MCP for YNAB

A fast, safe MCP server for YNAB — full budget access for Claude and other AI assistants, read-only by default.

28 tools covering budgets, transactions, categories, payees, accounts, scheduled transactions, and server-computed analytics (spending summaries, budget health, recurring charges, income vs. expense, net worth). Writes are off unless you explicitly turn them on, risky writes require confirmation, and every write can be undone.

Quickstart

Claude Code

claude mcp add ynab -e YNAB_ACCESS_TOKEN=xxx -- npx -y @walensis/mcp-for-ynab

Replace xxx with your personal access token (see Getting a token below).

Claude Desktop

Add this to your Claude Desktop config (claude_desktop_config.json):

{
  "mcpServers": {
    "ynab": {
      "command": "npx",
      "args": ["-y", "@walensis/mcp-for-ynab"],
      "env": {
        "YNAB_ACCESS_TOKEN": "xxx"
      }
    }
  }
}

Alternatively, install the .mcpb bundle from a release for a one-click, no-JSON install — Claude Desktop will prompt you for your token and whether to enable writes.

Other MCP clients

Any client that speaks MCP over stdio can run the server the same way:

npx -y @walensis/mcp-for-ynab

with YNAB_ACCESS_TOKEN set in its environment.

Related MCP server: ynab-mcp

Getting a token

1. Go to app.ynab.com and sign in.

2. Open Account Settings → Developer Settings.

3. Under Personal Access Tokens, click New Token, confirm your password, and copy the token.

4. Use that value as YNAB_ACCESS_TOKEN. Treat it like a password — anyone with it has full access to your budget for as long as it's valid.

If you'd rather not put the token directly in your MCP client config, set YNAB_ACCESS_TOKEN_FILE to the path of a file containing just the token instead.

Read-only by default, writes are opt-in

By default this server only exposes read tools — nothing it does can change your budget. To enable the write tools (creating/editing/deleting transactions, assigning money, etc.), set:

YNAB_ALLOW_WRITES=1

in the server's environment and restart it. With writes enabled:

• Confirmation gates: destructive or bulk operations (deleting a transaction, deleting a scheduled transaction, bulk-updating more than 5 transactions) require an explicit confirm: true — and bulk updates also require expected_count to match the number of rows — so the assistant has to show you what it's about to do before it does it.

• Undo: every write made through this server is journaled locally, and the undo_last tool reverses the most recent one (up to 50 writes of history, stored in ~/.mcp-for-ynab/undo.json). See PRIVACY.md for details on that file.

Rate limits

The underlying API allows 200 requests/hour per token, shared across every app using that same token (this server, the mobile and web apps for YNAB, other integrations, etc.). This server tracks its own usage client-side and stops itself at 190 requests/hour to leave headroom for the rest of your apps, and prefers small, server-computed responses (aggregates, summaries) over dumping raw rows where it can.

Tools

Development

This is a pnpm monorepo: packages/core (@walensis/mcp-for-ynab-core, the API client for YNAB and domain logic) and apps/mcp (@walensis/mcp-for-ynab, the MCP server that wraps it).

pnpm install
pnpm build
pnpm test
pnpm typecheck

To smoke-test against a real budget (read-only — it never writes):

YNAB_ACCESS_TOKEN=xxx pnpm smoke

Disclaimer

We are not affiliated, associated, or in any way officially connected with YNAB, or any of its subsidiaries or its affiliates.

License

MIT © walensis-labs