If you have ever wanted to ask Claude "how much did I spend on groceries last month" and get an answer from your actual data, you were asking for an MCP server: a standard way for AI assistants to call tools against an app on your behalf. Personal finance is one of the most requested MCP use cases, and also the one where the details matter most, because the thing on the other end of the connection is your money. Here is where each major personal finance app actually stands in 2026.
The landscape at a glance
| App | First-party MCP? | Official API? | How AI connects |
|---|---|---|---|
| Finlynq | Yes: 54 HTTP / 89 stdio tools | Yes, full REST surface (Bearer key) | OAuth 2.1 + DCR, API key, or stdio |
| Era | Yes: Era Context, 27 tools (closed source) | Not publicly documented outside MCP | OAuth 2.1 with scoped permissions |
| Monarch Money | No, and no official API | None (community libraries reverse-engineer the private one) | Community MCP servers using your email + password + MFA secret |
| YNAB | No | Yes, official REST API (200 req/hr limit) | Community MCP servers using a personal access token |
| Actual Budget | No (AI requests closed unmerged) | Yes, via its sync-server API | Community MCP servers against your self-hosted instance |
| Firefly III | No (request closed, no plans) | Yes, official REST API | Community MCP wrappers using a personal access token |
The pattern: only two apps ship a first-party MCP server, and only one of those is open source. Everything else in the category is covered by community projects of varying quality, wrapping either an official API (YNAB, Actual, Firefly III) or a reverse-engineered private one (Monarch).
Why first-party vs community matters
A community MCP server is not a bad thing. Some are genuinely well built, and for apps whose vendors have said no to AI access, they are the only option. But the distinction matters in three concrete ways:
- What you hand over. The best case is a scoped OAuth grant or a revocable API token. The worst case is your real email, password, and TOTP secret pasted into a config file, which is what the Monarch community servers require, because Monarch offers no official API at all.
- Who fixes it when it breaks. A wrapper on a reverse-engineered API can stop working any day, and the vendor owes it nothing. A first-party server ships and versions with the app.
- What the tools can see. With a closed-source server (first-party or not) you cannot audit what gets read and sent to the model. With an open-source first-party server, the tool implementations are in the same repo as the app.
A quick checklist before you connect any AI to your finances
- Prefer OAuth or a revocable token. Never paste your banking or app password into an MCP config if there is any alternative.
- Start read-only if the server supports it, and grant write scopes only once you trust the setup.
- Check whether destructive operations require confirmation. (Finlynq's delete and bulk tools use a two-step preview-then-confirm token, so a misfired prompt cannot wipe anything in one shot.)
- Ask where the data lives and who holds the keys. An MCP server is only as private as the database behind it.
Where Finlynq fits
Finlynq is the open-source entry in that table: AGPL v3, self-hostable, with a first-party MCP server exposing 54 HTTP tools (and 89 over stdio) across accounts, transactions, budgets, portfolios, goals, loans, subscriptions, and reconciliation. Auth is OAuth 2.1 with dynamic client registration, per-user envelope encryption means the operator cannot read your data, and the whole surface is auditable on GitHub. The MCP guide walks through connecting Claude, ChatGPT, Cursor, or any other MCP client in a couple of minutes, and the live demo lets you try the whole thing without signing up.
FAQ
Does Monarch Money have an MCP server?
No official one, and no official developer API to build one on. Community MCP servers exist, but they use a reverse-engineered client library and need your real Monarch email, password, and MFA secret.
Does YNAB have an MCP server?
Not first-party. YNAB has an excellent official REST API, and community MCP servers wrap it using a personal access token, subject to a 200-requests-per-hour rate limit.
Does Actual Budget have an MCP server?
Not first-party. Several community MCP servers connect to a self-hosted Actual instance through its API. They work, but they are third-party projects and not integrated into the app.
Does Firefly III have an MCP server?
Not first-party. The feature request was closed without plans to ship. Community wrappers built on Firefly's REST API fill the gap.
Which personal finance apps have a first-party MCP server?
As of mid-2026, two: Era (closed source, hosted SaaS, 27 tools) and Finlynq (open source AGPL v3, self-hostable, 54 HTTP tools with OAuth 2.1).
Fact-checked 2026-07-29. Competitor details come from each project's public repos and docs; corrections welcome via GitHub Discussions. For deeper one-on-one comparisons, see Finlynq vs everyone.