Install
$ agentstack add mcp-bipa-app-bipa-cli Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged1 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Pipes remote content directly into a shell (remote code execution).
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Payment rails for AI agents — Pix, BRL, and beyond.
Website · Docs · Releases · Security model
What is Bipa CLI?
Bipa CLI gives AI agents a programmable payment account. Agents can check balances, read transaction history, and send Pix transfers — all through a secure MCP (Model Context Protocol) server that plugs into Claude, ChatGPT, Cursor, Windsurf, VS Code, and any MCP-compatible host.
Key capabilities
| Capability | Description | |---|---| | Pix transfers | Send and receive instant BRL payments via Pix keys | | Balance & history | Real-time account balance and transaction feed | | BR Code decode | Parse Pix QR codes and Copia & Cola payloads | | MCP server | First-class integration with AI agent hosts | | OAuth login | Secure browser-based authentication flow | | Keyring storage | Credentials stored in OS-native keychain |
What can your agent do?
A few real-world workflows people build with Bipa CLI:
- Split bills with friends and family. "Send R$ 35 to Maria for yesterday's lunch" — your agent drafts the Pix, you confirm with Face ID.
- Pay your monthly bills. Rent, utilities, streaming subscriptions — ask any MCP-aware agent and approve in the Bipa app.
- Build your own personal finance dashboard. Use Replit Agent or Lovable to ship a UI with real Pix balances, transactions, and spending categories.
- Audit and analyze your spending. "How much did I spend on rideshare last month?" / "Show all my Pix to my landlord this year."
Every payment still requires biometric approval in the Bipa mobile app — agents request, you authorize.
Supported AI agents
Jump straight to the setup guide for your stack:
| Agent | Transport | Setup guide | |---|---|---| | Claude (Desktop & Claude.ai) | Local + Remote | docs/claude | | Claude Code | Local + Remote | docs/claude-code | | ChatGPT | Remote | docs/chatgpt | | Cursor | Local + Remote | docs/cursor | | Gemini CLI | Local | docs/gemini | | Codex | Local | docs/codex | | OpenClaw | Local | docs/openclaw | | n8n | Remote | docs/n8n | | Antigravity | Local + Remote | docs/antigravity | | Grok | Remote | docs/grok | | Replit | Remote | docs/replit | | Lovable | Remote | docs/lovable |
Don't see your host? Any MCP-compatible client works with the remote server at https://mcp.bipa.app/mcp.
Agent Skill
Install the Bipa CLI skill to give your AI agent full knowledge of how to use Bipa CLI — including account setup, Pix payments, and all available tools:
npx skills add bipa-app/bipa-cli
The skill teaches your agent how to:
- Help users open a Bipa account and complete onboarding
- Install and authenticate the Bipa CLI
- Make Pix payments, check balances, decode QR codes
- Analyze transaction history and detect patterns
You can also view the skill reference directly from the CLI:
bipa skill
Before you start
You need a Bipa account and the Bipa mobile app to use the CLI — the app is where you approve every Pix payment with biometrics.
- Create a free Bipa account at bipa.app (under 2 minutes, no fees).
- Install the mobile app:
- Complete onboarding in the app — you'll need this to authorize agent requests.
> Bipa is currently available for residents of Brazil 🇧🇷.
Install
curl -fsSL https://agents.bipa.app/install.sh | sh
The managed installer places a launcher in ~/.local/bin/bipa and keeps versioned binaries under ~/.bipa/.
Optional flags:
# Custom binary directory
curl -fsSL https://agents.bipa.app/install.sh | sh -s -- --bin-dir /usr/local/bin
# Pin a specific version
curl -fsSL https://agents.bipa.app/install.sh | sh -s -- --version v0.1.2
Quick start
# Authenticate (prints URL for agents, --open to launch browser)
bipa login --web
# Install the MCP server for Claude Desktop
bipa mcp install --client claude
# Check your balance
bipa pix balance
# Send a Pix payment
bipa pix pay --key alice@example.com --amount 25,00 --note "coffee" --agent-message "Paying Alice for coffee"
# View recent transactions
bipa pix history --limit 5
MCP tools
Once installed, Claude Desktop (or any MCP host) can use these tools:
| Tool | Description | |---|---| | bipa_whoami | Session status | | bipa_account | Account profile and metadata | | bipa_balance | Available balance in cents | | bipa_history | Transaction history (list or detail) | | bipa_deposit | Pix keys for receiving deposits | | bipa_pix_keys | Configured Pix keys | | bipa_limits | Transfer risk limits | | bipa_pix_brcode_decode | Decode Pix BR Code payloads | | bipa_pix_pay_key | Create a Pix transfer |
A remote MCP server is also available at https://mcp.bipa.app/mcp with automatic OAuth 2.1 authentication — no local install required.
Security & approvals
Bipa CLI is designed so that agents request, humans authorize:
- Every Pix payment requires biometric approval in the Bipa mobile app — the CLI never moves money on its own.
- Spending limits are configurable per day, per transaction, and per recipient.
- Credentials are stored in your OS-native keychain (Keychain on macOS, Secret Service on Linux, Credential Manager on Windows).
- The remote MCP server uses OAuth 2.1 with PKCE — short-lived tokens, no shared secrets.
Full architecture: agents.bipa.app/docs/seguranca.
Releases
This repository hosts pre-built binaries for every release. The managed installer downloads from the Releases page.
| Platform | Architecture | Asset | |---|---|---| | macOS | Apple Silicon | bipa-vX.Y.Z-darwin-arm64.tar.gz | | macOS | Intel | bipa-vX.Y.Z-darwin-x64.tar.gz | | Linux | x86_64 | bipa-vX.Y.Z-linux-x64.tar.gz | | Linux | ARM64 | bipa-vX.Y.Z-linux-arm64.tar.gz |
Links
- Website: agents.bipa.app
- Docs: agents.bipa.app/docs
- Security model: agents.bipa.app/docs/seguranca
- Open an account: bipa.app
- Mobile app — iOS: App Store
- Mobile app — Android: Google Play
- Releases: github.com/bipa-app/bipa-cli/releases
- Bug reports & feedback: GitHub Issues
License
MIT — see [LICENSE](LICENSE) for details.
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: bipa-app
- Source: bipa-app/bipa-cli
- License: MIT
- Homepage: https://agents.bipa.app
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.