_SECRETconfig
C6_ENVconfig
C6_KEY_PATHconfig
CAF_API_BASE🔐 secret
CAF_API_KEYconfig
CAIXA_CERT_PATHconfig
CAIXA_CLIENT_ID🔐 secret
CAIXA_CLIENT_SECRETconfig
CAIXA_ENVconfig
CAIXA_KEY_PATHconfig
CELCOIN_CLIENT_ID🔐 secret
CELCOIN_CLIENT_SECRETconfig
CELCOIN_SANDBOXconfig
CERTTA_API_BASE🔐 secret
CERTTA_API_KEY🔐 secret
CHARGEBEE_API_KEYconfig
CHARGEBEE_SITE🔐 secret
CLEARSALE_API_KEYconfig
CLEARSALE_BASE_URLconfig
COINBASE_CDP_KEY_NAME🔐 secret
COINBASE_CDP_PRIVATE_KEY🔐 secret
COINBASE_COMMERCE_API_KEYconfig
COINBASE_COMMERCE_API_VERSION🔐 secret
COINBASE_COMMERCE_WEBHOOK_SECRET🔐 secret
COLPPY_API_KEYconfig
COLPPY_COMPANY_ID🔐 secret
CONEKTA_API_KEY🔐 secret
CONTA_AZUL_ACCESS_TOKEN🔐 secret
COORDINADORA_API_KEYconfig
COORDINADORA_NIT🔐 secret
CORREIOS_TOKENconfig
CORREIOS_USER🔐 secret
CULQI_SECRET_KEYconfig
DLOCAL_BASE_URLconfig
DLOCAL_LOGIN🔐 secret
DLOCAL_SECRET_KEY🔐 secret
DLOCAL_TRANS_KEYconfig
DOCK_CLIENT_ID🔐 secret
DOCK_CLIENT_SECRETconfig
DOCK_ENV🔐 secret
EBANX_INTEGRATION_KEYconfig
EBANX_SANDBOXconfig
EFI_CLIENT_ID🔐 secret
EFI_CLIENT_SECRETconfig
EFI_SANDBOX🔐 secret
EVOLUTION_API_KEYconfig
EVOLUTION_API_URL🔐 secret
FACTURAPI_API_KEYconfig
FOCUS_NFE_SANDBOX🔐 secret
FOCUS_NFE_TOKEN🔐 secret
FOXBIT_API_KEY🔐 secret
FOXBIT_API_SECRETconfig
GETNET_BASE_URLconfig
GETNET_CLIENT_ID🔐 secret
GETNET_CLIENT_SECRETconfig
GETNET_SELLER_IDconfig
INICIADOR_API_BASE🔐 secret
INICIADOR_API_KEYconfig
INTER_CLIENT_ID🔐 secret
INTER_CLIENT_SECRET🔐 secret
INTER_PIX_KEYconfig
ITAU_CERT_PATHconfig
ITAU_CLIENT_ID🔐 secret
ITAU_CLIENT_SECRETconfig
ITAU_ENVconfig
ITAU_KEY_PATH🔐 secret
IUGU_API_TOKENconfig
IZIPAY_BASE_URLconfig
IZIPAY_ENVconfig
IZIPAY_MERCHANT_CODE🔐 secret
IZIPAY_PASSWORDconfig
IZIPAY_USERNAME🔐 secret
JUMIO_API_SECRET🔐 secret
JUMIO_API_TOKENconfig
JUMIO_REGIONconfig
JUMIO_USER_AGENT🔐 secret
KHIPU_API_KEYconfig
KHIPU_BASE_URLconfig
KHIPU_RECEIVER_ID🔐 secret
KHIPU_SECRET🔐 secret
KONDUTO_API_KEYconfig
KONDUTO_BASE_URL🔐 secret
LEGITI_API_KEYconfig
LEGITI_BASE_URLconfig
MATERA_BASE_URLconfig
MATERA_CLIENT_ID🔐 secret
MATERA_CLIENT_SECRET🔐 secret
MB_API_KEY🔐 secret
MB_API_SECRETconfig
