actual-mcp-server

actual-mcp-server

Docker app from actual-mcp-server's Repository

Overview

Model Context Protocol (MCP) server that connects AI assistants (LibreChat, LobeChat, Claude Desktop, Cursor) to your self-hosted Actual Budget instance, exposing 71 tools for conversational financial management over HTTP. Fill in the "Actual server URL", "Actual server password", and "Actual server Sync ID" below, and SET A STRONG "MCP auth token": a blank token disables all HTTP authentication and exposes your financial data unauthenticated on the LAN. See the project README.

Actual MCP Server icon

Actual MCP Server

GitHub Actions CI npm version Docker Pulls License: MIT Node.js Version TypeScript

A Model Context Protocol server that lets an AI assistant (Claude, LibreChat, LobeChat, Cursor and others) read and manage your self-hosted Actual Budget.

What you can ask it: "How much did I spend on groceries last month, by payee?", "Add a $47.50 grocery transaction at Whole Foods to my checking account.", "Move $200 from Dining Out to Emergency Fund for this month."

84 tools across accounts, transactions, budgets, rules, schedules and more, over stdio or HTTP, with Bearer token or OIDC auth, per-user budget access, up to 15 concurrent sessions, and automatic retry of transient Actual errors (3 attempts, exponential backoff; deletes and merges are never retried).

Pick your path

Quick start (Docker, HTTP)

You need an Actual Budget server and Docker. 1. Create .env with a generated token. In an empty directory:

[ -f .env ] || install -m 600 /dev/null .env
[ -z "$(tail -c 1 .env)" ] || printf '\n' >> .env
for key in ACTUAL_SERVER_URL=http://YOUR-ACTUAL-HOST:5006 ACTUAL_PASSWORD= ACTUAL_BUDGET_SYNC_ID=; do
  grep -q "^${key%%=*}=" .env || printf '%s\n' "$key" >> .env
done
chmod 600 .env
if [ "$(grep -c '^MCP_SSE_AUTHORIZATION=' .env)" != 1 ] || ! grep -Eq '^MCP_SSE_AUTHORIZATION=[^[:space:]]{32,}$' .env; then
  ( umask 077; install -m 600 /dev/null .env.new; { grep -v '^MCP_SSE_AUTHORIZATION=' .env; printf 'MCP_SSE_AUTHORIZATION=%s\n' "$(openssl rand -hex 32)"; } > .env.new ) && mv .env.new .env
fi
grep '^MCP_SSE_AUTHORIZATION=' .env

The last line prints the Bearer token your client sends. It never overwrites a value you set, except a token that is missing, duplicated or shorter than 32 characters, so it is safe to run again.

2. Fill in .env: ACTUAL_PASSWORD, ACTUAL_BUDGET_SYNC_ID (Actual: Settings, Show advanced settings, Sync ID) and ACTUAL_SERVER_URL. The URL is read inside the container, where localhost is the container itself: use your Actual server's LAN address or domain, or http://host.docker.internal:5006 when Actual runs on the Docker host.

3. Start the server from the same directory:

docker run -d \
  --name actual-mcp-server-backend \
  -p 3600:3600 \
  --add-host=host.docker.internal:host-gateway \
  --env-file .env \
  -v actual-mcp-data:/app/data \
  -v actual-mcp-logs:/app/logs \
  ghcr.io/agigante80/actual-mcp-server:latest

Check it with curl http://localhost:3600/health. The image is also on Docker Hub as agigante80/actual-mcp-server. Production flags, TLS, reverse proxies and the reason for the /app/data volume are in the deployment guide.

Docker Compose (Compose 2.24.0 or later), from a clone of this repository:

[ -f .env ] || install -m 600 .env.example .env
chmod 600 .env
if [ "$(grep -c '^MCP_SSE_AUTHORIZATION=' .env)" != 1 ] || ! grep -Eq '^MCP_SSE_AUTHORIZATION=[^[:space:]]{32,}$' .env; then
  ( umask 077; install -m 600 /dev/null .env.new; { grep -v '^MCP_SSE_AUTHORIZATION=' .env; printf 'MCP_SSE_AUTHORIZATION=%s\n' "$(openssl rand -hex 32)"; } > .env.new ) && mv .env.new .env
fi
grep '^MCP_SSE_AUTHORIZATION=' .env
docker compose --profile production up -d

On a fresh .env, fill in the three Actual settings, then run the last line again.

npx (Node.js 22 or later, no container), in a directory holding a filled-in .env from step 1, where http://localhost:5006 is right for Actual on the same machine:

npx actual-mcp-server --http

Privacy

Budget data the tools return goes to whichever model provider your AI client uses. The server itself contacts only the configured Actual server and, when OIDC auth is configured, your identity provider (discovery and JWKS). Logs stay on the host you run it on. Details: security and privacy.

Compatibility

Node.js 22 or later, Actual Budget server 25.0.0 or later, and the bundled @actual-app/api (its version is in package.json and reported by the actual_server_info tool). Requirements and upgrade steps: upgrading.

Tools

Every tool, with its description and caveats, is in the tools reference.

Reducing the tool surface

All 84 tools are published by default. Chat clients with a small tool budget (Gemini, LibreChat) do better with fewer. A tool that is not published is also refused if a client calls it by name.

