io.github.codespar/mcp-mercado-pago
NPM · @CODESPAR/MCP-MERCADO-PAGO · SCANNED AUG 5
Mercado Pago — payments, checkout, PIX, refunds for LATAM
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security86
- No malware found by supply-chain analysis.Pass
- Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 43 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability67
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 1924 tokens (~64/item across 30 items; 30 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management33
- Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage98
- 97% of tools have a non-trivial description (not blank, and not just the tool's name).Partial
- 100% of tool parameters carry a description.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · @codespar/mcp-mercado-pago
claude mcp add codespar-mcp-mercado-pago -- npx -y @codespar/mcp-mercado-pago
codex mcp add codespar-mcp-mercado-pago -- npx -y @codespar/mcp-mercado-pago
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"codespar-mcp-mercado-pago": {
"type": "local",
"command": [
"npx",
"-y",
"@codespar/mcp-mercado-pago"
],
"enabled": true
}
}
} openclaw mcp add codespar-mcp-mercado-pago --command npx --arg -y --arg @codespar/mcp-mercado-pago
mcp_servers:
codespar-mcp-mercado-pago:
command: "npx"
args: ["-y", "@codespar/mcp-mercado-pago"] {
"mcpServers": {
"codespar-mcp-mercado-pago": {
"command": "npx",
"args": [
"-y",
"@codespar/mcp-mercado-pago"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Aug 26 +1
- CVE-2026-69207 no longer affects this package ▲ security
- Known CVEs: fail → partial ▲ security
- 4 Aug 26 +4
- CVE-2026-69207 affects this package: medium ▼ security
- Known CVEs: partial → fail ▼ security
- Stability: unverified → 0.30 ▲ functional
- 3 Aug 26 +43
- Provenance: unverified → fail ▼ security
- Known CVEs: unverified → partial ▲ security
- Install scripts: unverified → pass ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- License: unverified → pass ▲ functional
- Tool coverage: unverified → 97 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Maintenance: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Licence: MIT functional
- 2 Aug 26 −36
- Provenance: fail → unverified ▼ security
- Install scripts: pass → unverified ▼ security
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- Capabilities: pass → unverified ▼ functional
- License: pass → unverified ▼ functional
- Maintenance: pass → unverified ▼ functional
- Tool coverage: 97 → unverified ▼ functional
- Licence: MIT functional
- 1 Aug 26 +15
- Malware scan: unverified → pass ▲ security
- 31 Jul 26 −6
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 −30
- Known CVEs: partial → unverified ▼ security
- Malware scan: pass → unverified ▼ security
- Dependency health: partial → unverified ▼ functional
- 29 Jul 26 +51
- Provenance: unverified → fail ▼ security
- Known CVEs: unverified → partial ▲ security
- Install scripts: unverified → pass ▲ security
- Maintenance: unverified → pass ▲ functional
- License: unverified → pass ▲ functional
- Schema quality: unverified → good ▲ functional
- Tool coverage: unverified → 97 ▲ functional
- Licence: MIT functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Aug 2026 · Analysed npm/@codespar/[email protected]
Provenance none
Ecosystem: npm · Outcome: none
Dependencies 94 packages
94 packages in the resolved dependency tree · 94 deprecated · 29 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
cancel_subscription ~29
Cancel a subscription (preapproval)
| Name | Type | Req | Description |
|---|---|---|---|
| preapproval_id | string | yes | Preapproval/subscription ID |
No output schema declared.
No examples provided.
create_advanced_payment ~143
Create a marketplace split payment with per-recipient disbursements (application_fee, money_release_days, collector_id per seller)
| Name | Type | Req | Description |
|---|---|---|---|
| additional_info | object | — | Additional info (items, shipments, payer details) |
| binary_mode | boolean | — | If true, payment is approved or rejected (no pending) |
| capture | boolean | — | Whether to capture the payment immediately |
| description | string | — | Payment description |
| disbursements | array | yes | Split rules per seller |
| external_reference | string | — | External reference ID |
| payer | object | yes | Buyer information |
| payments | array | yes | Buyer's payment methods covering the total amount |
No output schema declared.
