Openfinance Br MCP

Name: Openfinance Br MCP
Author: brunovicco

作者：brunovicco版本 0.2.0i★ –i在你的电脑上运行

注册名称io.github.brunovicco/openfinance-br-mcp

安装

概览

作者提供的说明（英文原文）

Secure Open Finance Brasil MCP server with typed tools and a credential-free mock mode

PopNx MCP 的三大支柱

这三项永远不会合并成一个分数：意见、测量和人气是不同的东西。

用户评价i暂无评价评价功能将在后续阶段与账户功能一起开放
我们的基础检查i1 项中通过 1 项依据公开信息检查；尚未扫描代码
使用情况i非常新↓ 30/周 · ★ –

它能帮你做什么

我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。

连接方式: 在你的电脑上运行
传输方式: stdio
分类: 会计、财务与税务
你需要填写：REDIS_URL, ANTHROPIC_API_KEY

安装

选择你使用的 AI 应用，然后复制设置。

安装之前

基础检查：1 项中通过 1 项
在你的电脑上运行，拥有你的用户账户的权限（文件、网络、应用）。
需要你自己填写： ENVIRONMENT, CLIENT_ID, PRIVATE_KEY_PATH, PRIVATE_KEY_KID, MTLS_CERT_PATH, MTLS_KEY_PATH, REDIS_URL, ANTHROPIC_API_KEY

标为机密的值是你账户的钥匙。千万不要分享给别人，也不要粘贴到聊天里。

你需要

PyPI已安装 Python 的 uv（用于 uvx 命令）

你用的是哪个应用？

ClaudeClaude CodeCursorVS CodeChatGPT

在上方选择你的应用。我们会记住它，下次按钮会显示“安装到 …”。

打开 Claude Desktop → Settings → Developer → Edit Config，把下面的内容粘贴到 claude_desktop_config.json

{
  "mcpServers": {
    "openfinance-br": {
      "command": "uvx",
      "args": [
        "openfinance-br-mcp"
      ],
      "env": {
        "ENVIRONMENT": "your-value",
        "CLIENT_ID": "your-value",
        "PRIVATE_KEY_PATH": "your-value",
        "PRIVATE_KEY_KID": "your-value",
        "MTLS_CERT_PATH": "your-value",
        "MTLS_KEY_PATH": "your-value",
        "REDIS_URL": "your-value",
        "ANTHROPIC_API_KEY": "your-value"
      }
    }
  }
}

在终端中运行这条命令

claude mcp add openfinance-br --env ENVIRONMENT=your-value --env CLIENT_ID=your-value --env PRIVATE_KEY_PATH=your-value --env PRIVATE_KEY_KID=your-value --env MTLS_CERT_PATH=your-value --env MTLS_KEY_PATH=your-value --env REDIS_URL=your-value --env ANTHROPIC_API_KEY=your-value -- uvx openfinance-br-mcp

运行前请先填写空着的值。

在 Cursor 中打开

或者自己复制设置

粘贴到项目中的 .cursor/mcp.json，或 ~/.cursor/mcp.json

{
  "mcpServers": {
    "openfinance-br": {
      "command": "uvx",
      "args": [
        "openfinance-br-mcp"
      ],
      "env": {
        "ENVIRONMENT": "your-value",
        "CLIENT_ID": "your-value",
        "PRIVATE_KEY_PATH": "your-value",
        "PRIVATE_KEY_KID": "your-value",
        "MTLS_CERT_PATH": "your-value",
        "MTLS_KEY_PATH": "your-value",
        "REDIS_URL": "your-value",
        "ANTHROPIC_API_KEY": "your-value"
      }
    }
  }
}

浏览器会先询问是否打开应用，然后应用会显示设置并请你确认。密钥的值会留空，由你自己填写。

在 VS Code 中打开

或者自己复制设置

粘贴到项目中的 .vscode/mcp.json

{
  "servers": {
    "openfinance-br": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "openfinance-br-mcp"
      ],
      "env": {
        "ENVIRONMENT": "your-value",
        "CLIENT_ID": "your-value",
        "PRIVATE_KEY_PATH": "your-value",
        "PRIVATE_KEY_KID": "your-value",
        "MTLS_CERT_PATH": "your-value",
        "MTLS_KEY_PATH": "your-value",
        "REDIS_URL": "your-value",
        "ANTHROPIC_API_KEY": "your-value"
      }
    }
  }
}

