open-banking-io MCP Server
open-banking.io MCP 서버
open-banking.io PSD2 API를 위한 가볍고 읽기 전용인 Model Context Protocol 서버입니다. AI 에이전트(Claude Desktop, Cursor, 모든 MCP 클라이언트)가 사용자의 은행 계좌에 대해 "내 잔액은 얼마인가요?" 또는 "지난달 거래 내역을 요약해 주세요" 같은 질문에 답할 수 있게 해줍니다.
공식 open-banking-io Python SDK를 감싸며, 제로 지식 속성을 그대로 이어받습니다. 서비스는 암호문만 반환하며, 모든 민감 필드(IBAN, 예금주 이름, 금액, 거래 상대방)는 사용자가 내보낸 개인 키로 프로세스 내에서 복호화됩니다. 평문이 제3자에게 닿는 일은 없습니다. LLM도 MCP 클라이언트가 보내는 내용만 볼 수 있습니다.
도구
도구 | 인자 | 설명 |
| — | 은행 계좌: 은행, IBAN, 예금주, 표시 이름, 통화, 잔액, |
|
| 한 계좌의 ISO 20022 잔액( |
|
| 거래 내역: 최신순, 거래 상대방 및 송금 정보 포함 |
| — | 은행 연결/동의: 상태, |
모든 도구는 읽기 전용입니다. 동기화, 결제 개시, 동의 관리 도구는 의도적으로 포함하지 않았습니다. 제한 사항을 참조하세요.
Related MCP server: saldo-mcp
구성
환경 변수 | 필수 여부 | 의미 |
| 권장 | open-banking.io 앱에서 내보낸 자격 증명 번들의 경로(또는 인라인 JSON) — |
| 대안 | 번들을 사용하지 않는 경우의 API 키 |
| 대안 |
|
| 대안 사용 시 필수 | 분리된 환경 변수를 사용할 때 필요한 API 기본 URL(번들의 |
앱에서 설정 → 자격 증명으로 이동하여 번들 파일을 내보내세요.
Claude Desktop
claude_desktop_config.json(Claude → 설정 → 개발자 → 구성 편집):
{
"mcpServers": {
"open-banking-io": {
"command": "uvx",
"args": [
"--from", "git+https://github.com/open-banking-io/mcp-server.git",
"obi-mcp"
],
"env": {
"OBI_CREDENTIALS": "/absolute/path/to/credentials.json"
}
}
}
}Cursor
.cursor/mcp.json:
{
"mcpServers": {
"open-banking-io": {
"command": "uvx",
"args": [
"--from", "git+https://github.com/open-banking-io/mcp-server.git",
"obi-mcp"
],
"env": {
"OBI_CREDENTIALS": "/absolute/path/to/credentials.json"
}
}
}
}uv(curl -LsSf https://astral.sh/uv/install.sh | sh)가 필요합니다. PyPI에 게시되면 --from git+… 인자는 생략할 수 있습니다.
로컬에서 실행 / 소스에서 실행
git clone https://github.com/open-banking-io/mcp-server.git
cd mcp-server
uv venv && uv pip install -e '.[dev]' --python .venv/bin/python
OBI_CREDENTIALS=/path/to/credentials.json .venv/bin/obi-mcp # speaks MCP over stdio
.venv/bin/python tests/smoke.py # network-free smoke test
uv run --python .venv/bin/python pytest -q # full test suite에이전트 질문 예시
"모든 계좌의 장부 잔액을 보여 주세요."
"7월에 식비로 얼마를 썼나요?"(
get_transactions+ 그룹화)"곧 만료되는 은행 연결이 있나요?"(
list_connections)
설계 노트
구조적으로 읽기 전용. SDK의
get_*메서드만 노출합니다.sync/sync_all은 SDK에 존재하지만 의도적으로 제공하지 않으므로, 에이전트가 이 서버를 통해 자금을 이동하거나 동의를 변경할 수 없습니다.정확한 금액. 금액은 부동소수점이 아닌 정확한 문자열(
"1234.56")로 반환됩니다.명확한 오류. 누락된 날짜, 잘못된 계좌 ID, 상류 HTTP 오류 등은 실행 가능한 도구 오류로 표시됩니다(예: 누락 시 유효한 계좌 ID 목록 제공).
컨텍스트 친화적.
get_transactions는 기본 50건, 최대 500건으로 제한하여 에이전트 컨텍스트 창을 보호합니다.offset으로 페이지네이션하세요.
