Actual Budget MCP Server

Needs API key · listed on AddonAudit

io.github.agigante80/actual-mcp-server

Manage Actual Budget accounts, transactions, budgets, rules and reports from an AI assistant.

Install

npx -y actual-mcp-server@0.25.1

Required configuration names: ACTUAL_SERVER_URL, ACTUAL_BUDGET_SYNC_ID. Values are not stored.

2 secret configuration fields are declared. Names and values are omitted here.

Built for

Any MCP client. Works as a standard MCP server, so it can be added to any MCP client, including Claude, Cursor and Codex. Based on the listing description and package type. This is not a certification from those products.

Transports: stdio.

Links

Other

Audit report

Needs API key

This add-on asks for an API key or account credentials, and our sandbox supplies none, so we could not complete the test. To get tested, provide a demo or test mode that starts without a key.

Automated smoke test, not a security guarantee.

Version
0.25.1
Audited
2 Nov 2026
Package
npm actual-mcp-server
Advisories
0 critical, 1 high, 0 medium, 0 low
Network
Disabled
  • Pass Version. Pinned npm actual-mcp-server@0.25.1
  • Issue found Known vulnerabilities. Critical or high advisories were returned.
  • Pass License. MIT
  • Pass Install scripts. No preinstall, install, postinstall, or prepare script.
  • Pass Credential patterns. No credential patterns in the published artifact.
  • Pass Package size. 1.2 MB
  • Pass Maintainer activity. Active 7 days ago.
  • Not tested Sandbox. Requires credentials. Started with none.
Sandbox log excerpt
2026-11-02 09:22:37.777 error: 
❌ Missing or invalid environment variables:
  • ACTUAL_SERVER_URL: Invalid input: expected string, received undefined
  • ACTUAL_BUDGET_SYNC_ID: Invalid input: expected string, received undefined

Set them in a .env file in the current directory, or export them before running.
Required: ACTUAL_SERVER_URL, ACTUAL_PASSWORD, ACTUAL_BUDGET_SYNC_ID
See: https://github.com/agigante80/actual-mcp-server

Raw audit JSON

Metadata checks

  • Repository activity: Active in the last 180 days
  • License: Recognized SPDX id
  • Metadata quality: High

Score 100 uses public metadata only. It is separate from the audit tier. Payment never changes a score. How listings are checked.

Listed on AddonAudit

Free to use on this listing. The mark links back to this page and does not change the score or the tier.

Light

Listed on AddonAudit
[![Listed on AddonAudit](https://addonaudit.com/badges/listed.svg)](https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/)
<a href="https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/"><img alt="Listed on AddonAudit" src="https://addonaudit.com/badges/listed.svg" width="135" height="20"></a>
Listed on AddonAudit
[![Listed on AddonAudit](https://addonaudit.com/badges/listed-dark.svg)](https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/)
<a href="https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/"><img alt="Listed on AddonAudit" src="https://addonaudit.com/badges/listed-dark.svg" width="135" height="20"></a>
Listed on AddonAudit
[![Listed on AddonAudit](https://addonaudit.com/badges/listed-seal.svg)](https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/)
<a href="https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/"><img alt="Listed on AddonAudit" src="https://addonaudit.com/badges/listed-seal.svg" width="240" height="240"></a>
Listed on AddonAudit
[![Listed on AddonAudit](https://addonaudit.com/badges/listed-seal-dark.svg)](https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/)
<a href="https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/"><img alt="Listed on AddonAudit" src="https://addonaudit.com/badges/listed-seal-dark.svg" width="240" height="240"></a>

A remote image can be changed by whoever hosts it. To keep the badge fixed, download the SVG and commit it to your own repo, for example as .github/addonaudit-badge.svg. The snippet below uses that local file and links to this page.

Download light SVG · Download dark SVG

[![Listed on AddonAudit](.github/addonaudit-badge.svg)](https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/)

Get your add-on audited

Request a free audit of a public MCP server or AI coding add-on. A request does not buy a listing, a tier, or a score change.

Request an audit Featured option

Data notes
  • Tool count is not part of this registry record, so it is blank.