← Back to search

actual-mcp-server

GitHub Actions Scanned 9d ago

MCP server with 71 tools for AI-driven financial management with Actual Budget. HTTP and stdio transports for LibreChat, Claude Desktop, Cursor, VS Code, Gemini CLI

npm ↗
? Not scanned yet

Versions

0.9.3latest
Jul 31, 2026
0.9.2
Jul 30, 2026
0.9.1
Jul 30, 2026
0.9.0
Jul 30, 2026
0.8.17
Jul 25, 2026
+ show 65 moreshow less
0.8.16
Jul 15, 2026
0.8.15
Jul 11, 2026
0.8.13
Jul 10, 2026
0.8.11
Jul 10, 2026
0.8.10
Jul 10, 2026
0.8.9
Jul 10, 2026
0.8.4
Jul 9, 2026
0.8.3
Jul 9, 2026
0.8.1
Jul 5, 2026
0.7.13
Jul 5, 2026
0.7.11
Jun 20, 2026
0.7.9
Jun 16, 2026
0.7.8
Jun 15, 2026
0.7.6
Jun 13, 2026
0.7.5
Jun 13, 2026
0.7.4
Jun 13, 2026
0.7.3
Jun 12, 2026
0.7.2
Jun 12, 2026
0.6.56
Jun 12, 2026
0.6.55
Jun 12, 2026
0.6.54
Jun 11, 2026
0.6.52
Jun 11, 2026
0.6.50
Jun 10, 2026
0.6.49
Jun 10, 2026
0.6.48
Jun 10, 2026
0.6.45
Jun 9, 2026
0.6.44
Jun 7, 2026
0.6.43
Jun 7, 2026
0.6.42
Jun 7, 2026
0.6.41
Jun 7, 2026
0.6.40
Jun 7, 2026
0.6.37
Jun 6, 2026
0.6.36
Jun 6, 2026
0.6.35
Jun 6, 2026
0.6.34
Jun 6, 2026
0.6.33
Jun 6, 2026
0.6.32
Jun 6, 2026
0.6.31
Jun 6, 2026
0.6.30
Jun 6, 2026
0.6.29
Jun 6, 2026
0.6.28
Jun 6, 2026
0.6.27
Jun 6, 2026
0.6.26
Jun 6, 2026
0.6.15
Jun 5, 2026
0.6.14
May 17, 2026
0.6.11
May 14, 2026
0.6.10
May 9, 2026
0.6.9
May 9, 2026
0.6.8
May 9, 2026
0.6.7
May 8, 2026
0.6.6
May 7, 2026
0.6.5
May 7, 2026
0.6.4
May 7, 2026
0.6.3
May 6, 2026
0.6.2
May 6, 2026
0.6.1
Apr 25, 2026
0.6.0
Apr 23, 2026
0.5.8
Apr 23, 2026
0.5.7
Apr 23, 2026
0.5.6
Apr 22, 2026
0.5.5
Apr 17, 2026
0.5.4
Apr 17, 2026
0.5.3
Apr 17, 2026
0.5.1
Apr 16, 2026
0.5.0
Apr 16, 2026

Tools 0

No tools indexed yet.

Permissions 4

network medium
Server uses network capabilities via: fetch(), node-fetch
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, open(), os, path, pathlib
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync(), subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 19

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Buffer.from base64 in agigante80-actual-mcp-server-bd7d303/src/tools/budgets_import.ts:91 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
high
Hardcoded Password found in agigante80-actual-mcp-server-bd7d303/.github/SECURITY.md secret_scanner · 65%
info
Required env vars (95) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 313 components sbom_generator · 100%
high
Authorization Bearer Token found in agigante80-actual-mcp-server-bd7d303/docs/SECURITY_AND_PRIVACY.md secret_scanner · 70%
high
Hardcoded Password found in agigante80-actual-mcp-server-bd7d303/docs/SECURITY_AND_PRIVACY.md secret_scanner · 65%
high
Hardcoded Password found in agigante80-actual-mcp-server-bd7d303/examples/mcp-clients/codex-config.toml secret_scanner · 65%
high
Hardcoded Password found in agigante80-actual-mcp-server-bd7d303/docs/guides/MCP_CLIENTS_SETUP.md secret_scanner · 65%
high
Hardcoded Password found in agigante80-actual-mcp-server-bd7d303/docs/guides/DEPLOYMENT.md secret_scanner · 65%
high
Hardcoded Password found in agigante80-actual-mcp-server-bd7d303/docker/description/long.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%