No examples provided.
create_card_token ~76
Tokenize a card for secure payments
| Name | Type | Req | Description |
|---|---|---|---|
| card_number | string | yes | Card number |
| cardholder | object | yes | Cardholder info |
| expiration_month | string | yes | Expiration month (MM) |
| expiration_year | string | yes | Expiration year (YYYY) |
| security_code | string | yes | CVV security code |
No output schema declared.
No examples provided.
create_customer ~41
Create a customer
| Name | Type | Req | Description |
|---|---|---|---|
| string | yes | Customer email | |
| first_name | string | — | First name |
| last_name | string | — | Last name |
No output schema declared.
No examples provided.
create_payment ~96
Create a new payment
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Payment amount |
| description | string | yes | Payment description |
| installments | number | — | Number of installments (default 1) |
| payer_email | string | yes | Payer email address |
| payment_method_id | string | yes | Payment method ID (e.g. pix, credit_card, bolbradesco) |
| token | string | — | Card token (for credit card payments) |
No output schema declared.
No examples provided.
create_pix_payment ~85
Create a PIX payment
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Payment amount |
| description | string | yes | Payment description |
| payer_cpf | string | — | Payer CPF (identification number) |
| payer_email | string | yes | Payer email |
| payer_first_name | string | — | Payer first name |
| payer_last_name | string | — | Payer last name |
No output schema declared.
No examples provided.
create_pos ~93
Create a point of sale (POS) linked to a store
| Name | Type | Req | Description |
|---|---|---|---|
| category | number | — | MCC category code |
| external_id | string | yes | External reference ID |
| external_store_id | string | — | External store reference |
| fixed_amount | boolean | — | Whether the POS has a fixed amount |
| name | string | yes | POS name |
| store_id | string | — | Store ID to link this POS to |
No output schema declared.
No examples provided.
create_preference ~50
Create a checkout preference for Checkout Pro
| Name | Type | Req | Description |
|---|---|---|---|
| auto_return | string | — | Auto-return mode |
| back_urls | object | — | Redirect URLs after payment |
| items | array | yes | Items to sell |
No output schema declared.
No examples provided.
create_refund ~43
Refund a payment (full or partial)
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | — | Refund amount (omit for full refund) |
| paymentId | string | yes | Payment ID to refund |
No output schema declared.
No examples provided.
create_settlement_report ~107
Manually generate a settlement (account money) report for a date range. Returns 202; poll the report list endpoint to download when ready.
| Name | Type | Req | Description |
|---|---|---|---|
| begin_date | string | yes | Start date, ISO 8601 UTC (e.g. 2026-04-01T00:00:00Z) |
| end_date | string | yes | End date, ISO 8601 UTC (e.g. 2026-04-30T23:59:59Z) |
No output schema declared.
No examples provided.
create_store ~58
Create a store (physical location or POS group)
| Name | Type | Req | Description |
|---|---|---|---|
| business_hours | object | — | Business hours configuration |
| external_id | string | — | External reference ID |
| location | object | — | Store location |
| name | string | yes | Store name |
No output schema declared.
No examples provided.
create_subscription ~72
Create a recurring subscription (preapproval)
| Name | Type | Req | Description |
|---|---|---|---|
| auto_recurring | object | yes | Recurring configuration |
| back_url | string | — | Return URL after authorization |
| external_reference | string | — | External reference ID |
| payer_email | string | yes | Payer email |
| reason | string | yes | Subscription reason/title |
No output schema declared.
No examples provided.
get_advanced_payment ~32
Get an advanced (split) payment by ID
| Name | Type | Req | Description |
|---|---|---|---|
| advanced_payment_id | string | yes | Advanced payment ID |
No output schema declared.
No examples provided.
get_balance ~12
Get account balance
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_chargeback ~32
Get chargeback details by ID
| Name | Type | Req | Description |
|---|---|---|---|
| chargeback_id | string | yes | Chargeback ID (or payment ID) |
No output schema declared.
No examples provided.
get_identification_types ~45
Get document/identification types available per country (CPF, CNPJ, DNI, RUT, etc.). Use the seller's access token — response is country-scoped.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_merchant_order ~27
Get merchant order by ID
| Name | Type | Req | Description |
|---|---|---|---|
| orderId | string | yes | Merchant order ID |
No output schema declared.
No examples provided.
get_payment ~24
Get payment details by ID
| Name | Type | Req | Description |
|---|---|---|---|
| paymentId | string | yes | Payment ID |
No output schema declared.