Toolset Tools Contents
context 14 Orientation, lookups and server information
transactions 14 Transaction reads, create, update, delete, import and transfers
analysis 7 Summaries, aggregates and balances
budget 10 Budget months, amounts, carryover, holds, transfers, batch updates and notes
rules 7 Rules and payee rules, including actual_rules_create_batch
schedules 4 Scheduled transactions
structure 21 Accounts, account groups, categories, category groups, payees and tags
query 1 actual_query_run (SELECT only)
admin 6 Budget switching, import, export, bank sync and session management

The chat preset publishes 12 tools: actual_get_context, actual_query_run, actual_transactions_update_batch, actual_budget_updates_batch, actual_rules_create_batch, actual_transactions_create, actual_transactions_update, actual_transactions_delete, actual_rules_create, actual_budgets_transfer, actual_budgets_setAmount and actual_budgets_getMonth.

MCP_READ_ONLY=true hides and refuses 48 write-capable tools and leaves 36 published.

Example: a chat assistant with two extra tools.

MCP_TOOLSETS=chat
MCP_TOOLS=actual_accounts_list,actual_payees_get

A configuration that resolves to zero tools refuses to start. See Security and Privacy.

Configuration

Variable Required Description
ACTUAL_SERVER_URL Yes URL of your Actual Budget server, as seen from where the MCP server runs. Inside a container localhost is the container itself: use the host's address, the container name on a shared Docker network, or http://host.docker.internal:5006
ACTUAL_PASSWORD Yes Login password for your Actual Budget server (not the budget encryption password)
ACTUAL_BUDGET_SYNC_ID Yes Budget Sync ID from Actual (Settings then Sync ID)
ACTUAL_BUDGET_PASSWORD No Encryption password for an end-to-end encrypted budget
MCP_BRIDGE_PORT No Port the MCP server listens on
MCP_SSE_AUTHORIZATION No Static Bearer token clients must send (the raw token, not Bearer ...); highly recommended in production
AUTH_PROVIDER No none (static Bearer) or oidc (JWKS-validated JWT)
MCP_TOOLSETS No Toolset groups and presets to publish; see Reducing the tool surface

Every variable, with its type and default: configuration reference. Several budgets: multiple budgets. Auth modes, per-client tokens and OIDC: authentication.

Documentation

Contributing

Contributions are welcome. See CONTRIBUTING.md for setup, the checks every change must pass and the PR process. Questions and bug reports: SUPPORT.md.

Security

Report a vulnerability privately as described in SECURITY.md, not in a public issue.

Sponsor

I build and maintain this in my own time. It is free, it stays free, and it gets maintained either way. If it saved you some time, you can say thanks at github.com/sponsors/agigante80. Entirely optional.

License

MIT, see LICENSE. Built on Actual Budget and the Model Context Protocol, with thanks to s-stefanov/actual-mcp for the original adapter pattern. An independent project, not affiliated with Actual Budget, provided as-is without warranty: if you connect it to real financial data, you do so at your own risk.


Version: 0.24.15 | Tool Count: 84 (verified LibreChat-compatible)

Download Statistics

78,531
Total Downloads
24,975
This Month
16,723
Avg / Month

Total Downloads Over Time

Loading chart...

Related apps

Details

Repository
ghcr.io/agigante80/actual-mcp-server:latest
Last Updated2026-09-30
First Seen2026-06-13

Runtime arguments

Web UI
http://[IP]:[PORT:3600]/health
Network
bridge
Shell
sh
Privileged
false

Template configuration

WebUI / Health PortPorttcp

MCP HTTP endpoint and the unauthenticated health/metrics endpoints (/http, /health, /metrics).

Target
3600
Default
3600
Value
3600
DataPathrw

Persistent data: the local copy of your Actual Budget data (SQLite) the server downloads to run queries against.

Target
/app/data
Default
/mnt/user/appdata/actual-mcp-server/data
Value
/mnt/user/appdata/actual-mcp-server/data
LogsPathrw

Rotated application log files.

Target
/app/logs
Default
/mnt/user/appdata/actual-mcp-server/logs
Value
/mnt/user/appdata/actual-mcp-server/logs
PUIDVariable

User ID the service runs as. On Unraid use 99 (nobody) so it can write the appdata directories.

Default
99
Value
99
PGIDVariable

Group ID the service runs as. On Unraid use 100 (users).

Default
100
Value
100
TimezoneVariable

Container timezone used for log timestamps, e.g. America/New_York.

Target
TZ
Default
Europe/Madrid
Value
Europe/Madrid
MCP auth tokenVariable

REQUIRED. The raw Bearer token clients must send. Generate with `openssl rand -hex 32`. A BLANK value disables all HTTP authentication and exposes your data unauthenticated on the LAN.

Target
MCP_SSE_AUTHORIZATION
Actual server URLVariable

Your Actual Budget server URL, e.g. https://actual.example.com or http://192.168.1.50:5006.

Target
ACTUAL_SERVER_URL
Actual server passwordVariable

Your Actual Budget server password.

Target
ACTUAL_PASSWORD
Actual server Sync IDVariable

The budget Sync ID (Actual Budget: open the budget, Settings, Show advanced settings, Sync ID).

Target
ACTUAL_BUDGET_SYNC_ID
ToolsetsVariable

Which tools to publish: comma-separated groups (context, transactions, analysis, budget, rules, schedules, structure, query, admin) and presets (chat). 'all' publishes every tool. 'chat' publishes 12 tools and suits Gemini and LibreChat. Unknown names stop the container starting.

Target
MCP_TOOLSETS
Default
all
Value
all
Extra toolsVariable

Extra tools to add on top of the toolsets, by full name (for example actual_accounts_list,actual_payees_get). Unknown names stop the container starting.

Target
MCP_TOOLS
Read onlyVariable

true hides and refuses the 47 write-capable tools. Only true or false are accepted.

Target
MCP_READ_ONLY
Default
false
Value
false
Node EnvironmentVariable

Node.js runtime environment. Leave as production unless debugging.

Target
NODE_ENV
Default
production
Value
production