io.github.codespar/mcp-rede
NPM · @CODESPAR/MCP-REDE · SCANNED AUG 5
MCP server for Rede — Itaú-owned BR acquirer: authorize/capture/refund, zero-auth, card tokens
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security86
- No malware found by supply-chain analysis.Pass
- Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 43 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability71
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 2243 tokens (~101/item across 22 items; 22 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management33
- Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage91
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 74% of tool parameters carry a description.Partial
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · @codespar/mcp-rede
claude mcp add codespar-mcp-rede -- npx -y @codespar/mcp-rede
codex mcp add codespar-mcp-rede -- npx -y @codespar/mcp-rede
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"codespar-mcp-rede": {
"type": "local",
"command": [
"npx",
"-y",
"@codespar/mcp-rede"
],
"enabled": true
}
}
} openclaw mcp add codespar-mcp-rede --command npx --arg -y --arg @codespar/mcp-rede
mcp_servers:
codespar-mcp-rede:
command: "npx"
args: ["-y", "@codespar/mcp-rede"] {
"mcpServers": {
"codespar-mcp-rede": {
"command": "npx",
"args": [
"-y",
"@codespar/mcp-rede"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.
- 3 Aug 26 +4
- Stability: unverified → 0.27 ▲ functional
- 2 Aug 26 +43
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Schema quality: unverified → good ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- Licence: MIT functional
- 1 Aug 26 0
- Malware scan: unverified → pass ▲ security
- Tool coverage: 100 → unverified ▼ functional
- First check of Schema quality: unverified functional
- 31 Jul 26 −25
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 27 Jul 26 45
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Aug 2026 · Analysed npm/@codespar/[email protected]
Provenance none
Ecosystem: npm · Outcome: none
Dependencies 94 packages
94 packages in the resolved dependency tree · 94 deprecated · 29 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
authenticate_3ds ~195
Initiate a 3DS (EMV 3-D Secure) authentication for a card charge. Returns a threeDSecure reference id and, when required, a challenge URL for cardholder interaction.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Amount in cents |
| cardHolderName | string | — | — |
| cardNumber | string | — | PAN; never log. Prefer storageCard. |
| expirationMonth | number | — | — |
| expirationYear | number | — | — |
| installments | number | — | Number of installments (1 for à vista) |
| paymentMethod | string | yes | 'credit' or 'debit' |
| reference | string | yes | Merchant-side order reference |
| securityCode | string | — | — |
| storageCard | string | — | Token from tokenize_card |
| threeDSecure | object | — | 3DS options: { onFailure: 'decline' | 'continue', userAgent, device, returnUrl } |
No output schema declared.
No examples provided.
authorize_debit ~187
Authorize a debit card transaction on Rede. Requires a prior 3DS authentication — pass threeDSecure.embedded=true and a valid threeDSecure reference, or use authorize_with_3ds after authenticate_3ds.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Amount in cents |
| cardHolderName | string | — | — |
| cardNumber | string | — | PAN; never log. Prefer storageCard. |
| expirationMonth | number | — | — |
| expirationYear | number | — | — |
| reference | string | yes | Merchant-side order reference |
| securityCode | string | — | — |
| softDescriptor | string | — | — |
| storageCard | string | — | Token from tokenize_card |
| threeDSecure | object | yes | 3DS payload: { embedded: true, onFailure: 'decline' | 'continue', userAgent, device: { ... } }. Required for débito. |
No output schema declared.
No examples provided.
authorize_transaction ~232
Authorize a credit card transaction on Rede. Set capture=true to authorize + capture atomically; capture=false to authorize only (use capture_transaction later).