No examples provided.
get_payment_method_details ~44
Get details of a specific payment method by ID
| Name | Type | Req | Description |
|---|---|---|---|
| payment_method_id | string | yes | Payment method ID (e.g. visa, pix, bolbradesco) |
No output schema declared.
No examples provided.
get_payment_methods ~14
List available payment methods
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_payment_methods_by_site ~69
List available payment methods for a specific Mercado Pago site (MLB=Brazil, MLA=Argentina, MLM=Mexico, MLC=Chile, MCO=Colombia, MPE=Peru, MLU=Uruguay)
| Name | Type | Req | Description |
|---|---|---|---|
| site_id | string | yes | Marketplace site ID |
No output schema declared.
No examples provided.
get_preference ~25
Get checkout preference by ID
| Name | Type | Req | Description |
|---|---|---|---|
| preferenceId | string | yes | Preference ID |
No output schema declared.
No examples provided.
get_subscription ~32
Get subscription (preapproval) details by ID
| Name | Type | Req | Description |
|---|---|---|---|
| preapproval_id | string | yes | Preapproval/subscription ID |
No output schema declared.
No examples provided.
list_customers ~40
List customers
| Name | Type | Req | Description |
|---|---|---|---|
| string | — | Filter by email | |
| limit | number | — | Results limit |
| offset | number | — | Results offset |
No output schema declared.
No examples provided.
list_stores ~42
List stores
| Name | Type | Req | Description |
|---|---|---|---|
| external_id | string | — | Filter by external ID |
| limit | number | — | Results limit |
| offset | number | — | Results offset |
No output schema declared.
No examples provided.
oauth_token_exchange ~136
Exchange an authorization code for a seller access token (marketplace onboarding). Also supports refresh_token grant.
| Name | Type | Req | Description |
|---|---|---|---|
| client_id | string | yes | Marketplace application client_id |
| client_secret | string | yes | Marketplace application client_secret |
| code | string | — | Authorization code returned from /authorization (required for authorization_code) |
| code_verifier | string | — | PKCE code verifier (optional) |
| grant_type | string | — | OAuth grant type (default authorization_code) |
| redirect_uri | string | — | Redirect URI registered with the app (required for authorization_code) |
| refresh_token | string | — | Refresh token (required for refresh_token grant) |
No output schema declared.
No examples provided.
search_merchant_orders ~134
Search merchant orders with filters (last 90 days). Useful for reconciliation of Checkout Pro / Bricks flows.
| Name | Type | Req | Description |
|---|---|---|---|
| application_id | string | — | Filter by application ID |
| external_reference | string | — | Filter by external reference |
| limit | number | — | Results limit |
| offset | number | — | Results offset |
| payer_id | string | — | Filter by payer (buyer) user ID |
| preference_id | string | — | Filter by preference ID |
| sponsor_id | string | — | Filter by marketplace sponsor user ID |
| status | string | — | Order status (e.g. opened, closed, expired) |
No output schema declared.
No examples provided.
search_payments ~89
Search payments with filters
| Name | Type | Req | Description |
|---|---|---|---|
| criteria | string | — | Sort direction |
| date_from | string | — | Start date (ISO 8601) |
| date_to | string | — | End date (ISO 8601) |
| limit | number | — | Results limit |
| offset | number | — | Results offset |
| sort | string | — | Sort field |
| status | string | — | Payment status |
No output schema declared.
No examples provided.
update_subscription ~99
Update a subscription (preapproval) — amount, status, reason, card token, etc.
| Name | Type | Req | Description |
|---|---|---|---|
| auto_recurring | object | — | Updated recurring configuration |
| card_token_id | string | — | New card token to charge |
| external_reference | string | — | New external reference |
| preapproval_id | string | yes | Preapproval/subscription ID |
| reason | string | — | New subscription reason/title |
| status | string | — | New subscription status |
No output schema declared.
No examples provided.
upload_chargeback_evidence ~68
Upload documentation/evidence for a chargeback dispute. Accepts one or more files as base64 content.
| Name | Type | Req | Description |
|---|---|---|---|
| chargeback_id | string | yes | Chargeback ID |
| files | array | yes | Files to upload (.jpg, .png, .pdf; 10MB total max) |
No output schema declared.
No examples provided.