Back to Browse

Monarch MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for Monarch Money — accounts, transactions, budgets, cashflow, investments, and more

About

MCP server for Monarch Money — accounts, transactions, budgets, cashflow, investments, and more

Security Report

4.2
Use Caution4.2High Risk

The Monarch Money MCP server demonstrates solid security practices with browser-based authentication, OS keychain token storage, and read-only-by-default design. However, several code quality and permission concerns warrant attention: missing input validation on date parameters and merchant names, overly broad exception handling that could mask bugs, and extensive network access combined with direct access to sensitive financial data. The server's architecture is sound, but implementation details could be hardened. Supply chain analysis found 7 known vulnerabilities in dependencies (1 critical, 3 high severity). Package verification found 1 issue.

4 files analyzed · 17 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

keyring_access

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

subprocess_spawn

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-vargahis-monarch-money": {
      "args": [
        "monarch-mcp"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Monarch Money MCP Server

A Model Context Protocol (MCP) server for integrating with the Monarch Money personal finance platform through Claude Desktop.

Overview

  • Secure by design — browser-based login, token stored in OS keychain (never in config files or env vars)
  • Safe by default — read-only mode prevents accidental changes; write tools require explicit opt-in
  • Comprehensive — 44 tools covering accounts, transactions, splits, budgets, cashflow, tags, categories, transaction rules, recurring merchants, and credit history
  • Easy to install — Claude Desktop extension (.mcpb), uvx, or pip

Two operating modes:

The server starts in read-only mode by default. Write tools are hidden and blocked until you explicitly opt in.

Read-only (default)Write mode
View accounts, transactions, budgetsYesYes
Analyze cashflow, spending, net worthYesYes
Create transactions, tags, categories, rulesNoYes
Update accounts, budgets, splitsNoYes
Delete transactions, tags, accountsNoYes

Quick Start

Installation

Option 1: Claude Desktop Extension (.mcpb) — Recommended for Claude Desktop

Enables toggling write mode on/off directly from the Claude Desktop app.

  1. Download the latest .mcpb from Releases
  2. In Claude Desktop: Settings > Extensions > Advanced Settings > Install Extensions — select the .mcpb file
  3. Restart Claude Desktop

To enable write tools: Settings > Extensions > Monarch Money MCP Server > Configure — toggle "Enable write tools" and click Save.


Option 2: uvx (no install required) — Recommended for agents (e.g. Claude Code or Cursor)

Also works with Claude Desktop, but write mode cannot be toggled from the app — set it in the config instead.

Add to your MCP config file:

{
  "mcpServers": {
    "Monarch Money": {
      "command": "uvx",
      "args": ["monarch-mcp"]
    }
  }
}

To enable write tools:

{
  "mcpServers": {
    "Monarch Money": {
      "command": "uvx",
      "args": ["monarch-mcp", "--enable-write"]
    }
  }
}

Option 3: pip install — Recommended for local installation and venv
pip install monarch-mcp

Contributors: See docs/releasing.md for the release process, version scheme, and pre-release testing via TestPyPI.

Add to your MCP config using the full path to your Python interpreter:

{
  "mcpServers": {
    "Monarch Money": {
      "command": "/path/to/bin/python3",
      "args": ["-m", "monarch_mcp"]
    }
  }
}

To enable write tools, add "--enable-write" to args.


Option 4: Clone and install — Recommended for development
git clone https://github.com/vargahis/monarch-mcp.git
cd monarch-mcp
pip install -e .

Then add to your MCP config using the Python interpreter from your dev environment:

{
  "mcpServers": {
    "Monarch Money": {
      "command": "/path/to/bin/python3",
      "args": ["-m", "monarch_mcp"]
    }
  }
}

To enable write tools, add "--enable-write" to args.

Authentication

Authentication happens automatically in your browser the first time the MCP server starts without a saved session.

  1. Start (or restart) Claude Desktop
  2. The server detects that no token exists and opens a login page in your browser
  3. Enter your Monarch Money email and password
  4. Provide your 2FA code if you have MFA enabled
  5. Once authenticated, the token is saved to your system keyring — you're all set

Key details:

  • Credentials are entered in your browser only — never through Claude Desktop
  • Token stored in the OS keyring — persists across restarts, lasts weeks/months
  • Expired sessions re-authenticate automatically — the browser login re-triggers on the next tool call
  • MFA fully supported
  • Fallback: run python login_setup.py in a terminal for headless environments

For technical details on the auth architecture, see docs/authentication.md.

