bank-mcp

bank-mcp

Unofficial, read-only MCP server for your own UK bank and card data, via TrueLayer Open Banking. It can read accounts, cards, balances and transactions. It cannot move money: only read scopes are ever requested.

Not affiliated with TrueLayer or any bank. See SECURITY.md before linking real accounts.

Setup

Requires Python 3.11+ and uv (or pip).

git clone https://github.com/pritch56/bank-mcp.gitcd bank-mcpuv syncuv run bank-mcp-link --help

Or install the package into any environment with pip install .; this provides the bank-mcp (server) and bank-mcp-link (bank linking) commands.

Get TrueLayer credentials

1. Create a free account at the TrueLayer Console.
2. Create an application and note its client ID and client secret. Start with the sandbox, then switch to live.
3. In the application's settings, add this redirect URI: http://localhost:3000/callback (use the same port as --port if you change it).
4. Make sure the Data API is enabled with these scopes: info accounts cards balance transactions offline_access.
5. Export the credentials in the shell you run bank-mcp-link from:

export TRUELAYER_CLIENT_ID=your-client-idexport TRUELAYER_CLIENT_SECRET=your-client-secretexport TRUELAYER_ENV=sandbox   # or "live" (the default)

Never commit these values. .env files are git-ignored.

Link a bank

bank-mcp-link opens your bank's sign-in page in the browser and stores the resulting tokens under a nickname of your choice. You can link several banks.

# Sandbox (no real bank needed)uv run bank-mcp-link --provider mock --name test --sandbox
# A real bank: use its TrueLayer provider id, for example ob-nationwideuv run bank-mcp-link --provider ob-nationwide --name nationwide
uv run bank-mcp-link --list               # linked banks and consent expiryuv run bank-mcp-link --remove nationwide  # forget a bank

If the browser does not open, copy the URL printed in the terminal. Linking waits five minutes for the redirect.

UK Open Banking consent lasts 90 days. When it lapses, tools return Reconnect required for '<bank>'; run bank-mcp-link again for that bank.

Tokens are stored in ~/.bank-mcp/tokens.json, readable only by you.

Configure your MCP client

Replace /path/to/bank-mcp with your checkout. The server reads the same TRUELAYER_* credentials from its environment, and uses the provider id and environment recorded when each bank was linked.

Claude Desktop

Add to claude_desktop_config.json (Settings > Developer > Edit Config), then restart Claude Desktop:

{  "mcpServers": {    "bank": {      "command": "uv",      "args": ["run", "--directory", "/path/to/bank-mcp", "bank-mcp"],      "env": {        "TRUELAYER_CLIENT_ID": "your-client-id",        "TRUELAYER_CLIENT_SECRET": "your-client-secret",        "TRUELAYER_ENV": "live"      }    }  }}

Claude Code

claude mcp add bank \  --env TRUELAYER_CLIENT_ID=your-client-id \  --env TRUELAYER_CLIENT_SECRET=your-client-secret \  --env TRUELAYER_ENV=live \  -- uv run --directory /path/to/bank-mcp bank-mcp

Host it on Cloudflare Workers

To run the server remotely instead of over stdio, see worker/README.md: a TypeScript Worker with Workers KV for tokens, protected by Cloudflare Access.

Tools

bank-mcp (stdio) exposes five read-only tools. Each except list_connections takes an optional bank nickname; leave it out to query every linked bank.

When all banks are queried, the working banks are still returned and the failing ones are listed under errors.

Configuration

Development

See CONTRIBUTING.md. Release history is in CHANGELOG.md.

Licence

MIT