MCP_DEMOconfig
MCP_HTTP— true npx @codespar/mcp-asaasconfig
MCP_PORTconfig
MELHOR_ENVIO_SANDBOX🔐 secret
MELHOR_ENVIO_TOKEN🔐 secret
MELI_ACCESS_TOKENconfig
MELI_SITE_ID🔐 secret
MERCADO_PAGO_ACCESS_TOKEN🔐 secret
MOONPAY_API_KEYconfig
MOONPAY_BASE_URLconfig
MOONPAY_BUY_WIDGET_URL🔐 secret
MOONPAY_PUBLISHABLE_KEY🔐 secret
MOONPAY_SECRET_KEYconfig
MOONPAY_SELL_WIDGET_URL🔐 secret
NEQUI_API_KEYconfig
NEQUI_CLIENT_ID🔐 secret
NEQUI_CLIENT_SECRETconfig
NEQUI_ENV🔐 secret
NFEIO_API_KEYconfig
NFEIO_COMPANY_IDconfig
NUBANK_CERT_PATHconfig
NUBANK_CLIENT_ID🔐 secret
NUBANK_CLIENT_SECRETconfig
NUPAY_ENV🔐 secret
NUPAY_MERCHANT_KEY🔐 secret
NUPAY_MERCHANT_TOKENconfig
NUVEM_FISCAL_CLIENT_ID🔐 secret
NUVEM_FISCAL_CLIENT_SECRET🔐 secret
OMIE_APP_KEY🔐 secret
OMIE_APP_SECRET🔐 secret
ONFIDO_API_TOKENconfig
ONFIDO_REGIONconfig
OPENPAY_ENVconfig
OPENPAY_MERCHANT_ID🔐 secret
OPENPAY_PRIVATE_KEYconfig
OPEN_FINANCE_BASE_URLconfig
OPEN_FINANCE_CLIENT_ID🔐 secret
OPEN_FINANCE_CLIENT_SECRET🔐 secret
PAGARME_API_KEY🔐 secret
PAGARME_PUBLIC_KEYconfig
PAGSEGURO_SANDBOX🔐 secret
PAGSEGURO_TOKENconfig
PAYPAL_CLIENT_ID🔐 secret
PAYPAL_CLIENT_SECRETconfig
PAYPAL_ENV🔐 secret
PERSONA_API_KEYconfig
PERSONA_API_VERSIONconfig
PICPAY_BASE_URL🔐 secret
PICPAY_SELLER_TOKEN🔐 secret
PICPAY_TOKENconfig
PIX_BASE_URLconfig
PIX_CERT_PATHconfig
PIX_CLIENT_ID🔐 secret
PIX_CLIENT_SECRETconfig
PLUGGY_API_BASEconfig
PLUGGY_CLIENT_ID🔐 secret
PLUGGY_CLIENT_SECRET🔐 secret
QB_ACCESS_TOKENconfig
QB_ENVconfig
QB_MINOR_VERSIONconfig
QB_REALM_ID🔐 secret
RAPYD_ACCESS_KEYconfig
RAPYD_ENV🔐 secret
RAPYD_SECRET_KEY🔐 secret
RD_STATION_TOKENconfig
REDE_ENVconfig
REDE_PV🔐 secret
REDE_TOKENconfig
SAFRAPAY_CLIENT_ID🔐 secret
SAFRAPAY_CLIENT_SECRETconfig
SAFRAPAY_ENVconfig
SAFRAPAY_MERCHANT_IDconfig
SANTANDER_CERT_PATHconfig
SANTANDER_CLIENT_ID🔐 secret
SANTANDER_CLIENT_SECRETconfig
SANTANDER_ENVconfig
SANTANDER_KEY_PATH🔐 secret
SENDGRID_API_KEYconfig
SENDGRID_FROM_EMAIL🔐 secret
SHOPEE_ACCESS_TOKENconfig
SHOPEE_ENVconfig
SHOPEE_PARTNER_ID🔐 secret
SHOPEE_PARTNER_KEYconfig
SHOPEE_SHOP_ID🔐 secret
SHOPIFY_ACCESS_TOKENconfig
SHOPIFY_API_VERSIONconfig
SHOPIFY_SHOPconfig