Usage Examples

Show me all my financial accounts
What were my last 50 transactions?
How's my budget looking this month?
Analyze my cashflow for the last 3 months
Create a tag called "Business Expenses" in red

Available Tools

ToolDescriptionMode
Auth
setup_authenticationGet setup instructionsread
check_auth_statusCheck authentication statusread
debug_session_loadingDebug keyring issuesread
Accounts
get_accountsGet all financial accountsread
get_account_holdingsGet investment holdingsread
get_account_historyGet historical balance dataread
get_recent_account_balancesGet daily balancesread
get_account_snapshots_by_typeNet worth by account typeread
get_aggregate_snapshotsDaily aggregate net valueread
get_institutionsGet connected institutionsread
get_account_type_optionsGet valid account typesread
refresh_accountsRequest account data refreshread
create_manual_accountCreate manual accountwrite
update_accountUpdate account settingswrite
delete_accountDelete an accountwrite
Transactions
get_transactionsGet transactions with filtering (date, account, category, tag, search, needs_review, and more)read
get_transaction_detailsGet full transaction detailread
get_transactions_summaryAggregate transaction statsread
get_transaction_splitsGet split informationread
get_recurring_transactionsGet recurring transactionsread
find_merchant_id_by_nameSearch recent transactions for a merchant and return distinct IDsread
create_transactionCreate new transactionwrite
update_transactionUpdate existing transaction (clear notes with clear_notes, unlink goal with clear_goal)write
delete_transactionDelete a transactionwrite
update_transaction_splitsCreate/modify/delete splitswrite
update_recurring_merchantMark/unmark a merchant as recurring, update its frequency/amount, or deactivate it — is_recurring is required on every call (requires --enable-write)write
Tags
get_transaction_tagsGet all tagsread
create_transaction_tagCreate new tagwrite
delete_transaction_tagDelete a tagwrite
set_transaction_tagsSet tags on a transactionwrite
Categories
get_transaction_categoriesGet all categoriesread
get_transaction_category_groupsGet category groupsread
create_transaction_categoryCreate a categorywrite
delete_transaction_categoryDelete a categorywrite
Rules
get_transaction_rulesList every transaction rule with its criteria, actions, and recent application statsread
create_transaction_ruleCreate a transaction rule with full criteria + actions (category, tags, merchant, amount, splits…)write
update_transaction_ruleUpdate a rule by id; merges overrides onto the current rule (handles Monarch's REPLACE semantics)write
delete_transaction_ruleDelete a rule by IDwrite
Budgets & Cashflow
get_budgetsGet budget informationread
get_cashflowGet cashflow analysisread
get_cashflow_summaryGet cashflow summaryread
set_budget_amountSet budget for categorywrite
Other
get_subscription_detailsGet subscription statusread
get_credit_historyGet credit score historyread

Testing

This project has two complementary test surfaces:

1. Mocked unit tests (the quality gate) — fast, offline, no Monarch connection. These run in CI and must stay green:

uv run pytest tests/

The Monarch client is mocked, so these never touch a real account. Live e2e tests (below) are deselected by default.

2. Live end-to-end (e2e) integration tests — exercise the MCP tools against a real Monarch account to verify they handle the live API robustly (adversarial/edge inputs, server-side error paths). They are opt-in and never run in CI:

MONARCH_LIVE_TESTS=1 uv run pytest tests/integration -m integration

Prerequisites: a stored keyring token (run python login_setup.py once), or MONARCH_EMAIL / MONARCH_PASSWORD in the environment. Without these, the suite skips. The tests create and delete data prefixed with MCP-Test- and self-clean (a post-suite sweep removes any residue). See tests/integration/README.md for details and safety notes.

There is also a separate agent test skill (.claude/skills/test-monarch-mcp/) that drives an AI agent to verify it calls the tools correctly — distinct from the two pytest suites above.

🙏 Acknowledgments

Forked from @robcerda's monarch-mcp-server, maintained by vargahis.

Built on the monarchmoneycommunity Python library.

Thanks to:

License

MIT License

Reviews

No reviews yet

Be the first to review this server!