浏览器会先询问是否打开应用，然后应用会显示设置并请你确认。密钥的值会留空，由你自己填写。

这个服务器在你的电脑上运行，而 ChatGPT 只能连接互联网上的服务器。请选择其他应用。

你的选择通过 Cookie 保存在这台设备上，无需账户。

需要你填写的值

ENVIRONMENT env
'mock' (default, no credentials needed - runs entirely in-memory), 'sandbox', or 'production'
CLIENT_ID env
Client ID registered with the participating institution. Required unless ENVIRONMENT=mock
PRIVATE_KEY_PATH env
Path to the RSA private key used for private_key_jwt and JAR signing outside mock mode
PRIVATE_KEY_KID env
Key ID matching the registered client JWKS entry outside mock mode
MTLS_CERT_PATH env
Path to the client mTLS certificate used outside mock mode
MTLS_KEY_PATH env
Path to the client mTLS private key used outside mock mode
REDIS_URL 机密 env
Optional Redis connection URL for persistent consent and token state
ANTHROPIC_API_KEY 机密 env
Required only when calling list_transactions with categorize=true (DSPy transaction categorization)

这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同，请以 README 为准。

它能做什么

它在你的电脑上运行；安装后，工具列表会显示在你的 AI 应用中。

基础检查i

我们检查的是任何人都能看到的信息；我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月8日

✓ 通过
作者与仓库一致
注册名称已通过 GitHub 账户 brunovicco 验证，该账户拥有此仓库
… 尚未检查
仍在维护
我们还没有从 GitHub 读取这个仓库
… 尚未检查
有许可证
我们还没有从 GitHub 读取这个仓库
– 不适用
端点有响应
它在你的电脑上运行，没有互联网端点
– 不适用
使用 OAuth 登录
在你的电脑上运行，改用本地设置
… 尚未检查
工具描述中没有隐藏指令
它在你的电脑上运行；我们只能读取互联网端点的工具列表

与“会计、财务与税务”中的其他服务器比较i

星标数多于此分类中其他 2920 个服务器的 0%
发布到注册中心的时间比此分类中其他 2920 个服务器的 21% 更新
基础检查结果等于或优于此分类中其他 2920 个服务器的 100%

与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时，星标数才计入。

常见问题

Openfinance Br MCP 安全吗？

它在 1 项适用的基础检查中通过了 1 项。我们没有阅读代码。在添加密钥或令牌之前，请先看看这个服务器要求哪些权限，并使用只具备所需权限的密钥。

它需要哪些密钥或代码？

你需要填写：REDIS_URL, ANTHROPIC_API_KEY

它在我的电脑上运行还是在云端？

它在你的电脑上运行。你的 AI 应用会在需要时启动它，数据不会经过作者的服务器（除非它自己调用在线服务）。

它还在维护吗？

GitHub 仓库最后更新于–，最新版本（0.2.0）于4个月前进入注册中心。

哪些应用可以使用它？

支持 MCP 的应用，例如 Claude Desktop、Claude Code、Cursor 和 VS Code。你的电脑上还需要有 Python (uv)。

有什么可以替代它？

同一分类中有：Finance Toolkit, SolidInvoice, Korea Tax Calculator

替代选择

同一分类中其他作者的服务器，按星标数排序。

如何看卡片：↓ 每周下载量i★ GitHub 星标i三大支柱：评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i

Finance Toolkit

500+ transparent financial methods calculated from raw statements, not third-party endpoints.

作者：JerBouma广泛使用↓ 1.6万/周★ 5496昨天更新

电脑或云端

安装

SolidInvoice

Create and send invoices and quotes, manage clients, and track payments in SolidInvoice.

作者：SolidInvoice正在增长★ 9819天前更新

在云端运行✓ solidinvoice.co

安装

Korea Tax Calculator

Korean tax calculation and tax-audit judgment MCP: 96 tools with statutory citations.

作者：UpstageAI正在增长↓ 3172/周★ 97前天更新

在你的电脑上运行

安装

作者的 README

打开 README

按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。

English · Português

openfinance-br-mcp

Experimental MCP server for Open Finance Brasil, with a complete mock

environment and evolving FAPI-BR integration. It is not certified or

validated against real institutions; see VALIDATION.md

before using it outside environment=mock.

What it is

An MCP Server that abstracts away the complexity of Open Finance Brasil (FAPI 1.0 Advanced, OAuth2, consent, mTLS) and exposes simple tools to Claude:

Claude → "how much did I spend on food in March?"

Claude uses list_transactions(bank=nubank, categorize=true, date_from=2024-03-01) Claude → "You spent R$ 847.30 on food in March..."

Supported banks

The mock environment simulates Nubank, Sicoob, Caixa, Banco do Brasil, Bradesco, Itaú, Santander, XP, PicPay, and BTG Pactual with in-memory data and no network access. These are simulations, not certified integrations.

