MCP server for Safrapay — Banco Safra acquirer: credit, Pix, boleto + split, 3DS, chargebacks
MCP server for Safrapay — Banco Safra acquirer: credit, Pix, boleto + split, 3DS, chargebacks
This is a monorepo for 109 MCP servers wrapping LATAM commerce APIs. The codebase shows good security practices overall — API keys are properly sourced from environment variables, authentication flavors (Basic, OAuth, API Key) are correctly applied per provider, and input validation is present in tool schemas. However, moderate risks exist: (1) the catalog is extremely broad with inconsistent maturity levels (alpha packages ship with TODO(verify) endpoints), (2) code quality concerns include broad error handling with sensitive data potentially logged, (3) dependency management across 109 servers creates maintenance burden, and (4) HTTP transport support adds complexity. The examined Sift server is well-structured but representative of a pattern where each server's security depends on individual developer discipline across a large team. Supply chain analysis found 2 known vulnerabilities in dependencies (1 critical, 0 high severity). Package verification found 1 issue (1 critical, 0 high severity).
4 files analyzed · 10 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
Set these up before or after installing:
Environment variable: SAFRAPAY_CLIENT_ID
Environment variable: SAFRAPAY_CLIENT_SECRET
Environment variable: SAFRAPAY_MERCHANT_ID
Environment variable: SAFRAPAY_ENV
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-codespar-mcp-safrapay": {
"env": {
"SAFRAPAY_ENV": "your-safrapay-env-here",
"SAFRAPAY_CLIENT_ID": "your-safrapay-client-id-here",
"SAFRAPAY_MERCHANT_ID": "your-safrapay-merchant-id-here",
"SAFRAPAY_CLIENT_SECRET": "your-safrapay-client-secret-here"
},
"args": [
"-y",
"mcp-dev-latam"
],
"command": "npx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.