Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/bipa-app/bipa-cli/bipanpx skills add bipa-app/bipa-cli --skill bipagit clone --depth 1 https://github.com/bipa-app/bipa-cliWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00139 | $0.04271 |
| Opus 5 | $0.00069 | $0.02135 |
| Sonnet 5 | $0.00028 | $0.00854 |
| Haiku 4.5 | $0.00014 | $0.00427 |
Grade C, and why
bipa scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -fsSL https://agents.bipa.app/install.sh | sh Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -fsSL https://agents.bipa.app/install.sh | sh How it starts
The opening of the file, as written. The whole thing — 393 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Bipa CLI
Bipa CLI gives AI agents the ability to make real Pix payments in Brazil. It works as a CLI tool and as an MCP server that exposes financial tools to any MCP-compatible agent.
Pix is Brazil's instant payment system — transfers settle in seconds, 24/7, free for individuals. Bipa CLI is built on Bipa's BCB-authorized financial infrastructure.
First: Does the User Have a Bipa Account?
Before anything else, find out whether the user already has a Bipa account. Bipa CLI requires one. Ask directly:
"Do you have a Bipa account? Bipa CLI uses Bipa as the underlying bank, so you'll need one to send/receive Pix."
If they DON'T have an account → help them open one
Opening a Bipa account is free, takes ~5 minutes, and gives them access to:
- Free Pix account — send/receive instant BRL transfers 24/7
- Buy & sell Bitcoin — directly from the app
- BTC/USDT/BRL collateralized credit card — works with Apple Pay / Google Pay
- Crypto rails — Polygon, Ethereum, Bitcoin, Lightning Network
There are two paths to create a Bipa account:
Step 1: Register via web (agent can guide this)
Direct the user to https://bipa.app/cadastro — Bipa's web KYC flow. Walk them through it:
- CPF — Enter their CPF (Brazilian tax ID, 11 digits). This starts the registration.
- Terms — Accept Bipa's terms of service and privacy policy.
- Email — Enter email, then verify with a 6-digit PIN sent to that email.
- Phone — Enter phone number (Brazilian +55), then verify with a 6-digit PIN via SMS.
- Occupation — Select occupation from a list.
- Income — Declare monthly income range.
- PEP — Declare if they are a politically exposed person (most people: "No").
- Address — Enter CEP (postal code), the system auto-fills street/district. Add number + complement.
- Document verification — Scan a QR code on their phone to take a selfie + photo of their ID document (RG or CNH). Bipa uses automated KYC verification.
- Processing — Account is reviewed (usually approved within minutes).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 393 lines · 139 tokens per session scan C bcfae011633a
bipa is a skill published in the GitHub repository bipa-app/bipa-cli (5 stars, last pushed 1mo ago), licensed MIT. It adds 139 tokens to every session and 4,271 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
irpf-brasil
Use para declaração de IRPF guiada passo a passo, análise de pré-preenchida, cálculo de imposto, deduções, bens e direitos, rendimentos, restituição, malha fina, carnê-leão. Conduz o usuário como se estivesse declarando de verdade.
tributario-brasil
Use para tributação empresarial: Simples Nacional, MEI (abertura de CNPJ, CNAE), Reforma Tributária 2026 (CBS/IBS), PIS/COFINS, ICMS, ISS, emissão de nota fiscal, comparação de regimes. Ativa em "MEI", "CNPJ", "Simples Nacional", "nota fiscal", "CNAE", "reforma tributária", "CBS", "IBS", "regime tributário".
banco-mcp
Skill abrangente pra trabalhar com dados financeiros via Banco MCP — analisar gastos, gerar extratos, fluxo de caixa, fatura de cartão, carteira de investimentos. Use sempre que o usuário perguntar sobre dinheiro, gastos, banco, cartão, investimentos, fatura, saldo, extrato, transações, ou variantes. Orquestra as 13…
dcf-model
Build discounted cash flow valuation workbooks in Excel.
comps-analysis
Build comparable-company valuation workbooks in Excel.
lbo-model
Build leveraged buyout workbooks with IRR/MOIC in Excel.