kontist-mcp
kontist-mcp
Ein OAuth2-Client und eine typisierte GraphQL-Schicht über das Geschäftskonto von Kontist, bereitgestellt über das Model Context Protocol, sodass Kontostände, Transaktionen und Steuerrücklagen von einem Tool-Client statt aus der Web-App gelesen und annotiert werden können.
Warum es das gibt
Kontist ist ein deutsches Geschäftskonto für Freiberufler und bietet zwei Dinge, die die meisten Banken nicht sinnvoll zur Verfügung stellen: automatische Unterkonten für Umsatzsteuer- und Einkommensteuerrücklagen sowie ein Annotationsfeld pro Transaktion für die Buchhaltung. Beides ist zur Steuererklärung wichtig und beides ist mühsam von Hand zu bearbeiten.
Der interessante Teil ist die Authentifizierungskette und nicht die Abfragen. Kontist sichert sein langlebiges Refresh-Token durch eine interaktive Zustimmung plus einen auf dem Telefon bestätigten MFA-Push ab. Das Token muss daher einmal über einen lokalen Callback-Server erfasst und anschließend als einzige zu speichernde Anmeldedaten behandelt werden. Alles danach ist Token-Austausch, Caching und Ablaufverwaltung.
Related MCP server: FinTS-Finanzen
Tools
Tool | Funktion |
| Kontoidentität und IBAN, der Auth-Smoke-Test |
| Aktueller Kontostand |
| Letzte Transaktionen, gefiltert nach Datum, Betrag oder Kategorie |
| Eine Transaktion vollständig |
| Salden der Unterkonten für Umsatzsteuer- und Einkommensteuerrücklagen |
| Die Buchhaltungsnotiz zurück an eine Transaktion schreiben |
| Zu- und Abflüsse, wichtigste Gegenparteien und Kategoriesummen über einen Zeitraum |
Jede Tool-Eingabe wird vor dem Absenden einer Abfrage mit einem zod-Schema validiert, sodass ein fehlerhafter Datumsbereich lokal und nicht als GraphQL-Fehler abgelehnt wird.
So funktioniert es
tool client
| MCP over stdio
kontist-mcp (Node + TypeScript)
| GraphQL over fetch, OAuth2 bearer, token refreshed and cached
api.kontist.com/api/graphqlDie Authentifizierung erfolgt über OAuth2 mit einer einmaligen interaktiven Zustimmung, die ein langlebiges Refresh-Token erzeugt. Nur dieses Refresh-Token kommt in .env. Access-Tokens werden bei Bedarf abgerufen, in .tokens-cache.json zwischengespeichert und bei Ablauf erneuert, sodass der interaktive Ablauf genau einmal durchläuft.
Ausführen
npm install
cp .env.example .env # client id, client secret
npm run setup # one-time OAuth consent, writes the refresh token
npm run test:auth # confirms the token works
npm run buildRegistrieren Sie es dann bei Ihrem MCP-Client und verweisen Sie auf dist/index.js. Eine vollständige Anleitung einschließlich der Registrierung der Kontist-Entwickler-App finden Sie in SETUP.md.
Stack
Node 18+, TypeScript, @modelcontextprotocol/sdk, graphql-request, das offizielle kontist-SDK für den OAuth-Ablauf, zod für die Validierung von Tool-Eingaben. Kein ORM und kein Framework.
Für den einmaligen Zustimmungsschritt muss die Kontist-Mobile-App installiert und angemeldet sein, da das Refresh-Token erst nach Bestätigung eines MFA-Pushs auf dem Telefon ausgegeben wird.
Einschränkungen
Hauptsächlich lesend ausgelegt. Der einzige Schreibvorgang ist das Annotationsfeld. Überweisungen sind bewusst nicht freigeschaltet, obwohl die API sie unterstützt und der Scope
transfersexistiert, denn ein Agent, der Geld bewegen kann, ist keine gute Idee.Noch nicht mit einem Live-Konto getestet. Der OAuth2-Ablauf, der GraphQL-Client und alle sieben Tools sind geschrieben und typgeprüft, aber das Konto selbst wird erst eröffnet, sobald die Gewerbeanmeldung durch ist. Erwarten Sie beim ersten echten Lauf Schema-Abweichungen bei den Transaktionsfeldern.