제한 사항(솔직한 목록)
쓰기 도구 없음: 동기화, 결제 개시, 동의 생성/갱신 없음. 동의 갱신은 항상 open-banking.io 앱(PSD2 SCA)에서 이루어집니다.
은행/기관 디렉터리 도구 없음: 상류 API(SDK v1.0.0)가 공개 ASPSP 검색 엔드포인트를 노출하지 않음 — API가 추가되면 TODO.
아직 PyPI에 없음 —
uvx --from git+…(위 참조) 또는 소스에서 설치. PyPI에open-banking-io-mcp로 게시 예정.데이터 최소화는 사용자의 책임: 거래 내역에는 거래 상대방과 송금 문구가 포함됩니다. 신뢰하는 MCP 클라이언트에만 이 서버를 연결하고, 프라이버시를 위해 호스팅형보다 로컬 MCP 클라이언트(Claude Desktop, Cursor)를 선호하세요.
API 래핑
SDK 호출 | HTTP(SDK 뒤) |
|
|
|
|
|
|
인증: X-Api-Key 헤더. 응답은 제로 지식 봉투(ECDH P-256 → HKDF-SHA256 → AES-256-GCM)를 담고 있으며 SDK가 로컬에서 복호화합니다. 전체 유선 형식: clients 저장소 · THREAT_MODEL.md.
라이선스
MIT — clients SDK 저장소와 동일합니다.
Available Tools
4 toolsget_balancesA
Get the balances (booked, available, ...) of one account.
type is the ISO 20022 balance code: ITBD = booked (interim), ITAV = available.
account_id comes from list_accounts.
| Name | Required | Description | Default |
|---|---|---|---|
| account_id | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must carry the behavioral disclosure burden. It explains that the tool returns multiple balance types and defines the type codes. It does not explicitly state that the operation is read-only, but that is implicit and acceptable for a get operation. It adds useful context beyond the schema, such as the source of account_id.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is succinct and front-loaded, using two sentences and a brief code block for the type codes. Every sentence adds value with no redundant text.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given that an output schema exists (not shown in detail), we don't need description of return values. The tool is simple (one required parameter) and the description covers the essential semantics, including the meaning of type codes. It is complete for a straightforward get-balances endpoint.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must compensate. It does explain account_id (source from list_accounts) and defines the type parameter even though 'type' is not present in the provided schema. This discrepancy between description and schema introduces potential confusion about whether the type parameter is actually accepted, lowering the score.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Get the balances (booked, available, ...) of one account' which uses a specific verb and resource, and distinguishes it from sibling tools like list_accounts, get_transactions, and list_connections. The mention of ISO 20022 balance codes adds specificity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a clear prerequisite: 'account_id comes from list_accounts', guiding the agent to obtain the identifier from a specific prior step. It also explains the meaning of the optional type parameter, though it does not explicitly state when to use this tool versus alternatives, which is fairly obvious given the sibling set.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_transactionsA
Get statement transactions for one account, newest first.
Args:
account_id: Account id from list_accounts.
date_from: Optional inclusive start date, ISO YYYY-MM-DD.
date_to: Optional inclusive end date, ISO YYYY-MM-DD.
limit: Page size (default 50, max 500 — keep small to protect context).
offset: Skip offset items before the page (for pagination).
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| offset | No | ||
| date_to | No | ||
| date_from | No | ||
| account_id | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does well: it discloses newest-first ordering, inclusive date semantics, page size default and maximum, offset-based pagination, and a practical context-window warning ('keep small to protect context'). This goes well beyond the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The first line is a crisp summary, and the Args section is tightly formatted with no filler. Every sentence earns its place by conveying scope, defaults, limits, or safety guidance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given that an output schema exists, return fields need not be restated. The description covers prerequisites, date range behavior, pagination, and resource-protection guidance, leaving no meaningful gaps for a read-only transaction listing tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, but the description compensates fully by explaining every parameter: account_id's source, date_from/date_to as optional inclusive ISO dates, limit's default/max/contextual caution, and offset's pagination role. This adds meaning beyond the raw schema types and defaults.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description opens with a specific verb+resource: 'Get statement transactions for one account, newest first.' It clearly identifies that this tool retrieves transactions for a single account and distinguishes itself from siblings like list_accounts, get_balances, and list_connections.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides clear usage context: one account, optional inclusive date range, and pagination. It also points to the prerequisite 'Account id from list_accounts.' While it does not explicitly name alternative tools or exclusions, the purpose and sibling set make the intended use clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_accountsA
List the user's bank accounts with balances, IBAN, owner and bank name.
