MyFinance MCP

A remote MCP server for personal finance - log expenses by talking, snap receipt photos, import whole bank statements, and get budgets, trends and net worth computed for you, in any currency.

Website: myfinance-mcp.com · Free while in beta · Built by Rteam

Quick Start

Already hosted and ready to use - just connect it to your MCP client:

https://myfinance-mcp.com/mcp

On Claude.ai: Customize → Connectors → + → Add custom connector → paste the URL → Connect. Leave the OAuth Client ID and Client Secret fields empty - filling them breaks sign-in.

On ChatGPT: Settings → Apps → Create app → paste the URL → choose OAuth → Create.

On first connect you sign in with Google or register with an email and password. Your data persists across reconnections.

Why

No app, no forms, no spreadsheet. "Spent 24.50 eur on groceries at Lidl" is the whole workflow.
Every number is computed in SQL. The server owns the data and the math; the AI reads the results, it never guesses arithmetic.
Any currency. Transactions keep their original currency; the FX rate to your base currency is frozen at transaction date, so history never rewrites itself.
Statements in one message. Drop a CSV/PDF export; hundreds of rows import in one call with idempotent deduplication, hand-logged twins merged, totals reconciled.
Personal vs business. Entity tag on accounts and transactions, filterable everywhere, included in CSV export for your accountant.
Dashboards in the chat. Budgets, trends, summaries and accounts render as interactive panels (MCP Apps) right in the conversation.

Tech Stack

Bun - runtime and package manager
Express - HTTP layer
MCP SDK - Model Context Protocol over Streamable HTTP (stateless)
OAuth 2.1 - PKCE + dynamic client registration, Google sign-in optional
Prisma + PostgreSQL - all money as numeric, all stats as SQL aggregates
Docker - single container deployment

MCP Tools

Tool	Description
`log_expense`	Record one purchase, bill or receipt (negative amount = refund)
`log_income`	Record income: salary, invoice, refund, interest
`log_transfer`	Move money between accounts, cross-currency supported; never counts as spending
`log_balance`	Anchor an account's balance at a date; later flows compute from the snapshot
`import_transactions`	Bulk statement import (up to 500 rows/call): dedup by bank reference or derived key, twin merge, reconciliation check
`create_account`	Create a bank / card / cash / investment account with currency and personal/business entity
`update_account`	Rename an account or change its type, entity or main currency
`delete_account`	Delete one money account (with its transactions after explicit confirmation)
`merge_accounts`	Fold one account into another: move rows, de-duplicate both sides, rewrite transfers
`get_accounts`	All accounts with balances and net worth, converted to base currency
`get_summary`	Period totals by category, merchant or month; expense or income breakdown, category drill-down and exclusions
`get_transactions`	List and filter raw transactions
`get_trends`	Month-over-month spending trends and deltas
`set_budget`	Monthly cap per category or overall
`get_budget_progress`	Live budget progress with days left; renders as a dashboard
`update_transaction`	Fix any field of an existing transaction, including its type (e.g. turn a cash withdrawal into a transfer); category fixes are remembered per merchant for future syncs
`delete_transaction`	Delete one transaction by id
`delete_transactions`	Bulk delete by ids
`get_settings`	Base currency and timezone
`update_settings`	Change base currency or timezone
`export_transactions`	Full CSV export (includes the entity column for accountant handoff)
`connect_bank`	Link a real bank via open banking (Enable Banking, EU/UK): list banks, start consent, status, per-account sync toggle, disconnect
`sync_bank`	Pull booked transactions and balances from the connected bank; incremental, transfer pairing, dedup-safe. Healthy connections also auto-sync server-side roughly daily
`connect_zenmoney`	Link a ZenMoney account (international and .ru backends auto-detected) for read-only sync
`sync_zenmoney`	Pull ZenMoney accounts and transactions; incremental, dedup-safe, keeps your manual edits
`delete_all_data`	Permanently delete the user profile and ALL data (GDPR erasure)
`ping`	Health and auth check

MCP Apps

Four tools return an interactive dashboard (ui://myfinancemcp/dashboard) rendered directly in the chat on clients that support MCP Apps: budget rings, monthly trends, category summaries and the accounts/net-worth panel. Light and dark theme aware.

Security & Privacy

Receipt photos are parsed by YOUR AI client; images never reach this server.
Amounts, merchants and notes are never written to server logs (blind logs); telemetry stores event types and ids only.
OAuth 2.1 with PKCE, encrypted tokens, rate-limited sign-in.
All 27 tools carry MCP annotations (read-only and destructive ops flagged, connector tools marked open-world), so clients can gate confirmations correctly.
Bank access is strictly read-only: open banking consent via Enable Banking (the bank authenticates the user; we never see credentials), ZenMoney via the user's own API token. Session ids and tokens are stored AES-256-GCM encrypted.
CSV export and instant full deletion are tools, not support tickets.
Hosted instance: EU data residency, row-level security keyed to your account.
154 automated end-to-end checks (full OAuth flow, every tool, import dedup semantics, GDPR deletion) run in CI and as a hard deploy gate.

See SECURITY.md for the disclosure policy.

Self-hosting

MIT-licensed; runs anywhere Bun and Postgres run.

1. Postgres

Any PostgreSQL 15+ works. Supabase free tier is a good fit: create a project and copy the session pooler connection string (IPv4).

Apply the schema:

bun install
bunx prisma db push

2. Environment variables

Variable	Description
`PORT`	Server port (default `8788`)
`BASE_URL`	Public URL of the server (OAuth issuer)
`DATABASE_URL`	Postgres connection string
`MYFINANCE_MCP_EMAIL`	Bootstrap user email
`MYFINANCE_MCP_PASSWORD_HASH`	Bootstrap user password hash (see below)
`GOOGLE_CLIENT_ID`	(optional) Google OAuth client ID for "Continue with Google"
`GOOGLE_CLIENT_SECRET`	(optional) Google OAuth client secret
`RESEND_API_KEY`	(optional) Resend key for new-signup email notifications
`NOTIFY_EMAIL`	(optional) Where signup notifications go
`FROM_EMAIL`	(optional) Verified sender for notifications
`AUTO_SYNC_INTERVAL_MS`	(optional) Bank auto-sync tick, default hourly (syncs connections >20h stale); `0` disables

Generate the password hash:

bun -e "console.log(await Bun.password.hash(process.argv[1]))" 'your-password'

3. Run

docker compose up -d      # uses the included Dockerfile, port 8788

Put nginx (or any TLS-terminating proxy) in front and point BASE_URL at your domain. The static landing in site/ is optional - serve it from the same origin if you want one.

Development

bun install
cp .env.example .env   # fill in your values
bun run dev            # hot reload on :8788
bun run e2e            # self-contained end-to-end suite (spawns its own server)
bun run lint

The e2e suite (154 checks) covers the full OAuth flow (discovery, dynamic registration, PKCE, refresh rotation), every tool, statement-import dedup semantics, ZenMoney sync against a stubbed Diff API, and GDPR deletion.

API Endpoints

Endpoint	Description
`POST /mcp`	MCP endpoint (Bearer auth)
`GET /health`	Health check
`GET /.well-known/oauth-authorization-server`	OAuth metadata discovery
`GET /.well-known/oauth-protected-resource/mcp`	Protected resource metadata
`POST /register`	Dynamic client registration
`GET /authorize`	OAuth authorization (sign-in page)
`POST /token`	Token exchange
`GET /auth/google`	Google sign-in start (when configured)
`GET /api/stats`	Public aggregate counters (counts only, never amounts)

License

MIT - Rteam FZE LLC