Prototype · Preview: every server in the official registry, synced every 30 minutes. Reviews and accounts come in a later step.
PopNx MCPMCP servers for people who use AI · explained in plain words

Monarch Money

by pulsemcpversion 0.0.13i★ –iRuns on your computer
Registry namecom.pulsemcp/monarch-money

Install

Overview

Description from the maker (original English)

MCP server for Monarch Money — account, transaction, and budget management.

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

  • Connection: Runs on your computer
  • Transport: stdio
  • Category: Accounting, finance & tax
  • You need to fill in: MONARCH_SESSION_TOKEN, MONARCH_PASSWORD, MONARCH_TOTP, MONARCH_EMAIL_OTP, MONARCH_SESSION_PASSPHRASE

Install

Pick the AI app you use, then copy the settings.

Before you install

  • Basic checks: 1 of 1 passed
  • Runs on your computer with your user’s permissions (files, network, apps).
  • You fill in yourself: MONARCH_SESSION_TOKEN, MONARCH_EMAIL, MONARCH_PASSWORD, MONARCH_TOTP, MONARCH_EMAIL_OTP, MONARCH_SESSION_PASSPHRASE, MONARCH_STATE_DIR, MONARCH_ENABLED_TOOL_GROUPS, MONARCH_ENABLED_TOOLS, MONARCH_DISABLED_TOOLS

Values marked secret are keys to your account. Never share them or paste them into a chat.

You need

  • npmNode.js installed (for the npx command)

Which app do you use?

Pick your app above. We remember it, so next time the button says “Install in …”.

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "monarch-money": {
      "command": "npx",
      "args": [
        "-y",
        "monarch-money-mcp-server"
      ],
      "env": {
        "MONARCH_SESSION_TOKEN": "your-value",
        "MONARCH_EMAIL": "your-value",
        "MONARCH_PASSWORD": "your-value",
        "MONARCH_TOTP": "your-value",
        "MONARCH_EMAIL_OTP": "your-value",
        "MONARCH_SESSION_PASSPHRASE": "your-value",
        "MONARCH_STATE_DIR": "your-value",
        "MONARCH_ENABLED_TOOL_GROUPS": "your-value",
        "MONARCH_ENABLED_TOOLS": "your-value",
        "MONARCH_DISABLED_TOOLS": "your-value"
      }
    }
  }
}

Run this in your terminal

claude mcp add monarch-money --env MONARCH_SESSION_TOKEN=your-value --env MONARCH_EMAIL=your-value --env MONARCH_PASSWORD=your-value --env MONARCH_TOTP=your-value --env MONARCH_EMAIL_OTP=your-value --env MONARCH_SESSION_PASSPHRASE=your-value --env MONARCH_STATE_DIR=your-value --env MONARCH_ENABLED_TOOL_GROUPS=your-value --env MONARCH_ENABLED_TOOLS=your-value --env MONARCH_DISABLED_TOOLS=your-value -- npx -y monarch-money-mcp-server

Fill in the empty values before running it.

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "monarch-money": {
      "command": "npx",
      "args": [
        "-y",
        "monarch-money-mcp-server"
      ],
      "env": {
        "MONARCH_SESSION_TOKEN": "your-value",
        "MONARCH_EMAIL": "your-value",
        "MONARCH_PASSWORD": "your-value",
        "MONARCH_TOTP": "your-value",
        "MONARCH_EMAIL_OTP": "your-value",
        "MONARCH_SESSION_PASSPHRASE": "your-value",
        "MONARCH_STATE_DIR": "your-value",
        "MONARCH_ENABLED_TOOL_GROUPS": "your-value",
        "MONARCH_ENABLED_TOOLS": "your-value",
        "MONARCH_DISABLED_TOOLS": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "monarch-money": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "monarch-money-mcp-server"
      ],
      "env": {
        "MONARCH_SESSION_TOKEN": "your-value",
        "MONARCH_EMAIL": "your-value",
        "MONARCH_PASSWORD": "your-value",
        "MONARCH_TOTP": "your-value",
        "MONARCH_EMAIL_OTP": "your-value",
        "MONARCH_SESSION_PASSPHRASE": "your-value",
        "MONARCH_STATE_DIR": "your-value",
        "MONARCH_ENABLED_TOOL_GROUPS": "your-value",
        "MONARCH_ENABLED_TOOLS": "your-value",
        "MONARCH_DISABLED_TOOLS": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.

Your choice stays on this device in a cookie; no account needed.