Keine Testsuite. Zwei Smoke-Skripte,
test:authundtest:balance, und sonst nichts.Einzelnes Konto. Keine Multi-Konto-Verwaltung, keine Paginierung über das hinaus, was Kontist standardmäßig zurückgibt.
Lizenz
Apache 2.0. Siehe LICENSE und NOTICE.
Available Tools
7 toolskontist_annotate_transactionA
Add a note/annotation to a transaction. Useful for tagging Stripe payouts with the originating customer or invoice.
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | Transaction ID | |
| note | Yes | Annotation text (max 200 chars recommended) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full responsibility for behavioral disclosure. It reveals that this is a mutation, but does not explain whether the annotation overwrites an existing note, whether it is reversible, what authorization is needed, or what the response looks like.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with no filler. The core action is stated first, followed by a practical usage example, making it easy for an agent to parse quickly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter tool with no output schema and no annotations, the description plus schema is mostly sufficient. However, the lack of behavioral disclosure—whether the note replaces or appends—leaves a notable gap for an agent deciding how to use the result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the input schema already documents both 'id' and 'note'. The description adds contextual flavor about Stripe payouts but no additional parameter-level semantics, so the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Add') and resource ('note/annotation to a transaction'), making the tool's purpose immediately clear. None of the sibling tools perform this action, so no sibling differentiation is needed.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description includes a concrete use case: tagging Stripe payouts with the originating customer or invoice. This gives the agent useful context for when to invoke the tool, though it does not explicitly discuss when not to use it or mention alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kontist_get_balanceA
Return the current Kontist business account balance, IBAN, and available balance (in EUR).
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the burden of disclosing behavior. 'Return' clearly signals a read-only operation, and it specifies the returned fields (balance, IBAN, available balance) and currency (EUR). It does not discuss authorization or error conditions, but for a simple balance getter this is reasonably transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no filler. It front-loads the verb and then lists the exact return values, making it efficient and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter balance lookup with no output schema, the description fully covers what an agent needs: what is returned (balance, IBAN, available balance) and the currency. No additional context seems necessary for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and the schema confirms this, so there is nothing for the description to add about parameter meaning. This matches the baseline for parameterless tools.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Return') and precise resource ('current Kontist business account balance, IBAN, and available balance'), making the tool's function immediately clear. It is naturally distinguished from siblings like kontist_list_transactions and kontist_get_tax_reserves because it focuses on balance and account identifiers.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The intended use is implied by the description: call this tool when the current account balance or IBAN is needed. However, there is no explicit guidance on when not to use it or which sibling tool to prefer in alternative scenarios (e.g., tax reserves vs. account balance).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kontist_get_tax_reservesA
Get current balances of the Kontist VAT and income tax reserve sub-accounts. Returns null fields if not enabled or if Kleinunternehmer (no VAT).
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the burden of behavioral disclosure. It clearly explains that null fields are returned when sub-accounts are not enabled or when Kleinunternehmer status applies, which is valuable edge-case behavior. It does not discuss errors or authentication, but the read-only nature is clear from 'Get'.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two succinct sentences with no filler. The core action is front-loaded, and the null-condition edge case follows naturally, making it easy to parse quickly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a no-parameter read-only tool, the description is complete: it states what is returned and when fields may be null. It could optionally mention currency or value format, but that is not essential for selecting and invoking a no-argument tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and the schema coverage is effectively 100%, so there is nothing for the description to add. The description appropriately focuses on the output behavior instead of parameter details.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Get') and resource ('Kontist VAT and income tax reserve sub-accounts'), clearly distinguishing it from the general kontist_get_balance sibling. It also states the exact scope of what is returned, so an agent can identify the tool's purpose without ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use it: when current tax reserve balances are needed. However, it does not explicitly state when not to use it or point to alternatives like kontist_get_balance for general balances, leaving some inference to the agent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kontist_get_transactionA
Fetch a single Kontist transaction by its ID.
