Connect your bank accounts in one click. Get balances, transactions, and spending insights as MCP tools. No API keys to manage.
{
"mcpServers": {
"openfinance": {
"type": "url",
"url": "https://openfinance-mcp.widurki.workers.dev/mcp",
"headers": {
"Authorization": "Bearer YOUR_API_KEY"
}
}
}
}
Works with Claude Code, OpenClaw, Cursor, Windsurf, and any MCP-compatible AI tool.
Everything your agent needs to understand your finances.
Paste the config into your AI tool's MCP settings. Takes 10 seconds.
"Connect my bank account" — your agent calls connect_bank and gives you a secure link.
Standard PSD2 open banking flow. Read-only access. No credentials stored by us.
"What's my balance?" "How did I spend last month?" "Do I have any subscriptions I forgot about?"
We never see your bank credentials. Here's exactly how your data is protected.
You log in directly with your bank via PSD2 open banking. We receive a read-only token — never your username or password. Same technology your bank's own app uses.
We can only view balances and transactions. We cannot move money, make payments, or modify your accounts. This is enforced at the banking API level — not just our code.
All data encrypted with AES-256 at rest. All communication over TLS 1.3. OAuth tokens stored encrypted — even we can't read them in raw form.
PSD2 mandates your consent expires every 90 days. We'll remind you to re-authorize — if you don't, access stops automatically. You're always in control.
Revoke access with one click. We delete all your data — tokens, transactions, everything — within 24 hours. GDPR Article 17 compliant.
Bank connections powered by licensed Account Information Service Providers (AISPs) under PSD2/EU regulation. Not a screen scraper — a regulated API.
PSD2 coverage via EnableBanking. Ireland, UK, Germany, France, Nordics, and more.