Banco do Nordeste do Brasil MCP

The materials state that no environment variables or API keys are required, and there is no indication that users must directly provide a secret. However, because the tool connects to a Banco do Nordeste do Brasil account and accesses Open Finance data, it likely relies on banking authorization tokens or session credentials in practice. The documentation does not explain how such credentials are obtained, stored, or expired, so handling of sensitive financial authorization should be treated with caution.

The tool is known to connect to the remote endpoint api.mcp.ai. Based on the description, its core function is to bring account balances, statements, and similar banking data into AI through that service, so user financial data is likely transmitted to the declared endpoint. No additional unknown or unrelated exfiltration target is identified from the provided materials.

System checks indicate that the tool executes code or starts a local process, which is a standard MCP capability and should normally be rated as caution. The available materials do not show evidence of broader high-risk system privileges or execution behavior beyond its stated purpose.

Its stated function is focused on bank account and Open Finance information, so it is expected to access highly sensitive financial data such as balances and statements/transactions. The materials do not indicate local file read/write access or unrelated data scopes, but the sensitivity of the data and the lack of explicit scope details warrant caution.

Positive factors include its presence in an official registry, open-source availability, and updates within the last year, all of which materially reduce supply-chain risk. Caution remains appropriate because the README is absent, the license is unspecified, and community adoption is very low (0 stars), limiting the amount of audit-friendly information.