# io.github.codespar/mcp-ebanx (npm · @codespar/mcp-ebanx)

MCP server for EBANX — cross-border payments, payouts, exchange rates

- Trust score: 68/100 (medium)
- Change this week: +22
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-05

## Components

- npm · `@codespar/mcp-ebanx`: 68/100 (this document), [markdown](https://verifymcp.io/servers/codespar-mcp-ebanx/codespar-mcp-ebanx.md), [page](https://verifymcp.io/servers/codespar-mcp-ebanx/codespar-mcp-ebanx)

## Channel facts

- Registry: `npm`
- Package: `@codespar/mcp-ebanx`
- Version: `0.2.2`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-05.

- **Supply Chain Security**: 86/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 43 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 70/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 1128 tokens (~62/item across 18 items; 18 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 33/100
  - Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 95/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 85% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add codespar-mcp-ebanx -- npx -y @codespar/mcp-ebanx
```

### Codex

```bash
codex mcp add codespar-mcp-ebanx -- npx -y @codespar/mcp-ebanx
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "codespar-mcp-ebanx": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@codespar/mcp-ebanx"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add codespar-mcp-ebanx --command npx --arg -y --arg @codespar/mcp-ebanx
```

### Hermes

```yaml
mcp_servers:
  codespar-mcp-ebanx:
    command: "npx"
    args: ["-y", "@codespar/mcp-ebanx"]
```

### Other

```json
{
  "mcpServers": {
    "codespar-mcp-ebanx": {
      "command": "npx",
      "args": [
        "-y",
        "@codespar/mcp-ebanx"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-04 (score 68, +1)

No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-02 (score 67, +46)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Stability: unverified → 0.23
- [functional improvement] Schema quality: unverified → good
- [functional improvement] License: unverified → pass
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional] Licence: MIT

### 2026-07-31 (score 21, −25)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-27 (score 46)

First indexed and scored.

## MCP tools (18)

### `create_payment` (~120 tokens)

Create a payment in EBANX (boleto, credit card, PIX, etc.)

Input parameters:

- `amount_total` (number, required): Total amount
- `country` (string, required): Country code (e.g. BR)
- `currency_code` (string, required): Currency (e.g. BRL, USD)
- `document` (string, required): CPF or CNPJ
- `email` (string, required): Customer email
- `merchant_payment_code` (string, required): Unique merchant payment code
- `name` (string, required): Customer name
- `payment_type_code` (string, required): Payment type

### `get_payment` (~26 tokens)

Get payment details by hash

Input parameters:

- `hash` (string, required): Payment hash returned on creation

### `list_payments` (~52 tokens)

List payments by date range

Input parameters:

- `date_from` (string, required): Start date (YYYY-MM-DD)
- `date_to` (string, required): End date (YYYY-MM-DD)
- `page` (number): Page number

### `refund` (~47 tokens)

Refund a payment (full or partial)

Input parameters:

- `amount` (number): Amount to refund (omit for full)
- `description` (string): Refund reason
- `hash` (string, required): Payment hash

### `create_payout` (~146 tokens)

Create a payout to a bank account

Input parameters:

- `amount` (number, required): Amount to send
- `country` (string, required): Country code (e.g. BR)
- `currency_code` (string, required): Currency code
- `external_reference` (string, required): Unique payout reference
- `payee_bank_account` (string): Account number
- `payee_bank_account_type` (string): Account type (C=checking, S=savings)
- `payee_bank_branch` (string): Branch number
- `payee_bank_code` (string): Bank code
- `payee_document` (string, required): Payee CPF/CNPJ
- `payee_name` (string, required): Payee full name

### `exchange_rate` (~33 tokens)

Get current exchange rate for a currency pair

Input parameters:

- `currency_code` (string, required): Currency code (e.g. BRL)

### `get_banks` (~30 tokens)

List available banks for a country

Input parameters:

- `country` (string, required): Country code (e.g. BR)

### `query_payment_by_merchant_code` (~37 tokens)

Get payment details by merchant_payment_code (alternative to hash)

Input parameters:

- `merchant_payment_code` (string, required): Merchant-issued payment code

### `capture_payment` (~45 tokens)

Capture a previously authorized credit card payment (full or partial).

Input parameters:

- `amount` (number): Amount to capture (omit for full)
- `hash` (string, required): Payment hash to capture

### `cancel_payment` (~37 tokens)

Cancel/void a pending payment by hash (e.g. unpaid boleto, authorized card).

Input parameters:

- `hash` (string, required): Payment hash to cancel

### `create_mass_payout` (~41 tokens)

Create a mass payout — multiple payouts in a single batch request.

Input parameters:

- `payouts` (array, required): Array of payout objects (same shape as create_payout)

### `get_payout` (~46 tokens)

Query a payout by external_reference or payout id.

Input parameters:

- `external_reference` (string): Payout external reference
- `id` (string): Payout id (alternative to external_reference)

### `simulate_payment` (~90 tokens)

Simulate the response of a payment in sandbox without persisting it (useful for integration testing).

Input parameters:

- `amount_total` (number, required)
- `country` (string, required)
- `currency_code` (string, required)
- `document` (string)
- `email` (string, required)
- `merchant_payment_code` (string)
- `name` (string, required)
- `payment_type_code` (string, required)

### `list_payment_methods` (~48 tokens)

List available payment methods for a country (which payment_type_codes are supported).

Input parameters:

- `country` (string, required): Country code (e.g. BR, MX, CO, AR, PE, CL)

### `create_card_token` (~83 tokens)

Tokenize a credit/debit card for reuse without re-collecting card data.

Input parameters:

- `country` (string, required): Country code
- `creditcard` (object, required): Card data: card_number, card_name, card_due_date (MM/YYYY), card_cvv
- `payment_type_code` (string, required): Card brand (e.g. visa, mastercard, amex)

### `delete_card_token` (~36 tokens)

Delete a previously stored card token.

Input parameters:

- `country` (string): Country code
- `token` (string, required): Card token to delete

### `validate_document` (~62 tokens)

Validate a LATAM tax document (CPF/CNPJ for BR, RFC for MX, DNI for AR/PE) using checksum/format rules. Local validation, no API call.

Input parameters:

- `document` (string, required): Document number
- `type` (string, required): Document type

### `verify_notification` (~82 tokens)

Verify an EBANX webhook notification HMAC signature against the integration key. Local verification, no API call.

Input parameters:

- `payload` (string, required): Raw notification body (string)
- `secret` (string): Webhook secret (defaults to EBANX_INTEGRATION_KEY)
- `signature` (string, required): Signature header value (e.g. x-ebanx-signature)

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/codespar-mcp-ebanx/codespar-mcp-ebanx#diagnostics

## Score history

- 2026-08-05: 68
- 2026-08-04: 68
- 2026-08-03: 67
- 2026-08-02: 67
- 2026-08-01: 21
- 2026-07-31: 21
- 2026-07-30: 46
- 2026-07-28: 46
- 2026-07-27: 46

## Links

- npm package: https://www.npmjs.com/package/@codespar/mcp-ebanx
- Socket report: https://socket.dev/npm/package/@codespar/mcp-ebanx
- Repository: https://github.com/codespar/mcp-dev-latam
- Changelog RSS feed: https://verifymcp.io/servers/codespar-mcp-ebanx/codespar-mcp-ebanx/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/codespar-mcp-ebanx/codespar-mcp-ebanx/changelog.json
- HTML version of this page: https://verifymcp.io/servers/codespar-mcp-ebanx/codespar-mcp-ebanx