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Amount in cents |
| capture | boolean | yes | true = authorize + capture; false = authorize only |
| cardHolderName | string | — | Name on card |
| cardNumber | string | — | PAN; never log this value. Prefer storageCard (token) instead. |
| expirationMonth | number | — | Expiration month (1-12) |
| expirationYear | number | — | Expiration year (4 digits) |
| installments | number | yes | Number of installments (1 for à vista) |
| reference | string | yes | Merchant-side order reference (unique per merchant) |
| securityCode | string | — | CVV |
| softDescriptor | string | — | Statement descriptor shown on the cardholder bill |
| storageCard | string | — | Token from tokenize_card (alternative to cardNumber) |
| subscription | boolean | — | Flag as a recurring charge (MIT) |
| urls | array | — | Optional callback/notification URL objects ({ url, kind }) |
No output schema declared.
No examples provided.
authorize_with_3ds ~199
Authorize a transaction after a successful 3DS authentication, attaching the 3DS reference for liability shift. Works for both credit and debit.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Amount in cents |
| capture | boolean | — | true = authorize + capture; false = authorize only (credit only) |
| cardHolderName | string | — | — |
| cardNumber | string | — | PAN; never log. Prefer storageCard. |
| expirationMonth | number | — | — |
| expirationYear | number | — | — |
| installments | number | — | Number of installments (1 for à vista) |
| kind | string | — | 'credit' or 'debit' |
| reference | string | yes | Merchant-side order reference |
| securityCode | string | — | — |
| softDescriptor | string | — | — |
| storageCard | string | — | Token from tokenize_card |
| threeDSecureId | string | yes | 3DS reference id from authenticate_3ds |
No output schema declared.
No examples provided.
cancel_boleto ~41
Cancel an unpaid boleto. Paid boletos cannot be canceled — issue a refund via the payer's bank instead.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Rede boleto id |
No output schema declared.
No examples provided.
cancel_transaction ~51
Cancel an authorized-but-uncaptured transaction (void). Rede uses the refunds endpoint for both voids and refunds — cancel means full amount on an uncaptured transaction.
| Name | Type | Req | Description |
|---|---|---|---|
| tid | string | yes | Rede transaction id |
No output schema declared.
No examples provided.
capture_transaction ~67
Capture a previously authorized transaction (when capture=false was used). Pass amount for partial capture; omit for full.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | — | Amount to capture in cents. Omit to capture the full authorized amount. |
| tid | string | yes | Rede transaction id (tid) from authorize_transaction |
No output schema declared.
No examples provided.
create_boleto ~156
Issue a boleto registrado via Rede. Rede registers the slip with the banking network and returns the typable line (linha digitável) plus the PDF/URL.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Amount in cents |
| dueDate | string | yes | Due date YYYY-MM-DD |
| instructions | array | — | Optional printed instructions (strings) — e.g. fine/interest after due, discount rules. |
| payer | object | yes | Payer object: { name, document (CPF/CNPJ, digits only), email, address: { street, number, city, state, zipCode } } |
| reference | string | yes | Merchant-side reference (unique per merchant) |
| softDescriptor | string | — | Statement descriptor / beneficiary name override |
No output schema declared.
No examples provided.
create_recurrence ~191
Create a native Rede recurrence (subscription). Rede handles retries and cardholder updates automatically.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Recurring amount in cents |
| cardHolderName | string | — | — |
| cardNumber | string | — | PAN; never log. Prefer storageCard. |
| endDate | string | — | End date YYYY-MM-DD (optional) |
| expirationMonth | number | — | — |
| expirationYear | number | — | — |
| frequency | string | yes | Billing frequency (e.g. MONTHLY, WEEKLY, DAILY) |
| reference | string | yes | Merchant-side recurrence reference |
| securityCode | string | — | — |
| softDescriptor | string | — | — |
| startDate | string | yes | Start date YYYY-MM-DD |
| storageCard | string | — | Token from tokenize_card (alternative to cardNumber) |
| totalRecurrences | number | — | Total number of recurrences (omit for open-ended) |
No output schema declared.
No examples provided.
delete_token ~29
Delete a previously created card token.
| Name | Type | Req | Description |
|---|---|---|---|
| tokenId | string | yes | Token id returned by tokenize_card |
No output schema declared.
No examples provided.
disable_recurrence ~34
Disable (cancel) an active recurrence. Stops all future billings.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Rede recurrence id |
No output schema declared.