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | Transaction ID |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the burden of disclosing behavior. 'Fetch' clearly indicates a read-only operation with no side effects, which is useful. However, it does not state behavior for missing/invalid IDs or describe the response structure, which would be valuable for a no-output-schema tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, front-loaded sentence with no filler. The verb, resource, scope, and lookup key are all immediately clear, and every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple single-parameter fetch tool, the description combined with the schema is sufficient for an agent to invoke it correctly. It is missing optional details like not-found behavior or return format, but these are minor for such a straightforward read operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already fully documents the sole parameter 'id' with the description 'Transaction ID' (100% coverage). The description adds no additional semantic detail beyond restating that the lookup is by ID, so it does not exceed the schema baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Fetch'), a clear resource ('single Kontist transaction'), and a distinguishing scope ('by its ID'). This clearly differentiates it from sibling tools like kontist_list_transactions, which retrieves multiple transactions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the correct usage context: use this tool when you already have a transaction ID and need one specific transaction. It does not explicitly name alternatives or exclusions, but the 'single... by its ID' phrasing provides clear contextual guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kontist_list_transactionsB
List recent Kontist transactions with optional filters. Default returns last 50. Amounts are in EUR (positive = inflow, negative = outflow).
| Name | Required | Description | Default |
|---|---|---|---|
| to | No | ISO date — filter transactions on/before this booking date | |
| from | No | ISO date (YYYY-MM-DD) — filter transactions on/after this booking date | |
| limit | No | Max number of transactions to return (default 50, max 200) | |
| cursor | No | Pagination cursor from previous call | |
| max_amount | No | Maximum transaction amount in EUR | |
| min_amount | No | Minimum transaction amount in EUR (negative for outflows) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral disclosure burden. It does disclose the 50-item default and the EUR inflow/outflow sign convention, but it omits ordering semantics, pagination behavior beyond the schema's cursor field, and any explicit read-only/safety statement.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no filler. It front-loads the core purpose, then supplies the most decision-relevant behavioral facts: default result count and currency sign semantics.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a list tool with six optional filters and pagination, the description is adequate but not complete. It covers defaults and units, but with no output schema it doesn't describe return shape, and ordering and pagination usage remain implicit rather than explicitly explained.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already documents all six parameters at 100% coverage, so the description only needs to add interpretive value. It does add the important sign convention ('positive = inflow, negative = outflow') and reinforces the default limit, which helps the agent correctly set min_amount and max_amount.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the action ('List') and resource ('Kontist transactions'), and adds useful scope details like optional filters and a 50-item default. It doesn't explicitly contrast itself with kontist_get_transaction, but the plural listing vs singular retrieval is reasonably evident from the name and wording.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives no explicit guidance about when to use this tool versus siblings such as kontist_get_transaction or kontist_get_balance. It implies broad, filterable listing, but the agent must infer routing from tool names rather than from stated usage criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kontist_summarizeA
High-level financial summary for a date range: inflows, outflows, net, top counterparties, category breakdown. Default = last 30 days.
