Cumbuca

Cumbuca is a Payment Institution regulated by the Brazilian Central Bank (BACEN) that provides regulated access to Open Finance Brasil and Pix without requiring customers to hold their own licence. It operates as a layer-7 proxy: customers sign requests with their own keys and send them to a Cumbuca endpoint, which re-signs them with regulatory certificates before dispatching to the regulated ecosystem, keeping the request semantics identical to the official APIs.

The proxy covers payment initiation (Pix payments, recurring payments, consents), Open Finance data access (accounts, credit cards, investments), and raw SCR credit data, mapped 1:1 to official endpoints. It uses mTLS and JWS signing, runs on Erlang/OTP with multi-AZ deployment, and offers two integration paths: building directly against official APIs with Cumbuca as the proxy, or using pre-built partner infrastructure in BYOC or SaaS modes. When a customer obtains its own licence, the transition is a certificate swap.

Cumbuca is aimed at engineering teams building fintech and payment products who need regulated access without licensing directly. Integration timelines range from weeks with pre-built infrastructure to a few months when building from scratch; no pricing or plan details are stated.