How do I use BankMCP?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@BankMCP check the balance of my main corporate account" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

BankMCP

by RMAAPK

Overview Schema Source Related Servers Discussions Admin

TypeScript

Remote

🏦 BankMCP: Secure Model Context Protocol Banking Gateway

License: BSL 1.1 Organization: RMAA Holdings Framework: FastMCP Security: DMCPS Hardened

BankMCP (engineered and maintained by RMAA Holdings) is an ultra-secure, Model Context Protocol (MCP) banking gateway built on TypeScript and FastMCP.

It enables AI Agents (Claude Desktop, ChatGPT, Gemini, ForgeAI) to query account balances, audit corporate ledgers, and prepare banking settlements without the catastrophic risk of unauthorized fund drainage or prompt injection attacks.

🛡️ DMCPS-Grade Security Rails

Bank APIs are high-consequence tools for autonomous agents. BankMCP adapts the hardened sandbox and dashboard interception architecture pioneered in DMCPS:

+---------------------------------------------------------------------------------------+
|                                BANKMCP INTERCEPTOR ARCHITECTURE                       |
+---------------------------------------------------------------------------------------+
|   AI AGENT (Claude / GPT / Gemini)                                                    |
|         │                                                                             |
|         ▼  JSON-RPC (FastMCP / Stdio / Stream)                                        |
|   [BANKMCP SECURITY INTERCEPTOR] ──► Emergency Freeze Active? ──► [INSTANT BLOCK]     |
|         │                                                                             |
|         ├──► Non-Whitelisted IBAN? ─────────────────────────────► [INSTANT BLOCK]     |
|         ├──► Exceeds Transaction Cap ($500)? ───────────────────► [INSTANT BLOCK]     |
|         ├──► Exceeds Daily Cumulative Cap ($2,000)? ────────────► [INSTANT BLOCK]     |
|         │                                                                             |
|         ├──► Amount >= $100 (Human Gate)? ──────────────────────► [REQUIRES TOKEN]    |
|         │                                                             │               |
|         │                                                             ▼               |
|         │                                               [DMCPS SECURED DASHBOARD]     |
|         │                                               Human Owner Approves Token    |
|         │                                                             │               |
|         ▼                                                             │               |
|   [CORE BANKING / LEDGER EXECUTION] ◄─────────────────────────────────┘               |
+---------------------------------------------------------------------------------------+

1. Zero Direct Fund Drainage (Mathematical Whitelisting)

The agent cannot transfer funds to arbitrary accounts or IBANs found in prompts.
All recipients must pre-exist in the authorized Whitelist database, configured exclusively by a human administrator through the Web Dashboard.

2. Deterministic Velocity & Spending Caps

Single Transaction Cap: Default $500.00 maximum. Any single request above this is rejected at the schema level.
24-Hour Rolling Quota: Cumulative daily transfers cannot exceed $2,000.00.

3. Human-In-The-Loop (HITL) Challenge Tokens

Any transfer equal to or greater than $100.00 generates a cryptographically signed challenge token (e.g. AUTH_9B2A...) with a 15-minute expiration.
The transfer is held in a pending state until a human logs into the Dashboard to approve it, or provides the challenge token to the submit_approval_token tool.

4. Emergency Killswitch (DEFCON-1 Freeze)

One-click freeze toggle on the dashboard immediately terminates all outbound transfer capabilities across all connected bank accounts.

Related MCP server: WETH

🛠️ MCP Tools Exposed to AI

Tool Name	Risk Level	Description
`list_accounts`	🟢 Safe (Read)	Lists authorized bank accounts with balances and masked IBANs.
`get_account_balance`	🟢 Safe (Read)	Real-time balance check for a specific corporate account ID.
`list_whitelisted_beneficiaries`	🟢 Safe (Read)	Lists pre-approved recipient IBANs and their daily limits.
`transfer_funds`	🔴 High (Gated)	Drafts/executes transfer through whitelist, caps, and HITL gate.
`submit_approval_token`	🟡 Auth (Commit)	Submits human challenge token to finalize high-value transfer.
`get_security_status`	🟢 Safe (Read)	Audits active daily spent quotas, limits, and lockdown status.

🚀 Quickstart & Dashboard

1. Install Dependencies & Build

npm install
npm run build

2. Configure Environment

cp .env.example .env

Edit .env to set your administrator credentials:

PORT=8080
ADMIN_USERNAME=admin
ADMIN_PASSWORD=your_secure_password_here
MAX_TRANSACTION_LIMIT=500
MAX_DAILY_LIMIT=2000
REQUIRE_HUMAN_APPROVAL_ABOVE=100

3. Run the Security Gateway

npm start

The server will boot two coordinated services:

Admin Control Dashboard: http://localhost:8080/dashboard
FastMCP Transport Gateway: Stdio or Stream mode ready for MCP clients.

4. Run the Security Test Suite

npm test

✔ BankSecurityGuard: Blocks non-whitelisted IBANs (16.9ms)
✔ BankSecurityGuard: Enforces Single Transfer Cap (7.0ms)
✔ BankSecurityGuard: Demands Human-In-The-Loop Approval Above Threshold (13.1ms)
✔ BankSecurityGuard: Emergency Freeze Kills All Transfers Instantly (7.4ms)
ℹ tests 4 | pass 4 | fail 0

📜 License

Released under the MIT License by RMAA Holdings & Contributors.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityMaintained

ResponsivenessNo issues

Resources

Related MCP Connectors

BankSyncOAuth
io.banksync
Connect AI agents to bank accounts, transactions, balances, and investments.
Finance Customer Data Platforms App Automation
22
https://mcp.banksync.io
Cotribute MCPOAuth
com.cotribute
Connect AI agents to financial institution origination, analytics, and compliance workflows.
Finance CRM
2
https://mcp.cotribute.co
SpendNodOAuth
io.github.gstack-ds
AI agent spending controls. Set limits, blocklists, and caps. Approve transactions from your phone.
Finance Autonomous Agents
2
https://api.spendnod.com/mcp
sipi.bot — Spend Firewall for AI Agents
io.github.kindrat86
Pre-spend firewall for AI agents. Approves, blocks, flags transactions against policy rules.
Finance Security Autonomous Agents
2
https://sipi.bot/api/mcp

Related MCP Servers

ows-mcp-wallet
Blockchain Cryptocurrency
Danmwihoti
A
license
A
quality
D
maintenance
Enables AI agents to check balances and send transactions across multiple blockchains with automatic spending limit protection and policy enforcement.
Updated 7 months ago (2026-04-02 05:49 UTC)
3
MIT
WETH
Blockchain Cryptocurrency
ayushkumar2601
A
license
Not graded
quality
C
maintenance
Enables AI agents to analyze Ethereum wallets, simulate transactions, and draft transfers with deterministic policy and risk scoring, requiring human approval before on-chain execution.
Updated 4 months ago (2026-07-08 09:35 UTC)
6 npm
ISC
varco_mcp
Security Autonomous Agents
williamselmo1993
A
license
Not graded
quality
B
maintenance
Enables MCP-compatible AI agents to safely act on business backends by enforcing per-agent permissions, autonomy thresholds, human approval with review-and-edit, and full audit trails.
Updated 2 months ago (2026-09-02 16:17 UTC)
MIT
Parimit
Payments & Billing Autonomous Agents Security
cad07
A
license
Not graded
quality
C
maintenance
Enables AI agents to propose structured payment intents, apply deterministic policy, require human approval, and record tamper-evident audit trails without connecting to live payment rails.
Updated a month ago (2026-10-02 05:54 UTC)
MIT