Real adapters and the Payments API journey are experimental and unvalidated. Payments use the v5 payments-consents/payments-pix Directory families, dedicated per-consent tokens, verified response JWS, PAR/JAR, consent-payload binding, and persistent idempotency. list_pix_keys is a demonstration extension rather than a standardized Open Finance Brasil endpoint. See VALIDATION.md for the exact scope.

Available MCP tools

The server exposes 18 tools grouped by journey:

Accounts: list_accounts, get_balance, list_transactions
Cards: list_credit_cards, get_credit_card_bills
Investments: list_investments, list_funds, list_variable_incomes, list_treasure_titles
PIX: list_pix_keys, initiate_pix
Data consent: start_consent, complete_consent, check_consent_status, revoke_consent
Payment consent: start_payment_consent, complete_payment_consent, check_payment_consent_status

It also exposes the openfinance://banks/ resource, the analyze_monthly_spending prompt, and optional URL elicitation when starting an authorization flow.

Quick start

Prerequisites

Python 3.12 or 3.13
uv installed

# Run the published release in credential-free mock mode

uvx --from openfinance-br-mcp==0.2.0 openfinance-mcp

From source

git clone https://github.com/brunovicco/openfinance-br-mcp.git

cd openfinance-br-mcp

Optional: needed only for sandbox/production or DSPy categorization

cp .env.example .env

Install dependencies

uv sync

Run the server

uv run openfinance-mcp

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

"mcpServers": { "openfinance-br": { "command": "uvx", "args": ["--from", "openfinance-br-mcp==0.2.0", "openfinance-mcp"] } } }

Development

# Install with dev-dependencies

uv sync

Run the tests

uv run pytest tests/ -v

Lint and formatting

uv run ruff check src/ tests/ uv run black src/ tests/

Type check

uv run mypy src/

Containers and Kubernetes

docker compose up openfinance-mcp

docker compose --profile test up

The k8s/ directory contains a two-replica Streamable HTTP example with Redis-backed state. Replace every credential, signing-key, OAuth issuer, resource-server, and domain placeholder before applying it. The server fails closed when HTTP is exposed outside loopback without MCP client OAuth.

Architecture

Claude (MCP Client)

│ stdio or streamable-http ▼ openfinance-br-mcp (MCP Server) ├── Auth + Consent (FAPI-BR 2.2.0: private_key_jwt, PAR/JAR, PKCE, mTLS) ├── MCP Primitives (18 tools + 1 resource + 1 prompt) │ ├── Pydantic v2 input/output schemas │ ├── Optional URL elicitation for bank authorization │ └── Categorizer (DSPy + Claude for transaction classification) ├── Bank Adapters (10 banks - extensible) └── Directory Client (resolves real bank endpoints from the BCB Directory of Participants) │ HTTPS/mTLS ▼ Open Finance BR (BCB) - Directory of Participants │ ▼ Nubank · Sicoob · Caixa · + 100 participating institutions

Environment variables

Variable	Required	Description
`ENVIRONMENT`	❌	`mock` (default, no credentials needed), `sandbox`, or `production`
`CLIENT_ID`	⚠️ non-mock	Client ID registered with the institution
`PRIVATE_KEY_PATH`	⚠️ non-mock	RSA private key for `private_key_jwt`/JAR signing
`PRIVATE_KEY_KID`	⚠️ non-mock	`kid` matching the registered client JWKS
`MTLS_CERT_PATH`	⚠️ prod	Path to the mTLS certificate
`MTLS_KEY_PATH`	⚠️ prod	mTLS private key
`ANTHROPIC_API_KEY`	⚠️ DSPy	Required for `categorize=true`
`REDIS_URL`	❌	Shares TokenStore/ConsentManager state across replicas
`MCP_TRANSPORT`	❌	`stdio` (default) or `streamable-http`
`MCP_HTTP_ALLOWED_ORIGINS`	⚠️ remote HTTP	Required allowlist for any non-loopback bind
`LANGFUSE_OTLP_ENDPOINT`	❌	Enables tracing to Langfuse (with `LANGFUSE_PUBLIC_KEY`/`LANGFUSE_SECRET_KEY`)
`LOG_LEVEL`	❌	INFO, DEBUG, WARNING (default: INFO)
`LOG_FORMAT`	❌	json or console (default: json)

See .env.example for the full list.

Documentation

Authorization - the two token universes and why they can never cross
Contributing - dev setup, CI checks, and adding an adapter
Security - scope, disclaimer, and vulnerability reporting
Sources - specifications and RFCs followed by the implementation
Validation - what has and has not been validated
Changelog - release history
Releasing - maintainer release procedure

License

MIT