actual-mcp-server
Docker app from actual-mcp-server's Repository
Overview
Readme
View on GitHub
Actual MCP Server
A Model Context Protocol server that lets an AI assistant (Claude, LibreChat, LobeChat, Cursor and others) read and manage your self-hosted Actual Budget.
What you can ask it: "How much did I spend on groceries last month, by payee?", "Add a $47.50 grocery transaction at Whole Foods to my checking account.", "Move $200 from Dining Out to Emergency Fund for this month."
84 tools across accounts, transactions, budgets, rules, schedules and more, over stdio or HTTP, with Bearer token or OIDC auth, per-user budget access, up to 15 concurrent sessions, and automatic retry of transient Actual errors (3 attempts, exponential backoff; deletes and merges are never retried).
Pick your path
- Claude Desktop, Claude Code, Cursor, VS Code or another local client: run it over stdio with
npx, no server to keep running. Follow your client's page in docs/guides/clients/, for example Claude Desktop or Claude Code. - A chat UI such as LibreChat or LobeChat, or several users: run it over HTTP in Docker with the quick start below, then follow LibreChat or LobeChat.
- Unraid: install it from Community Applications; see Unraid.
Quick start (Docker, HTTP)
You need an Actual Budget server and Docker. 1. Create .env with a generated token. In an empty directory:
[ -f .env ] || install -m 600 /dev/null .env
[ -z "$(tail -c 1 .env)" ] || printf '\n' >> .env
for key in ACTUAL_SERVER_URL=http://YOUR-ACTUAL-HOST:5006 ACTUAL_PASSWORD= ACTUAL_BUDGET_SYNC_ID=; do
grep -q "^${key%%=*}=" .env || printf '%s\n' "$key" >> .env
done
chmod 600 .env
if [ "$(grep -c '^MCP_SSE_AUTHORIZATION=' .env)" != 1 ] || ! grep -Eq '^MCP_SSE_AUTHORIZATION=[^[:space:]]{32,}$' .env; then
( umask 077; install -m 600 /dev/null .env.new; { grep -v '^MCP_SSE_AUTHORIZATION=' .env; printf 'MCP_SSE_AUTHORIZATION=%s\n' "$(openssl rand -hex 32)"; } > .env.new ) && mv .env.new .env
fi
grep '^MCP_SSE_AUTHORIZATION=' .env
The last line prints the Bearer token your client sends. It never overwrites a value you set, except a token that is missing, duplicated or shorter than 32 characters, so it is safe to run again.
2. Fill in .env: ACTUAL_PASSWORD, ACTUAL_BUDGET_SYNC_ID (Actual: Settings, Show advanced settings, Sync ID) and ACTUAL_SERVER_URL. The URL is read inside the container, where localhost is the container itself: use your Actual server's LAN address or domain, or http://host.docker.internal:5006 when Actual runs on the Docker host.
3. Start the server from the same directory:
docker run -d \
--name actual-mcp-server-backend \
-p 3600:3600 \
--add-host=host.docker.internal:host-gateway \
--env-file .env \
-v actual-mcp-data:/app/data \
-v actual-mcp-logs:/app/logs \
ghcr.io/agigante80/actual-mcp-server:latest
Check it with curl http://localhost:3600/health. The image is also on Docker Hub as agigante80/actual-mcp-server. Production flags, TLS, reverse proxies and the reason for the /app/data volume are in the deployment guide.
Docker Compose (Compose 2.24.0 or later), from a clone of this repository:
[ -f .env ] || install -m 600 .env.example .env
chmod 600 .env
if [ "$(grep -c '^MCP_SSE_AUTHORIZATION=' .env)" != 1 ] || ! grep -Eq '^MCP_SSE_AUTHORIZATION=[^[:space:]]{32,}$' .env; then
( umask 077; install -m 600 /dev/null .env.new; { grep -v '^MCP_SSE_AUTHORIZATION=' .env; printf 'MCP_SSE_AUTHORIZATION=%s\n' "$(openssl rand -hex 32)"; } > .env.new ) && mv .env.new .env
fi
grep '^MCP_SSE_AUTHORIZATION=' .env
docker compose --profile production up -d
On a fresh .env, fill in the three Actual settings, then run the last line again.
npx (Node.js 22 or later, no container), in a directory holding a filled-in .env from step 1, where http://localhost:5006 is right for Actual on the same machine:
npx actual-mcp-server --http
Privacy
Budget data the tools return goes to whichever model provider your AI client uses. The server itself contacts only the configured Actual server and, when OIDC auth is configured, your identity provider (discovery and JWKS). Logs stay on the host you run it on. Details: security and privacy.
Compatibility
Node.js 22 or later, Actual Budget server 25.0.0 or later, and the bundled @actual-app/api (its version is in package.json and reported by the actual_server_info tool). Requirements and upgrade steps: upgrading.
Tools
Every tool, with its description and caveats, is in the tools reference.
Reducing the tool surface
All 84 tools are published by default. Chat clients with a small tool budget (Gemini, LibreChat) do better with fewer. A tool that is not published is also refused if a client calls it by name.
| Toolset | Tools | Contents |
|---|---|---|
context |
14 | Orientation, lookups and server information |
transactions |
14 | Transaction reads, create, update, delete, import and transfers |
analysis |
7 | Summaries, aggregates and balances |
budget |
10 | Budget months, amounts, carryover, holds, transfers, batch updates and notes |
rules |
7 | Rules and payee rules, including actual_rules_create_batch |
schedules |
4 | Scheduled transactions |
structure |
21 | Accounts, account groups, categories, category groups, payees and tags |
query |
1 | actual_query_run (SELECT only) |
admin |
6 | Budget switching, import, export, bank sync and session management |
The chat preset publishes 12 tools: actual_get_context, actual_query_run, actual_transactions_update_batch, actual_budget_updates_batch, actual_rules_create_batch, actual_transactions_create, actual_transactions_update, actual_transactions_delete, actual_rules_create, actual_budgets_transfer, actual_budgets_setAmount and actual_budgets_getMonth.