Values you fill in

  • MONARCH_SESSION_TOKEN secret env
    Pre-obtained session token for authentication (recommended over email/password).
  • MONARCH_EMAIL env
    Email address for email/password authentication.
  • MONARCH_PASSWORD secret env
    Password for email/password authentication.
  • MONARCH_TOTP secret env
    TOTP code if 2FA is enabled on the account.
  • MONARCH_EMAIL_OTP secret env
    Email OTP code required only on first login from a new install.
  • MONARCH_SESSION_PASSPHRASE secret env
    Override passphrase for encrypting the on-disk session file.
  • MONARCH_STATE_DIR env
    Directory where session.enc file is stored.
  • MONARCH_ENABLED_TOOL_GROUPS env
    Comma-separated list of tool groups to enable (readonly, manage).
  • MONARCH_ENABLED_TOOLS env
    Comma-separated whitelist of specific tool names to enable.
  • MONARCH_DISABLED_TOOLS env
    Comma-separated blacklist of specific tool names to disable.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 8, 2026

  • ✓ Pass

    Maker matches the repo

    The registry name was verified against the domain pulsemcp.com (the registry checks domain ownership)

  • … Not checked yet

    Still maintained

    We have not read this repo from GitHub yet

  • … Not checked yet

    Has a licence

    We have not read this repo from GitHub yet

  • – Not applicable

    Endpoint responds

    This one runs on your computer; there is no internet endpoint

  • – Not applicable

    Sign-in with OAuth

    Runs on your computer and uses local settings instead

  • … Not checked yet

    No hidden instructions in tool descriptions

    Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Accounting, finance & taxi

  • More stars than 0% of the other 2934 servers in this category
  • Published to the registry more recently than 18% of the other 2934 servers in this category
  • Basic checks equal to or better than 100% of the other 2934 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Monarch Money safe?

It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

You need to fill in: MONARCH_SESSION_TOKEN, MONARCH_PASSWORD, MONARCH_TOTP, MONARCH_EMAIL_OTP, MONARCH_SESSION_PASSPHRASE

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed –, and the latest version (0.0.13) reached the registry 4 months ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.

What can I use instead?

In the same category: Finance Toolkit, SolidInvoice, Korea Tax Calculator

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Finance Toolkit

500+ transparent financial methods calculated from raw statements, not third-party endpoints.

by JerBoumaWidely used↓ 15.5K/wk★ 5.5KUpdated yesterday

Computer or cloud

SolidInvoice

Create and send invoices and quotes, manage clients, and track payments in SolidInvoice.

by SolidInvoiceGrowing★ 981Updated 9 days ago

Runs in the cloud✓ solidinvoice.co

Korea Tax Calculator

Korean tax calculation and tax-audit judgment MCP: 96 tools with statutory citations.

by UpstageAIGrowing↓ 3.2K/wk★ 97Updated today

Runs on your computer

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

Monarch Money MCP Server

MCP server for Monarch Money — a personal finance app that aggregates accounts, transactions, budgets, and net worth across institutions. This server gives an AI assistant read and write access to the same data the Monarch web/mobile app shows you, scoped to your own account.

Highlights

  • 23 consolidated tools across two groups (readonly, manage) covering accounts, balances, net worth, cashflow, transactions, categories, tags, transaction rules, and budgets
  • Encrypted on-disk session at ~/.monarch-money-mcp/session.enc — the server never accepts a Monarch password through a tool input
  • Tool group filtering via env vars — run the server in a strict read-only mode, or hand-pick the exact tools you want exposed to the agent
  • Custom thin GraphQL transport targeting api.monarch.com/graphql — no third-party Monarch client dependency

Why a custom GraphQL client?

The tools in this server span accounts, transactions, budgets, rules, categories, and net worth. We evaluated existing TypeScript Monarch clients and didn't find one that covered the surface we needed and was actively maintained. Rather than wrap a partial third-party client and patch around its gaps, this server ships a small in-house transport (shared/src/monarch-client/graphql-transport.ts) that is deliberately minimal: build the request, surface auth/network errors with typed exceptions, return the typed data payload. Operations live as named GraphQL strings in shared/src/monarch-client/operations.ts so the surface is grep-able and easy to extend.

Authentication

Monarch's /auth/login/ endpoint gates first-time logins from an unfamiliar device behind an email OTP Monarch sends to your inbox, plus per-IP throttling and a Cloudflare bot challenge. That makes a fully unattended email + password flow impossible on a fresh install — the user has to read the code from email at least once. After that one-time pairing, the same install can log in with credentials alone.

Because of that, the recommended path is to paste a session token rather than ship credentials in the env. The server supports four ways to authenticate, in priority order:

1. Env-var session token (recommended)

Paste a token once into the launcher's environment. Headless, autonomous, no OTP gate.

MONARCH_SESSION_TOKEN=<your-token>

Where to get a token:

  • Run npm run login (option 3) once and copy it out of ~/.monarch-money-mcp/session.enc (after decrypting), OR
  • Open the Monarch web app DevTools → Network → any /graphql request → copy the value of the Authorization: Token <…> header.

