mcp-c6 — Claude Code MCP server: C6 Bank tools with a dead endpoint
An MCP server exposing Pix, boleto and account calls for C6 Bank to your coding agent. The npm package is deprecated and its hosts do not resolve.
claude mcp add --env C6_CLIENT_ID=<C6_CLIENT_ID> --env C6_CLIENT_SECRET=<C6_CLIENT_SECRET> --env C6_CERT_PATH=<C6_CERT_PATH> --env C6_KEY_PATH=<C6_KEY_PATH> --env C6_ENV=<C6_ENV> --transport stdio c6 -- npx -y @codespar/mcp-c6What mcp-c6 does
@codespar/mcp-c6 ships 14 tools. They cover Pix immediate charges and due-date charges, DICT key lookup, registration and removal, boleto issue and cancellation, plus account balance and statement retrieval. get_oauth_token fetches the bearer used by the rest.
Two credentials are needed on every call. The server caches an OAuth2 client_credentials token and keeps it fresh, then routes traffic through a Node https.Agent loaded with a client certificate and key. C6 hands that bundle to merchants after the contract is signed; point the server at it with C6_CERT_PATH and C6_KEY_PATH.
Here is the catch. Nothing reaches a service. Both production and sandbox hostnames written into the package fail DNS, the paths were sketched from the BACEN Pix v2 standard and other banks' conventions, and C6's portal now documents different hosts behind mTLS. The package is deprecated on npm. A working address can be set through C6_BASE_URL, yet the auth and paths will still need rework before anything answers.
What it helps with
- issue a Pix charge with a QR code from the agent
- check who owns a DICT key before sending money
- create a boleto and cancel it before payment
- pull the balance and statement for a merchant account
- register or delete a Pix key on the account
Example prompts for the agent
- Show the balance on our C6 merchant account
- Create a Pix charge for 150 BRL and give me the QR code
- Look up the owner of the DICT key
[email protected]before I send anything
How to install mcp-c6
Platform CLI
claude mcp add --env C6_CLIENT_ID=<C6_CLIENT_ID> --env C6_CLIENT_SECRET=<C6_CLIENT_SECRET> --env C6_CERT_PATH=<C6_CERT_PATH> --env C6_KEY_PATH=<C6_KEY_PATH> --env C6_ENV=<C6_ENV> --transport stdio c6 -- npx -y @codespar/mcp-c6Replace <…> with your own values
Platform CLI
codex mcp add c6 --env C6_CLIENT_ID=<C6_CLIENT_ID> --env C6_CLIENT_SECRET=<C6_CLIENT_SECRET> --env C6_CERT_PATH=<C6_CERT_PATH> --env C6_KEY_PATH=<C6_KEY_PATH> --env C6_ENV=<C6_ENV> -- npx -y @codespar/mcp-c6Replace <…> with your own values
Config file
{
"mcpServers": {
"c6": {
"command": "npx",
"args": [
"-y",
"@codespar/mcp-c6"
],
"env": {
"C6_CLIENT_ID": "<C6_CLIENT_ID>",
"C6_CLIENT_SECRET": "<C6_CLIENT_SECRET>",
"C6_CERT_PATH": "<C6_CERT_PATH>",
"C6_KEY_PATH": "<C6_KEY_PATH>",
"C6_ENV": "<C6_ENV>"
}
}
}
}Replace <…> with your own values
Config file
{
"servers": {
"c6": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@codespar/mcp-c6"
],
"env": {
"C6_CLIENT_ID": "<C6_CLIENT_ID>",
"C6_CLIENT_SECRET": "<C6_CLIENT_SECRET>",
"C6_CERT_PATH": "<C6_CERT_PATH>",
"C6_KEY_PATH": "<C6_KEY_PATH>",
"C6_ENV": "<C6_ENV>"
}
}
}
}Replace <…> with your own values
Platform CLI
gemini mcp add -e C6_CLIENT_ID=<C6_CLIENT_ID> -e C6_CLIENT_SECRET=<C6_CLIENT_SECRET> -e C6_CERT_PATH=<C6_CERT_PATH> -e C6_KEY_PATH=<C6_KEY_PATH> -e C6_ENV=<C6_ENV> c6 npx -y @codespar/mcp-c6Replace <…> with your own values
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about mcp-c6
How do I install mcp-c6 in Claude Code?
Run `claude mcp add mcp-c6 -e C6_CLIENT_ID=<C6_CLIENT_ID> -e C6_CLIENT_SECRET=<C6_CLIENT_SECRET> -e C6_CERT_PATH=<C6_CERT_PATH> -e C6_KEY_PATH=<C6_KEY_PATH> -- npx -y @codespar/mcp-c6. A second form passes C6_ENV and --transport stdio explicitly: claude mcp add --env C6_CLIENT_ID=<C6_CLIENT_ID> --env C6_CLIENT_SECRET=<C6_CLIENT_SECRET> --env C6_CERT_PATH=<C6_CERT_PATH> --env C6_KEY_PATH=<C6_KEY_PATH> --env C6_ENV=<C6_ENV> --transport stdio c6 -- npx -y @codespar/mcp-c6`.
What does mcp-c6 do?
It gives the agent tools for C6 Bank: Pix charges of both kinds, DICT keys, boleto, balance and statement. Every request carries OAuth2 plus mTLS.
Why is the package marked deprecated?
No tool in it reaches a service. The production and sandbox hostnames fail DNS, while C6's portal lists different addresses behind mTLS that this server was never written against.
