mighty-mono-code — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited mighty-mono-code (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="https://img.shields.io/badge/tools-4-brightgreen" alt="4 tools" /> <img src="https://img.shields.io/badge/tests-60%20passing-brightgreen" alt="60 tests passing" /> <img src="https://img.shields.io/badge/python-3.10%2B-blue" alt="Python 3.10+" /> <img src="https://img.shields.io/badge/license-MIT-green" alt="MIT License" /> <img src="https://img.shields.io/badge/MCP-FastMCP-purple" alt="FastMCP" /> <img src="https://img.shields.io/badge/security-SSRF%20protected-orange" alt="SSRF protected" /> </p>
<h1 align="center">Mighty Mono MCP</h1>
<p align="center"> The most complete Monobank MCP server for Claude.<br/> Найповніший Monobank MCP сервер для Claude. </p>
<p align="center"> <strong>Claude Desktop</strong> · <strong>Claude Code</strong> · <strong>Claude Cowork</strong> · <strong>claude.ai</strong> · <strong>Claude Mobile</strong> </p>
| Product | Platform | Install |
|---|---|---|
| mighty-mono-mcp | Claude Desktop | MCP server (stdio) — add to claude_desktop_config.json |
| mighty-mono-code | Claude Code | Plugin — install from marketplace or --plugin-dir |
| mighty-mono-work | Claude Cowork | Plugin — install from marketplace |
| Standalone skills | Any Claude product | Copy SKILL.md files to .claude/skills/ |
All products share the same 4 tools and security-hardened server.
Most Monobank MCP servers give you 1-2 tools with raw JSON output. Mighty Mono gives you 4 hardened tools with Markdown-formatted responses, income/expense totals, jar progress tracking, and SSRF-protected webhook setup. It works everywhere Claude does — Desktop, browser, and mobile.
Більшість Monobank MCP серверів мають 1-2 інструменти з сирим JSON. Mighty Mono дає 4 захищені інструменти з Markdown-форматуванням, підрахунком доходів/витрат, прогресом банок та SSRF-захищеним вебхуком. Працює скрізь, де працює Claude — Desktop, браузер і мобільний.
| Tool | Auth | Description / Опис |
|---|---|---|
mono_get_currency_rates | No | Exchange rates with optional currency filter. Cached 5 min. / Курси валют з фільтром. Кеш 5 хв. |
mono_get_client_info | Yes | Accounts, balances, jars with progress %, FOP accounts / Рахунки, баланси, банки з прогресом, ФОП |
mono_get_statements | Yes | Transactions with income/expense/net totals, cashback, MCC codes / Транзакції з підсумками, кешбек, MCC |
mono_set_webhook | Yes | Real-time transaction notifications via webhook / Сповіщення в реальному часі через вебхук |
Go to https://api.monobank.ua/ → log in with Monobank app → copy your personal API token.
Перейдіть на https://api.monobank.ua/ → увійдіть через додаток Monobank → скопіюйте токен.
<details> <summary><strong>Option A: Claude Code (plugin)</strong></summary>
Install mighty-mono-code from the Claude Code marketplace, or test locally:
git clone https://github.com/a-i-mighty/mighty-mono-mcp.git
claude code --plugin-dir mighty-mono-mcp/mighty-mono-codeEnter your Monobank token when prompted. Dependencies install automatically.
</details>
<details> <summary><strong>Option B: Claude Cowork (plugin)</strong></summary>
Install mighty-mono-work from the Claude Cowork marketplace. Same setup as Claude Code — enter your token, and you're ready.
</details>
<details> <summary><strong>Option C: Claude Desktop (local, stdio)</strong></summary>
git clone https://github.com/a-i-mighty/mighty-mono-mcp.git
cd mighty-mono-mcp
pip install -r mighty-mono-mcp/requirements.txtEdit your Claude Desktop config:
Windows: %APPDATA%\Claude\claude_desktop_config.json macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"monobank": {
"command": "python",
"args": ["C:\\path\\to\\mighty-mono-mcp\\mighty-mono-mcp\\server.py"],
"env": {
"MONOBANK_TOKEN": "your_token_here"
}
}
}
}Restart Claude Desktop. Done.
</details>
<details> <summary><strong>Option D: claude.ai + Mobile (remote connector)</strong></summary>
This method works on Claude Desktop, claude.ai in browser, AND the Claude mobile app.
