Actual Budget MCP server

by henfrydls·io.github.henfrydls/actual-budget-mcp·v0.9.2

Spending analysis and safe writes for Actual Budget: every delete previews and asks first.

B83/100grade B

What users say

No reviews yet

Safety scan

B83/100

Adoption

Growing

7 stars374 downloads/wk

Reviews

Nobody has reviewed Actual Budget yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

No tool declarations could be read from the package source. They show once the server is installed.

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

Code scan115 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 1 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y actual-budget-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add actual-budget-mcp -- npx -y actual-budget-mcp

Is Actual Budget MCP server safe?: Mostly: it is graded B (83/100). Read the Actual Budget safety report
How do I install Actual Budget?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Actual Budget need an API key?: Yes. The registry entry asks for ACTUAL_PASSWORD, ACTUAL_SESSION_TOKEN, ACTUAL_ENCRYPTION_PASSWORD.
Is Actual Budget maintained?: The last commit was 2 days ago (2026-09-18). The latest release is v0.9.2.

Local package. It runs on your machine, not through the gateway.

ACTUAL_SERVER_URLURL of your Actual Budget server, for example http://localhost:5006
ACTUAL_PASSWORDsecretPassword for your Actual Budget server. Not needed if you set ACTUAL_SESSION_TOKEN
ACTUAL_SESSION_TOKENsecretSession token for servers behind OIDC, which have no password. Use instead of ACTUAL_PASSWORD; if both are set, the token wins
ACTUAL_BUDGET_IDYour budget's Sync ID, found under Settings > Show advanced settings
ACTUAL_ENCRYPTION_PASSWORDsecretOnly needed if your budget file is end-to-end encrypted
ACTUAL_READ_ONLYSet to 1 to hide every write tool from the model, exposing only reads and analysis
ACTUAL_DATA_DIRDirectory for the local budget cache
ACTUAL_SERVER_URLURL of your Actual Budget server. Inside the container localhost is the container, so use host.docker.internal
ACTUAL_PASSWORDsecretPassword for your Actual Budget server. Not needed if you set ACTUAL_SESSION_TOKEN
ACTUAL_SESSION_TOKENsecretSession token for servers behind OIDC, which have no password. Use instead of ACTUAL_PASSWORD; if both are set, the token wins
ACTUAL_BUDGET_IDYour budget's Sync ID, found under Settings > Show advanced settings
ACTUAL_READ_ONLYSet to 1 to hide every write tool from the model, exposing only reads and analysis

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/henfrydls-actual-budget-mcp.svg)](https://mcp.market/server/henfrydls-actual-budget-mcp)