SICOOB_CERT_PATHconfig
SICOOB_CLIENT_ID🔐 secret
SICOOB_CLIENT_SECRETconfig
SICOOB_ENVconfig
SICOOB_KEY_PATHconfig
SIFT_ACCOUNT_ID🔐 secret
SIFT_API_KEYconfig
SIFT_BASE_URL🔐 secret
SIIGO_ACCESS_TOKEN🔐 secret
SKYDROPX_API_TOKEN🔐 secret
STARK_BANK_ACCESS_TOKENconfig
STARK_BANK_SANDBOXconfig
STONE_BASE_URLconfig
STONE_CLIENT_ID🔐 secret
STONE_CLIENT_SECRET🔐 secret
STP_API_KEYconfig
STP_COMPANYconfig
STRIPE_ACP_BASE🔐 secret
STRIPE_API_KEY— "": "sk_test_..."config
STRIPE_API_VERSION🔐 secret
STRIPE_SECRET_KEY🔐 secret
TAKE_BLIP_ACCESS_KEYconfig
TAKE_BLIP_BOT_ID🔐 secret
TIENDANUBE_ACCESS_TOKENconfig
TIENDANUBE_STORE_ID🔐 secret
TINY_API_TOKEN🔐 secret
TRANSAK_ACCESS_TOKEN🔐 secret
TRANSAK_API_KEY🔐 secret
TRANSAK_API_SECRETconfig
TRANSAK_ENV🔐 secret
TRANSBANK_API_KEY_SECRETconfig
TRANSBANK_COMMERCE_CODEconfig
TRANSBANK_ENVconfig
TWILIO_ACCOUNT_SID🔐 secret
TWILIO_AUTH_TOKENconfig
TWILIO_MESSAGING_SERVICE_SID🔐 secret
UCP_API_KEYconfig
UCP_MERCHANT_IDconfig
UCP_SANDBOX🔐 secret
UNBLOCKPAY_API_KEYconfig
UNBLOCKPAY_BASE_URLconfig
UNICO_AUTH_URLconfig
UNICO_BASE_URLconfig
UNICO_CLIENT_ID🔐 secret
UNICO_CLIENT_SECRETconfig
UNICO_ENV🔐 secret
VINDI_API_KEYconfig
VTEX_ACCOUNT_NAME🔐 secret
VTEX_APP_KEY🔐 secret
VTEX_APP_TOKENconfig
VTEX_ENVIRONMENT🔐 secret
WHATSAPP_ACCESS_TOKENconfig
WHATSAPP_BUSINESS_ACCOUNT_IDconfig
WHATSAPP_GRAPH_VERSIONconfig
WHATSAPP_PHONE_NUMBER_ID🔐 secret
WISE_API_TOKENconfig
WISE_ENV🔐 secret
WOMPI_EVENTS_SECRET🔐 secret
WOMPI_PRIVATE_KEY🔐 secret
WOMPI_PUBLIC_KEYconfig
WOMPI_SANDBOXconfig
WORLDPAY_API_VERSIONconfig
WORLDPAY_ENTITYconfig
WORLDPAY_ENV🔐 secret
WORLDPAY_PASSWORDconfig
WORLDPAY_USERNAME🔐 secret
X402_API_KEYconfig
X402_NETWORKconfig
X402_WALLET_ADDRESS🔐 secret
XERO_ACCESS_TOKENconfig
XERO_TENANT_IDconfig
ZAPI_INSTANCE_ID🔐 secret
ZAPI_TOKEN🔐 secret
ZENVIA_API_TOKEN🔐 secret
ZOOP_API_KEYconfig
ZOOP_MARKETPLACE_ID// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/codespar-mcp-dev-latam-p7f60c)commit: 6b99fa0d84412bbb4ea0dbd3a92c4b8ceb9744a6
code hash: a860fab0725643d58440fb9a87d0f315f7941273483d797a8e5ac72c7ab65e38
verified: 6/21/2026, 10:39:08 AM