Actual Budget MCP Server
Needs API key · listed on AddonAudit
io.github.agigante80/actual-mcp-server
Manage Actual Budget accounts, transactions, budgets, rules and reports from an AI assistant.
Install
npx -y actual-mcp-server@0.25.1
Required configuration names: ACTUAL_SERVER_URL, ACTUAL_BUDGET_SYNC_ID. Values are not stored.
2 secret configuration fields are declared. Names and values are omitted here.
Built for
Any MCP client. Works as a standard MCP server, so it can be added to any MCP client, including Claude, Cursor and Codex. Based on the listing description and package type. This is not a certification from those products.
Transports: stdio.
Links
Audit report
Needs API key
This add-on asks for an API key or account credentials, and our sandbox supplies none, so we could not complete the test. To get tested, provide a demo or test mode that starts without a key.
Automated smoke test, not a security guarantee.
- Version
- 0.25.1
- Audited
- 2 Nov 2026
- Package
- npm actual-mcp-server
- Advisories
- 0 critical, 1 high, 0 medium, 0 low
- Network
- Disabled
- Pass Version. Pinned npm actual-mcp-server@0.25.1
- Issue found Known vulnerabilities. Critical or high advisories were returned.
- Pass License. MIT
- Pass Install scripts. No preinstall, install, postinstall, or prepare script.
- Pass Credential patterns. No credential patterns in the published artifact.
- Pass Package size. 1.2 MB
- Pass Maintainer activity. Active 7 days ago.
- Not tested Sandbox. Requires credentials. Started with none.
Sandbox log excerpt
2026-11-02 09:22:37.777 error: ❌ Missing or invalid environment variables: • ACTUAL_SERVER_URL: Invalid input: expected string, received undefined • ACTUAL_BUDGET_SYNC_ID: Invalid input: expected string, received undefined Set them in a .env file in the current directory, or export them before running. Required: ACTUAL_SERVER_URL, ACTUAL_PASSWORD, ACTUAL_BUDGET_SYNC_ID See: https://github.com/agigante80/actual-mcp-server
Metadata checks
- Repository activity: Active in the last 180 days
- License: Recognized SPDX id
- Metadata quality: High
Score 100 uses public metadata only. It is separate from the audit tier. Payment never changes a score. How listings are checked.
Listed on AddonAudit
Free to use on this listing. The mark links back to this page and does not change the score or the tier.
Light
[](https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/)
<a href="https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/"><img alt="Listed on AddonAudit" src="https://addonaudit.com/badges/listed.svg" width="135" height="20"></a>
Dark
[](https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/)
<a href="https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/"><img alt="Listed on AddonAudit" src="https://addonaudit.com/badges/listed-dark.svg" width="135" height="20"></a>
Seal, light
[](https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/)
<a href="https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/"><img alt="Listed on AddonAudit" src="https://addonaudit.com/badges/listed-seal.svg" width="240" height="240"></a>
Seal, dark
[](https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/)
<a href="https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/"><img alt="Listed on AddonAudit" src="https://addonaudit.com/badges/listed-seal-dark.svg" width="240" height="240"></a>
Self-hosted version
A remote image can be changed by whoever hosts it. To keep the badge fixed, download the SVG and commit it to your own repo, for example as .github/addonaudit-badge.svg. The snippet below uses that local file and links to this page.
Download light SVG · Download dark SVG
[](https://addonaudit.com/addon/io-github-agigante80-actual-mcp-server/)
Get your add-on audited
Request a free audit of a public MCP server or AI coding add-on. A request does not buy a listing, a tier, or a score change.
Data notes
- Tool count is not part of this registry record, so it is blank.