| Name | Required | Description | Default |
|---|---|---|---|
| to | No | ISO date (default: today) | |
| from | No | ISO date (default: 30 days ago) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It does not explicitly state that this is a read-only operation, nor does it describe formatting, rounding, timezone behavior, or potential side effects. The word 'summary' implies non-mutation but does not confirm it.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with no filler. The first sentence front-loads the resource and output components, and the second covers the default behavior efficiently.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with two optional parameters and no nested objects, the description is mostly sufficient: it states what it returns and the default range. However, the lack of an output schema and explicit behavioral notes leaves minor gaps around return structure and safety.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the parameters are already documented with ISO date and defaults. The description adds only a reiteration of the default window ('last 30 days'), not new semantic detail, warranting the baseline score.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific resource ('financial summary') and concrete output components (inflows, outflows, net, top counterparties, category breakdown). This clearly distinguishes it from raw transaction listing or balance retrieval siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'for a date range' and 'Default = last 30 days' imply when the tool is useful, but it never explicitly states when to prefer this over kontist_list_transactions or other siblings. Usage context is present but left to inference rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
kontist_whoamiA
Verify Kontist auth is working and return basic identity. Run this first to confirm credentials before any other call.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
There are no annotations, so the description carries full weight. It discloses that the tool verifies auth and returns identity, and the instruction to run it first conveys a read-only health-check character. However, it does not state what happens on auth failure, whether any side effects occur, or the shape of the identity response.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences, front-loading the core action and then the ordering rule. Every word contributes; there is no repetition of the tool name or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a no-parameter auth check with no output schema, the description provides enough to know what it does and when to call it. It could be more specific about the identity fields returned, but this is a minor gap given the tool's simplicity and the explicit ordering guidance.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and the schema covers 100%, so there is nothing the description needs to add about inputs. No parameter documentation is required for correct invocation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses the specific verb 'Verify' and states the resource ('Kontist auth') plus what is returned ('basic identity'). This clearly separates it from the balance/transaction siblings, whose purposes are different. Even without a title, the tool's role is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly instructs the agent to 'Run this first to confirm credentials before any other call,' which is a clear when-to-use directive. The description also implies a logical gate: only proceed to sibling tools after this succeeds. No alternative tool is named, but none is needed for an auth-check tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
7 tool updates
v0.1.0- First observed
kontist_annotate_transaction - First observed
kontist_get_balance - First observed
kontist_get_tax_reserves - First observed
kontist_get_transaction - First observed
kontist_list_transactions - First observed
kontist_summarize - First observed
kontist_whoami
TDQS
Scored across 7 tools
Each tool targets a distinct concern: identity, balance, transaction listing, single transaction lookup, tax reserves, annotation, and summary. Even the two balance tools are clearly separated by account type, and list/get transaction follow a standard collection/detail split.
All tools share the kontist_ prefix and use snake_case, with a consistent verb_noun structure for most tools (get_balance, list_transactions, get_transaction, get_tax_reserves, annotate_transaction, summarize). The only outlier is kontist_whoami, which uses a command-style name rather than a verb_noun pattern.
Seven tools is an appropriate size for a banking/finance-focused MCP server. Each tool provides a meaningful capability without redundancy or padding, and the count is neither too thin nor overwhelming.
The toolset covers the core Kontist workflow: auth verification, balance, transaction browsing and detail lookup, tax reserve visibility, annotation, and period summaries. There are no obvious dead ends for the stated scope of reading and annotating account data.
Maintenance
Related MCP Connectors
An MCP server that provides read access to your cloud storage providers, bank accounts and more.
Hosted MCP server for Mini Accountant: invoices, expenses, customers, analytics, tax estimates.
MCP server for Modern Treasury — payment orders, transactions, counterparties and ledgers.
MCP server for Codat — companies, connections, invoices, bills and financial statements.
Related MCP Servers
- AlicenseNot gradedqualityFmaintenanceMCP server for accessing and managing Banktivity personal finance data, enabling account, transaction, and budget operations through natural language.3MIT
- AlicenseNot gradedqualityCmaintenanceRead-only MCP server for FinTS/HBCI banking; enables account information retrieval such as balances and transactions via PIN-TAN.1MIT
- AlicenseNot gradedqualityDmaintenanceMCP server that turns bank transactions into a financial digest including cash-flow forecast, spending breakdown, fee detection, and receipt reconciliation, exposing deterministic engines as JSON-RPC tools.Apache 2.0
- FlicenseNot gradedqualityDmaintenanceMCP server for personal finance management. Enables natural language expense logging, budgeting, recurring charge detection, and statement import with deterministic local calculations.-