Sensitive fields are decrypted in-process from the zero-knowledge envelopes.
Use an account's id for get_balances / get_transactions.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must carry the behavioral disclosure burden. It does so by revealing that 'Sensitive fields are decrypted in-process from the zero-knowledge envelopes,' which is non-obvious and important context for the agent. It does not mention every possible behavioral trait, but it covers the most relevant security-sensitive aspect.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three concise sentences: the first states the purpose and returned fields, the second provides essential security context, and the third gives actionable downstream usage. Every sentence earns its place with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has no parameters, an output schema is present, and the description covers purpose, fields, security behavior, and how to use the result with sibling tools, it is complete enough for an agent to select and invoke it correctly. No significant gaps remain.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema is empty with zero parameters, so the description does not need to explain parameter semantics. Per the zero-parameter baseline, a score of 4 is appropriate since there is nothing ambiguous to clarify.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description starts with a specific verb and resource: 'List the user's bank accounts with balances, IBAN, owner and bank name.' It clearly defines the tool's scope and differentiates it from siblings by noting that account IDs should be used with get_balances/get_transactions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description tells the agent how to use the output: 'Use an account's ``id`` for get_balances / get_transactions.' This gives downstream usage context, though it does not explicitly contrast with list_connections or state when not to use this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_connectionsA
List the user's bank connections (consents): status, validity, last sync.
A connection with status expired / needs_reconnect means fresh data requires re-consent in the open-banking.io app — this server cannot restore consent.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries the full burden. It discloses a key behavioral nuance: expired/needs_reconnect connections require re-consent elsewhere and that this server cannot restore consent. This exceeds a bare 'list' complete with an important limitation, though it doesn't cover all potential behaviors (e.g., pagination, filtering).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, both essential. The first defines the resource and content, the second adds critical status-related caveat. No redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple no-parameter list tool with an output schema, the description provides enough context: purpose, key fields, and an important behavioral constraint. It might mention pagination or ordering, but these are likely in the output schema, so the description is complete enough.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the default baseline is 4. The description adds value by specifying the fields returned even though no parameters exist, making the tool's behavior clear without parameter explanations.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Uses a specific verb+resource ('List the user's bank connections (consents)') and enumerates the data returned (status, validity, last sync). Clearly distinguishes from sibling tools focused on accounts, balances, and transactions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage via the domain (connections vs. accounts) and explains the implication of expired status, but it does not explicitly state when to prefer this tool over alternatives or provide exclusions. Usage context is implied rather than directly stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
v0.1.0- First observed
get_balances - First observed
get_transactions - First observed
list_accounts - First observed
list_connections
TDQS
Scored across 4 tools
Each tool targets a distinct resource: accounts, balances, transactions, and connections. No overlap exists, and the descriptions reinforce clear boundaries.
All tool names follow a consistent verb_noun pattern (list_accounts, get_balances, get_transactions, list_connections), making the API intuitive and predictable.
With exactly 4 tools, the server is well-scoped for a read-only banking API, covering the core data needs without unnecessary bloat or sparsity.
The tool set covers the full read lifecycle: listing accounts, retrieving balances and transactions, and managing connection status. No obvious gaps exist for the stated purpose.
Maintenance
Related MCP Connectors
An MCP server that provides read access to your cloud storage providers, bank accounts and more.
Read-only banking and personal finance for AI agents: accounts, transactions, spending, budgets.
Ask your AI about your own accounts, debts, budgets and goals. OAuth sign-in, read-only by default.
Personal finance for AI agents — onboard, import statements, categorize & budget over MCP.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceAn MCP Server that provides a conversational interface to the UK Open Banking account information API, allowing agents to interact with bank account data through natural language commands.-
- AlicenseNot gradedqualityDmaintenanceA read-only MCP server that securely connects Swedish/Nordic bank accounts to AI assistants, keeping all financial data local and encrypted.24 npmMIT
- AlicenseBqualityBmaintenanceA read-only MCP server that exposes Turkish open banking data (accounts, balances, transactions, cash flow, and cards) to AI agents via the ÖHVPS 2.0.0 standard.5MIT
- AlicenseAqualityAmaintenanceSelf-hosted MCP server that securely connects your bank accounts via Enable Banking, offering read-only access to balances and transactions for AI assistants.12199 npm296MIT