io.github.codespar/mcp-khipu
NPM · @CODESPAR/MCP-KHIPU · SCANNED AUG 3
MCP server for Khipu — Chilean instant bank-transfer payments (complements Transbank cards)
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security86
- No malware found by supply-chain analysis.Pass
- Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 41 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability77
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 2034 tokens (~96/item across 21 items; 21 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
- Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · @codespar/mcp-khipu
claude mcp add codespar-mcp-khipu -- npx -y @codespar/mcp-khipu
codex mcp add codespar-mcp-khipu -- npx -y @codespar/mcp-khipu
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"codespar-mcp-khipu": {
"type": "local",
"command": [
"npx",
"-y",
"@codespar/mcp-khipu"
],
"enabled": true
}
}
} openclaw mcp add codespar-mcp-khipu --command npx --arg -y --arg @codespar/mcp-khipu
mcp_servers:
codespar-mcp-khipu:
command: "npx"
args: ["-y", "@codespar/mcp-khipu"] {
"mcpServers": {
"codespar-mcp-khipu": {
"command": "npx",
"args": [
"-y",
"@codespar/mcp-khipu"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Aug 26 +4
- Stability: unverified → 0.27 ▲ functional
- 2 Aug 26 +60
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- Schema quality: unverified → excellent ▲ functional
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Licence: MIT functional
- 31 Jul 26 −23
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 −18
- Malware scan: pass → unverified ▼ security
- 27 Jul 26 46
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Analysed npm/@codespar/[email protected]
Provenance none
Ecosystem: npm · Outcome: none
Dependencies 94 packages
94 packages in the resolved dependency tree · 94 deprecated · 29 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
confirm_payment ~50
Manually confirm a Khipu payment. Use when the merchant has opted into manual confirmation and the backend has validated the underlying transfer.
| Name | Type | Req | Description |
|---|---|---|---|
| payment_id | string | yes | Khipu payment id to confirm |
No output schema declared.
No examples provided.
create_automatic_payment ~146
Create a Khipu automatic payment (recurring / subscription charge against a previously enrolled subscription_id). The payer must have completed the subscription enrollment at their bank first.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Charge amount in major units |
| currency | string | yes | ISO-4217 currency (typically CLP) |
| custom | string | — | Arbitrary merchant string echoed in webhooks |
| notify_url | string | — | Webhook URL Khipu POSTs to on status changes |
| subject | string | yes | Short human-readable purpose of this charge |
| subscription_id | string | yes | Subscription id produced during payer enrollment |
| transaction_id | string | — | Merchant-side order reference |
No output schema declared.
No examples provided.
create_payment ~465
Create a Khipu payment (bank-transfer charge). Returns a payment_id and URLs the payer visits to authorize the transfer from their Chilean bank account. Use simplified_transfer_url for in-app redirects and transfer_url for desktop bank-login flows.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Amount in major units (CLP has no decimals — 1000 = 1000 pesos) |
| body | string | — | Longer description of the payment (shown alongside subject) |
| cancel_url | string | — | Browser redirect target if the payer cancels |
| collect_account_uuid | string | — | Override the default collection account |
| confirm_timeout_date | string | — | ISO-8601 deadline after which an unconfirmed payment auto-reverses |
| currency | string | yes | ISO-4217 currency code. Typically CLP for Chile; CLF supported for UF-denominated charges. |
| custom | string | — | Arbitrary merchant string (JSON-encoded if you need structure) echoed back in webhooks |
| expires_date | string | — | ISO-8601 expiration timestamp for this payment request |
| fixed_payer_personal_identifier | string | — | Lock this payment to a specific payer RUT |
| integrator_fee | number | — | Integrator fee (for partners) |
| notify_api_version | string | — | Webhook API version. Use '3.0' for v3 notifications. |
| notify_url | string | — | Webhook URL Khipu POSTs to on status changes (receives a notification_token) |
| payer_email | string | — | Payer email — Khipu emails the payment instructions to this address |
| payer_name | string | — | Payer display name |
| responsible_user_email | string | — | Internal merchant user email shown in Khipu's dashboard as responsible for this charge |
| return_url | string | — | Browser redirect target after a successful payment |
| send_email | boolean | — | If true, Khipu emails the payer with the payment link |
| send_reminders | boolean | — | If true, Khipu sends the payer reminder emails before expiration |
| subject | string | yes | Short human-readable purpose of the payment (shown to the payer at their bank) |
| transaction_id | string | — | Merchant-side order reference echoed back in webhooks |
No output schema declared.
No examples provided.
create_receiver ~147
Create (onboard) a new receiver under an integrator account. The receiver can then collect Khipu payments. Only available to integrator-level API keys.
| Name | Type | Req | Description |
|---|---|---|---|
| admin_email | string | yes | Admin user email |
| admin_first_name | string | — | Admin user first name |
| admin_last_name | string | — | Admin user last name |
| business_identifier | string | yes | RUT / tax identifier of the receiving business |
| business_name | string | yes | Legal business name |
| contact_email | string | — | Public contact email |
| contact_phone | string | — | Public contact phone |
| country | string | — | ISO-3166 country code (e.g. 'CL') |
No output schema declared.