MCP_READ_ONLY=true hides and refuses 48 write-capable tools and leaves 36 published.
Example: a chat assistant with two extra tools.
MCP_TOOLSETS=chat
MCP_TOOLS=actual_accounts_list,actual_payees_get
A configuration that resolves to zero tools refuses to start. See Security and Privacy.
Configuration
| Variable | Required | Description |
|---|---|---|
ACTUAL_SERVER_URL |
Yes | URL of your Actual Budget server, as seen from where the MCP server runs. Inside a container localhost is the container itself: use the host's address, the container name on a shared Docker network, or http://host.docker.internal:5006 |
ACTUAL_PASSWORD |
Yes | Login password for your Actual Budget server (not the budget encryption password) |
ACTUAL_BUDGET_SYNC_ID |
Yes | Budget Sync ID from Actual (Settings then Sync ID) |
ACTUAL_BUDGET_PASSWORD |
No | Encryption password for an end-to-end encrypted budget |
MCP_BRIDGE_PORT |
No | Port the MCP server listens on |
MCP_SSE_AUTHORIZATION |
No | Static Bearer token clients must send (the raw token, not Bearer ...); highly recommended in production |
AUTH_PROVIDER |
No | none (static Bearer) or oidc (JWKS-validated JWT) |
MCP_TOOLSETS |
No | Toolset groups and presets to publish; see Reducing the tool surface |
Every variable, with its type and default: configuration reference. Several budgets: multiple budgets. Auth modes, per-client tokens and OIDC: authentication.
Documentation
- Documentation index: every page.
- Connect a client, deployment, authentication, upgrading, troubleshooting.
- Architecture, testing and reliability.
Contributing
Contributions are welcome. See CONTRIBUTING.md for setup, the checks every change must pass and the PR process. Questions and bug reports: SUPPORT.md.
Security
Report a vulnerability privately as described in SECURITY.md, not in a public issue.
Sponsor
I build and maintain this in my own time. It is free, it stays free, and it gets maintained either way. If it saved you some time, you can say thanks at github.com/sponsors/agigante80. Entirely optional.
License
MIT, see LICENSE. Built on Actual Budget and the Model Context Protocol, with thanks to s-stefanov/actual-mcp for the original adapter pattern. An independent project, not affiliated with Actual Budget, provided as-is without warranty: if you connect it to real financial data, you do so at your own risk.
Version: 0.24.15 | Tool Count: 84 (verified LibreChat-compatible)
Categories
Download Statistics
Total Downloads Over Time
Related apps
Explore more like this
Explore allDetails
ghcr.io/agigante80/actual-mcp-server:latestRuntime arguments
- Web UI
http://[IP]:[PORT:3600]/health- Network
bridge- Shell
sh- Privileged
- false
Template configuration
MCP HTTP endpoint and the unauthenticated health/metrics endpoints (/http, /health, /metrics).
- Target
- 3600
- Default
- 3600
- Value
- 3600
Persistent data: the local copy of your Actual Budget data (SQLite) the server downloads to run queries against.
- Target
- /app/data
- Default
- /mnt/user/appdata/actual-mcp-server/data
- Value
- /mnt/user/appdata/actual-mcp-server/data
Rotated application log files.
- Target
- /app/logs
- Default
- /mnt/user/appdata/actual-mcp-server/logs
- Value
- /mnt/user/appdata/actual-mcp-server/logs
User ID the service runs as. On Unraid use 99 (nobody) so it can write the appdata directories.
- Default
- 99
- Value
- 99
Group ID the service runs as. On Unraid use 100 (users).
- Default
- 100
- Value
- 100
Container timezone used for log timestamps, e.g. America/New_York.
- Target
- TZ
- Default
- Europe/Madrid
- Value
- Europe/Madrid
REQUIRED. The raw Bearer token clients must send. Generate with `openssl rand -hex 32`. A BLANK value disables all HTTP authentication and exposes your data unauthenticated on the LAN.
- Target
- MCP_SSE_AUTHORIZATION
Your Actual Budget server URL, e.g. https://actual.example.com or http://192.168.1.50:5006.
- Target
- ACTUAL_SERVER_URL
Your Actual Budget server password.
- Target
- ACTUAL_PASSWORD
The budget Sync ID (Actual Budget: open the budget, Settings, Show advanced settings, Sync ID).
- Target
- ACTUAL_BUDGET_SYNC_ID
Which tools to publish: comma-separated groups (context, transactions, analysis, budget, rules, schedules, structure, query, admin) and presets (chat). 'all' publishes every tool. 'chat' publishes 12 tools and suits Gemini and LibreChat. Unknown names stop the container starting.
- Target
- MCP_TOOLSETS
- Default
- all
- Value
- all
Extra tools to add on top of the toolsets, by full name (for example actual_accounts_list,actual_payees_get). Unknown names stop the container starting.
- Target
- MCP_TOOLS
true hides and refuses the 47 write-capable tools. Only true or false are accepted.
- Target
- MCP_READ_ONLY
- Default
- false
- Value
- false
Node.js runtime environment. Leave as production unless debugging.
- Target
- NODE_ENV
- Default
- production
- Value
- production