T-Invest MCP Server

MCP server for working with the T-Invest (Tinkoff Investments) API from Claude and other LLM clients.

A port of t-invest-mcp-server to Node.js.

Tools (30)

Account Management

Analytics and Tools

Operation History

Trading Operations

* — required parameter, ? — optional

Workflow: the agent first calls get_accounts, remembers the accountId, and uses it in subsequent requests.

Related MCP server: IBKR TWS MCP Server

Environment Variables

Production URL: https://invest-public-api.tinkoff.ru/rest/ Sandbox URL: https://sandbox-invest-public-api.tinkoff.ru/rest/

Security

This server interacts with real money via the API. Several rules significantly reduce risk:

1. Use APP_T_INVEST_READONLY=true by default. In this mode, only read-only tools are registered, and the 6 operations that can move your money (post_order, cancel_order, post_stop_order, cancel_stop_order, pay_in, currency_transfer) are completely unavailable to the LLM. This is sufficient for analytics, reports, and portfolio monitoring.

2. Disable READONLY only consciously. Any trading operation triggered by the LLM is irreversible. Trade confirmation is delegated to the MCP client (Claude Desktop will ask you before calling the tool) — but this is the last line of defense, not the first. If you do not intend to trade via the assistant today, do not give it that capability.

3. Create a separate token with minimal permissions at developer.tbank.ru. If trading is not needed, use a read-only token. Do not use your main token with full permissions "just in case".

4. Store the token only in environment variables or a secret manager. Do not copy it directly into claude_desktop_config.json if the file is backed up to the cloud / git / shared machine. On macOS, the token from the config is visible to all processes of your user.

5. Use only HTTPS URLs for APP_T_INVEST_BASE_URL. The server will refuse to start with http:// — this is intentional.

6. Never commit .env or paste the token into an issue/PR/chat. Check that .gitignore covers .env and *.log.

The server itself does not log the token and does not include it in MCP responses, but any leakage via the environment, config, or shell history remains on the user's side.

Configuration in Claude Desktop

Configuration file: ~/Library/Application Support/Claude/claude_desktop_config.json

Via npx

{
  "mcpServers": {
    "t-invest": {
      "command": "npx",
      "args": ["t-invest-mcp-server"],
      "env": {
        "APP_T_INVEST_BASE_URL": "https://invest-public-api.tinkoff.ru/rest/",
        "APP_T_INVEST_TOKEN": "your_token",
        "APP_T_INVEST_READONLY": "true"
      }
    }
  }
}

Remove APP_T_INVEST_READONLY (or set to false) only if you consciously want to give the LLM the ability to place orders and transfer money.

Via Docker

{
  "mcpServers": {
    "t-invest": {
      "command": "docker",
      "args": [
        "run", "-i", "--rm",
        "-e", "APP_T_INVEST_BASE_URL=https://invest-public-api.tinkoff.ru/rest/",
        "-e", "APP_T_INVEST_TOKEN=your_token",
        "-e", "APP_T_INVEST_READONLY=true",
        "t-invest-mcp-server"
      ]
    }
  }
}

Running

npx

APP_T_INVEST_BASE_URL=https://invest-public-api.tinkoff.ru/rest/ \
APP_T_INVEST_TOKEN=your_token \
npx t-invest-mcp-server

Docker

docker build -t t-invest-mcp-server .

docker run -i --rm \
  -e APP_T_INVEST_BASE_URL=https://invest-public-api.tinkoff.ru/rest/ \
  -e APP_T_INVEST_TOKEN=your_token \
  t-invest-mcp-server

From source

npm install
npm run build
npm start

Disclaimer

This project is an unofficial tool not affiliated with T-Bank (Tinkoff). The server interacts with financial data and trading operations via the public T-Invest API. Users are fully responsible for their actions. Stock market trading involves the risk of losing funds.

License

MIT