The token is resolved at startup, validated, and persisted to disk so the env var becomes optional after the first run.

2. Tool-based token paste

If you can't set env vars (e.g., a UI that doesn't expose the launcher's env), call the monarch_login_with_token tool with the token as input. The server validates it via Monarch's me endpoint before saving.

3. Env-var email + password (best-effort)

Set credentials in the env and let the server log in:

MONARCH_EMAIL=<email>

MONARCH_PASSWORD= MONARCH_TOTP= # only if your account has 2FA enabled MONARCH_EMAIL_OTP= # only on the first launch from a new install

On the first launch from a fresh install Monarch sends an OTP to your email. The server logs a clear stderr message explaining what to do; set MONARCH_EMAIL_OTP= and restart. Subsequent launches reuse the persisted device-uuid and skip the OTP gate.

4. Interactive CLI
cd servers/monarch-money/local

npm run login

Prompts for email, password, optional TOTP, and (if challenged) the email OTP. Writes the encrypted token to ~/.monarch-money-mcp/session.enc.

Session encryption

The token is encrypted at rest with AES-256-GCM. The encryption key is derived via scrypt from a passphrase:

  • If MONARCH_SESSION_PASSPHRASE is set, that's the passphrase.
  • Otherwise, the passphrase is derived from the machine's hostname (os.hostname()) and the current user (os.userInfo().username) — making the encrypted file machine-bound by default.

This isn't a defense against a local attacker who already controls your shell, but it does prevent accidental cross-host disclosure (e.g., the file ending up in a backup that gets restored on another machine).

Tool Groups

Tools are tagged with one or more groups. The default exposes everything; setting MONARCH_ENABLED_TOOL_GROUPS (or MONARCH_ENABLED_TOOLS / MONARCH_DISABLED_TOOLS) narrows the surface.

GroupIncludes
readonlyLookups only — accounts, transactions, balances, net worth, categories, budgets, rules.
manageEverything in readonly plus mutations — create/update/delete transactions, tags, rules, budgets; refresh accounts.

Filter precedence: MONARCH_ENABLED_TOOLS (whitelist, exact names) > MONARCH_ENABLED_TOOL_GROUPS (group filter) > MONARCH_DISABLED_TOOLS (blacklist, exact names).

# Strict read-only deployment

MONARCH_ENABLED_TOOL_GROUPS=readonly

Deny one specific tool

MONARCH_DISABLED_TOOLS=delete_transaction

Whitelist exactly two tools

MONARCH_ENABLED_TOOLS=get_transactions,get_accounts

Tools

Authentication / session
ToolGroupsDescription
check_authenticationreadonly, manageVerify the on-disk session is valid (calls Monarch's me); returns setup instructions if not authenticated.
monarch_login_with_tokenmanagePersist a pre-obtained session token to encrypted disk storage.
Accounts
ToolGroupsDescription
get_accountsreadonly, manageList every connected account with balances and metadata. Pass includeHoldings: true to attach investment holdings to each account.
get_account_balance_historyreadonly, manageDaily balance snapshots for one account over a date range.
set_account_balance_historymanageSet recorded daily balance snapshots for a manual account — range mode (start/end/balance) or explicit { date, balance } list. Per-date upsert via Monarch's balance-history importer.
refresh_accountsmanageTrigger an upstream institution sync.
Net worth
ToolGroupsDescription
get_net_worthreadonly, manageNet worth view. view: "history" (default) returns a time series; view: "by_type" returns a current breakdown by account type.
Transactions (read)
ToolGroupsDescription
get_transactionsreadonly, manageQuery transactions in five shapes via view: list (default, paged with filters), summary (aggregate totals), cashflow (income/expense/savings), by_category (totals per category), recurring (forecasted occurrences).
get_transaction_detailsreadonly, manageFull detail for a single transaction, including its splits.
Transactions (write)
ToolGroupsDescription
create_transactionmanageCreate a manual transaction.
update_transactionmanagePatch a transaction. Supports amount / date / merchantId / categoryId / notes / hideFromReports / reviewed / tagIds in any combination. Pass bulkTransactionIds + categoryId to bulk-recategorize many transactions in one call.
delete_transactionmanagePermanently delete a transaction.
split_transactionmanageSplit a transaction into multiple categorized parts.
Categories & tags
ToolGroupsDescription
get_categoriesreadonly, manageList all categories. Pass includeGroups: true to also return the top-level category groups.
get_tagsreadonly, manageList all tags.
create_tagmanageCreate a tag. Requires name and a hex color (e.g. #19d2a5); order is server-assigned.

| delete_tag | manage | Delete a tag by id. Returns `

Only the beginning is shown; read the rest in the repo

Ask PopNx