Back to Browse

Switchwize MCP Server

Developer ToolsModerate7.6MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Sixteen read-only US rate, savings-gap, Fed, card and CD tools with sources and freshness.

About

Sixteen read-only US rate, savings-gap, Fed, card and CD tools with sources and freshness.

Remote endpoints: streamable-http: https://www.switchwize.com/api/mcp

Security Report

7.6
Moderate7.6Low Risk

This is a thin stdio MCP proxy that forwards read-only tool calls to SwitchWize's public rate-data API, with no credentials required, which matches its stated purpose. The main concerns are low-severity: remote tool output is passed to the model without validation, tool inputs such as balance are sent to a third-party host, and the SWITCHWIZE_API_URL override can redirect all traffic. No malicious patterns, hardcoded secrets, or shell execution were found. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

4 files analyzed · 10 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

SwitchWize MCP client

Read-only MCP tools for U.S. rates, savings comparisons, financial indexes, card offers and changes, rewards, CD rollover rules, and downgrade paths.

Connect now

For clients supporting Streamable HTTP, use the hosted endpoint:

https://www.switchwize.com/api/mcp

No SwitchWize account or API key is required. The API is rate-limited. Documentation: SwitchWize Developers.

Gemini CLI extension

Install from the public repository:

gemini extensions install https://github.com/switchwize/switchwize-mcp

Restart Gemini CLI, then use /mcp list to confirm that switchwize is connected and exposes all 16 tools. The extension uses Gemini CLI's native Streamable HTTP transport; no separate local MCP process, SwitchWize account, or API key is needed. Gemini CLI itself requires its own supported authentication and runtime setup.

Try: "Use SwitchWize to compare current U.S. high-yield savings observations. Include source URLs and as-of dates, and flag stale or unavailable data."

The extension covers U.S. deposit and card research, excluding mortgages. Review GEMINI.md for source, freshness, and privacy guidance. Installing this extension enables your Gemini CLI to use the tools; it does not enable them for other Gemini users or designate SwitchWize as a Google Search data source.

Google's extension gallery discovers public repositories with a root gemini-extension.json and the gemini-cli-extension GitHub topic. Gallery discovery and installation are separate from consumer usage.

Run the stdio client from source

Use a supported Node.js LTS release and npm:

git clone https://github.com/switchwize/switchwize-mcp.git
cd switchwize-mcp
npm ci --ignore-scripts
npm run build
npm start

For a desktop MCP client, configure command node with the absolute path to dist/index.js as its argument. No environment file or database credentials are needed. SWITCHWIZE_MCP_URL is an optional full MCP endpoint override for developers.

Run from npm

npx -y switchwize-mcp@0.3.0

For a desktop MCP client, configure command npx with arguments ["-y", "switchwize-mcp@0.3.0"]. No API key is required.

The source bridge and package manifest now use 0.3.0, matching the published npm bridge. Building this repository does not republish the existing npm version.

Available tools

  • get_top_rates
  • get_top_hysa_rates
  • get_bank_gap
  • compare_switch_savings
  • get_rate_freshness
  • get_index_dataset
  • get_bank_gap_index
  • get_reality_score
  • get_card_offers
  • get_transfer_bonuses
  • get_card_changes
  • get_reward_valuations
  • best_move_this_week
  • get_cd_rollover_rules
  • get_card_downgrade_path
  • get_fed_hike_pass_through

The hosted server currently discovers 16 tools, three prompts, and four resources. The source-built stdio bridge forwards the hosted tool schemas and annotations, prompts, resources, structured results and tool error status.

The client connects to /api/mcp using Streamable HTTP and exposes that catalog over stdio. It does not initiate financial transactions or request bank credentials. Balance inputs supplied to tools are transmitted to the hosted API; do not include account numbers or other sensitive identifiers.

Validate a source checkout

npm run verify:package checks the build and package contents without publishing. npm run verify:live compares the source bridge's tools, prompts and resources with the public hosted service and performs a hypothetical Bank Gap call. It requires network access and contributes internal acceptance traffic; it does not establish independent user adoption or verify every upstream data source.

npm run verify:gemini -- <report.json> verifies all 16 tools using Gemini CLI 0.66.0's own MCP discovery, input-schema validation, and invocation code. Set GEMINI_CLI_PACKAGE_DIR to an installed @google/gemini-cli@0.66.0 package directory. Optionally set SWITCHWIZE_GEMINI_MANIFEST to the manifest from an installed extension to validate that exact configuration. Keep validation in a separate GEMINI_CLI_HOME so it does not alter your normal Gemini settings.

This check makes live read-only calls with hypothetical inputs, labels its requests as internal probes, records freshness states without treating stale or unavailable data as current, and checks the other three deposit categories. It does not make an LLM request or establish consumer adoption. See the dated Gemini release validation.

Data boundaries

Observations may be aggregator-sourced and may be aging. Preserve each response's source dates and freshness labels. Monthly index data is not a current offer. Confirm product terms directly with the provider before making a decision.

Savings-gap figures are hypothetical estimates. The comparison benchmark is the average of the top three tracked savings rates, not an average across every tracked bank. Card Reality Scores model a consumer segment's assumptions and may carry stale terms; they are not personalized advice or guaranteed benefits.

Attribute data as SwitchWize (switchwize.com). The MIT license covers this client software, not upstream datasets, third-party materials, or trademarks. See data and service terms.

Package verification

npm run verify:package builds the client and checks the npm tarball against an exact allowlist: LICENSE, README.md, dist/index.js, and package.json. npm pack creates a local tarball; neither command publishes it.

License: MIT. Copyright SW Digital Holdings LLC.

Reviews

No reviews yet

Be the first to review this server!