No examples provided.
create_terminal_session ~125
Create a Khipu terminal session for in-person / POS bank-transfer checkout. Returns a QR/URL the payer scans at the point of sale to pay from their bank app.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Amount in major units (CLP) |
| currency | string | yes | ISO-4217 currency, typically CLP |
| expires_date | string | — | ISO-8601 expiration timestamp |
| subject | string | yes | Short description of the sale |
| terminal_id | string | — | Optional POS terminal identifier |
| transaction_id | string | — | Merchant-side order reference |
No output schema declared.
No examples provided.
delete_payment ~47
Delete (cancel) a pending Khipu payment. Only works while the payment has not been paid by the payer.
| Name | Type | Req | Description |
|---|---|---|---|
| payment_id | string | yes | Khipu payment id to delete |
No output schema declared.
No examples provided.
delete_webhook ~41
Delete (unregister) a webhook endpoint by id. Khipu stops sending notifications immediately.
| Name | Type | Req | Description |
|---|---|---|---|
| webhook_id | string | yes | Webhook id to delete |
No output schema declared.
No examples provided.
get_banks ~44
List Chilean banks supported by Khipu for bank-transfer payments. Agents can use this to render a bank-selection UI or to validate a bank_id before creating a payment.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_merchant ~42
Fetch a single merchant by id. Returns commercial info, configured collect accounts, and current integration status.
| Name | Type | Req | Description |
|---|---|---|---|
| merchant_id | string | yes | Khipu merchant id |
No output schema declared.
No examples provided.
get_merchants ~31
List the merchant receiver accounts accessible with the current API key. Useful to confirm auth + discover receiver_id values.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_payment ~70
Retrieve a Khipu payment. Pass either payment_id (lookup by id) or notification_token (lookup from a webhook — preferred, since webhooks only contain the token).
| Name | Type | Req | Description |
|---|---|---|---|
| notification_token | string | — | Token received in the webhook payload |
| payment_id | string | — | Khipu payment id |
No output schema declared.
No examples provided.
get_terminal_session ~51
Retrieve the current status of a terminal (POS) session — whether the payer has scanned, paid, or the session has expired.
| Name | Type | Req | Description |
|---|---|---|---|
| session_id | string | yes | Terminal session id returned by create_terminal_session |
No output schema declared.
No examples provided.
list_conciliations ~89
List settlement / conciliation records for a date range. Each record groups settled payments into a single bank deposit. Use to match Khipu payouts to your accounting.
| Name | Type | Req | Description |
|---|---|---|---|
| end | string | yes | ISO-8601 end date (inclusive) |
| merchant_id | string | — | Optional merchant filter (integrator use) |
| start | string | yes | ISO-8601 start date (inclusive) |
No output schema declared.
No examples provided.
list_merchant_accounts ~51
List the bank accounts registered for a merchant to collect into. Use with refund_payment / conciliation flows to know which account funds settle to.
| Name | Type | Req | Description |
|---|---|---|---|
| merchant_id | string | yes | Khipu merchant id |
No output schema declared.
No examples provided.
list_payments ~115
List Khipu payments for the current merchant, optionally filtered by date range and status. Useful for reconciliation jobs and agent-driven reporting.
| Name | Type | Req | Description |
|---|---|---|---|
| end | string | — | ISO-8601 end timestamp (inclusive) |
| page | number | — | Page number (1-based) |
| page_size | number | — | Results per page |
| start | string | — | ISO-8601 start timestamp (inclusive) |
| status | string | — | Filter by status (e.g. 'done', 'pending', 'expired', 'reversed') |
No output schema declared.
No examples provided.
list_receivers ~43
List receivers onboarded under the current integrator account.
| Name | Type | Req | Description |
|---|---|---|---|
| page | number | — | Page number (1-based) |
| page_size | number | — | Results per page |
No output schema declared.
No examples provided.
list_reviews ~88
List payer reviews / opinions left after a Khipu payment. Useful for NPS dashboards and detecting UX problems in the payment flow.
| Name | Type | Req | Description |
|---|---|---|---|
| end | string | — | ISO-8601 end date (inclusive) |
| page | number | — | Page number (1-based) |
| page_size | number | — | Results per page |
| start | string | — | ISO-8601 start date (inclusive) |
No output schema declared.
No examples provided.
list_webhooks ~18
List registered webhook endpoints for the current merchant.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
predict_payment ~114
Predict whether a payment is likely to succeed for a given payer+amount+bank, and recommend the best bank/rail. Call before create_payment to improve conversion for large or edge-case transfers.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Intended charge amount in major units |
| bank_id | string | — | Candidate bank id (from get_banks) |
| currency | string | yes | ISO-4217 currency code, typically CLP |
| payer_email | string | — | Payer email (optional — Khipu uses history if known) |
No output schema declared.
No examples provided.
refund_payment ~88
Refund a paid Khipu payment (full or partial). Refunds are only possible for merchants collecting into a Khipu account and before settlement of the corresponding funds (until 01:00 am the next business day).
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | — | Partial refund amount in major units. Omit for a full refund. |
| payment_id | string | yes | Khipu payment id to refund |
No output schema declared.
No examples provided.
register_webhook ~102
Register a webhook endpoint to receive Khipu notifications (payment.paid, payment.refunded, etc). Returns a webhook id and the shared secret used to verify incoming signatures.
| Name | Type | Req | Description |
|---|---|---|---|
| events | array | — | Event names to subscribe to (e.g. ['payment.paid','payment.refunded']) |
| secret | string | — | Optional shared secret; Khipu generates one if omitted |
| url | string | yes | HTTPS endpoint Khipu will POST notifications to |
No output schema declared.
No examples provided.