No examples provided.
get_3ds_status ~69
Check the current status of a 3DS authentication by its reference id. Returns whether the cardholder completed the challenge and the resulting 3DS reference to attach to an authorize call.
| Name | Type | Req | Description |
|---|---|---|---|
| threeDSecureId | string | yes | 3DS reference id returned by authenticate_3ds |
No output schema declared.
No examples provided.
get_boleto ~66
Retrieve a boleto by Rede boleto id or by merchant reference. Returns status (REGISTERED, PAID, EXPIRED, CANCELED) and typable line.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | — | Rede boleto id |
| reference | string | — | Merchant-side reference used at create time |
No output schema declared.
No examples provided.
get_recurrence ~28
Retrieve a recurrence by Rede recurrence id.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Rede recurrence id |
No output schema declared.
No examples provided.
get_recurrence_transactions ~56
List transactions generated by a recurrence (one row per billing cycle executed).
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Rede recurrence id |
| page | number | — | Page index (0-based) |
| size | number | — | Page size |
No output schema declared.
No examples provided.
get_token ~45
Retrieve metadata for a previously stored card token (brand, last 4, expiration). Does not return the PAN.
| Name | Type | Req | Description |
|---|---|---|---|
| tokenId | string | yes | Token id returned by tokenize_card |
No output schema declared.
No examples provided.
get_transaction ~51
Retrieve a transaction by Rede tid OR by merchant reference. Pass exactly one of tid or reference.
| Name | Type | Req | Description |
|---|---|---|---|
| reference | string | — | Merchant-side reference used at authorize time |
| tid | string | — | Rede transaction id |
No output schema declared.
No examples provided.
list_transactions ~107
List transactions in a date range. Useful for reconciliation. Rede paginates results; pass page/size to walk pages.
| Name | Type | Req | Description |
|---|---|---|---|
| endDate | string | yes | End date YYYY-MM-DD |
| page | number | — | Page index (0-based) |
| size | number | — | Page size (default 20) |
| startDate | string | yes | Start date YYYY-MM-DD |
| status | string | — | Optional status filter (e.g. AUTHORIZED, CAPTURED, DENIED) |
No output schema declared.
No examples provided.
refund_transaction ~62
Refund a captured transaction. Pass amount for a partial refund; omit for full. Same endpoint as cancel; amount controls the behaviour.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | — | Refund amount in cents. Omit for a full refund. |
| tid | string | yes | Rede transaction id |
No output schema declared.
No examples provided.
tokenize_card ~77
Tokenize a card for PCI-safe reuse. Returns a token (storageCard) to pass into authorize_transaction.storageCard.
| Name | Type | Req | Description |
|---|---|---|---|
| cardHolderName | string | yes | — |
| cardNumber | string | yes | PAN; never log |
| expirationMonth | number | yes | — |
| expirationYear | number | yes | — |
| securityCode | string | yes | — |
No output schema declared.
No examples provided.
update_recurrence ~115
Update an existing recurrence — change amount, card (storageCard), end date, or pause/resume. Pass only the fields you want to change.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | — | New recurring amount in cents |
| endDate | string | — | New end date YYYY-MM-DD |
| id | string | yes | Rede recurrence id |
| softDescriptor | string | — | — |
| status | string | — | Status override: ENABLED | DISABLED | PAUSED |
| storageCard | string | — | New card token to charge |
No output schema declared.
No examples provided.
zero_auth ~118
Validate a card without charging (zero-auth / account verification). Returns whether the card is authorizable, without creating a transaction.
| Name | Type | Req | Description |
|---|---|---|---|
| cardHolderName | string | — | — |
| cardNumber | string | — | PAN; never log. Prefer storageCard. |
| expirationMonth | number | — | — |
| expirationYear | number | — | — |
| onlyStatusCode | boolean | — | If true, return status code only (faster) |
| securityCode | string | — | — |
| storageCard | string | — | Token from tokenize_card (alternative to cardNumber) |
No output schema declared.
No examples provided.