Step 1. Install cloudflared (one-time):
# Windows
winget install cloudflare.cloudflared
# macOS
brew install cloudflare/cloudflare/cloudflaredStep 2. Start the server:
set MONOBANK_TOKEN=your_token_here # Windows
export MONOBANK_TOKEN=your_token_here # macOS/Linux
python remote/server.pyStep 3. Open a tunnel (in a second terminal):
cloudflared tunnel --url http://localhost:8000Step 4. Add to Claude:
Monobankhttps://your-tunnel-url.trycloudflare.com/mcpWorks instantly on browser and mobile.
</details>
<details> <summary><strong>Option E: Standalone skills (no server)</strong></summary>
Copy individual skill files from customize/skills/ to your .claude/skills/ directory:
# Copy all 4 skills
cp -r customize/skills/mono-* ~/.claude/skills/
# Or just the ones you need
cp -r customize/skills/mono-currency-rates ~/.claude/skills/These skills teach Claude how to use the Monobank API directly via curl — no MCP server required.
</details>
Ask Claude things like:
| You say / Ви кажете | Claude does / Claude робить |
|---|---|
| "What's the USD/UAH rate?" | Pulls rates, shows Markdown table |
| "Show my balances" | Lists all accounts + jars with progress bars |
| "How much did I spend last week?" | Fetches transactions, calculates income/expenses/net |
| "What's my biggest expense this month?" | Pulls statements, analyzes by amount |
| "Set webhook at https://my-server.com/hook" | Configures real-time notifications |
This server was security-audited before release:
extra="forbid")api.monobank.ua, never stored or loggedreadOnlyHint, destructiveHint, idempotentHint for safe AI behavior60 tests covering helpers, validation, security, and all 4 tools:
pip install pytest pytest-asyncio
pytest tests/ -vtests/test_server.py::TestWebhookInputValidation::test_localhost_blocked PASSED
tests/test_server.py::TestWebhookInputValidation::test_private_ip_blocked PASSED
tests/test_server.py::TestStatementsInputValidation::test_path_traversal_blocked PASSED
tests/test_server.py::TestHandleApiError::test_generic_error_no_leak PASSED
...
============================== 60 passed in 0.50s ==============================| Feature | Mighty Mono | Server A | Server B | Server C |
|---|---|---|---|---|
| Tools | 4 | 3 | 2 | 1 |
| Webhook support | Yes | No | No | No |
| Remote connector (claude.ai/mobile) | Yes | No | No | No |
| Markdown output | Yes | JSON | JSON | Partial |
| Income/expense totals | Yes | No | No | No |
| Jar progress % | Yes | No | No | No |
| FOP/business accounts | Yes | No | No | No |
| Currency filter | Yes | No | N/A | N/A |
| SSRF protection | Yes | No | No | No |
| Path traversal protection | Yes | No | No | No |
| MCP annotations | Yes | No | No | No |
| Tests | 60 | 0 | 0 | 0 |
| Security audit | Yes | No | No | No |
| Endpoint | Limit / Ліміт |
|---|---|
| Currency rates | No limit (cached 5 min server-side) |
| Client info | 1 request per 60 seconds |
| Statements | 1 request per 60 seconds, max 31-day window |
| Webhook setup | No documented limit |
monobank-mcp/
├── mighty-mono-mcp/ # Claude Desktop (stdio server)
│ ├── server.py # MCP server (4 tools, FastMCP)
│ ├── manifest.json # Claude Desktop manifest
│ └── requirements.txt
├── mighty-mono-code/ # Claude Code plugin
│ ├── .claude-plugin/ # Plugin manifest
│ ├── skills/ # 4 specialized skills
│ ├── server/ # Bundled server
│ └── hooks/ # Auto-dependency installer
├── mighty-mono-work/ # Claude Cowork plugin
│ └── (same structure as mighty-mono-code)
├── customize/skills/ # Standalone skills (manual install)
├── remote/ # Remote HTTP server (claude.ai/mobile)
├── tests/ # 60 tests
├── demo.html # Interactive showcase
└── start.bat # Windows quick-start (remote)MIT — use it, fork it, improve it.
[AI Mighty](https://github.com/a-i-mighty) — building AI-powered tools that just work.
<p align="center"> <sub>If this helped you, star the repo — it helps others find it too.</sub><br/> <sub>Якщо це було корисно — поставте зірку, це допомагає іншим знайти проєкт.</sub> </p>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.