Pocketsmith Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Pocketsmith Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP (Model Context Protocol) server for the PocketSmith personal finance API. Enables Claude Desktop, Claude Code, and other MCP clients to manage accounts, transactions, budgets, categories, and financial analysis.
npm install npm run build| Variable | Required | Default | Description |
|---|---|---|---|
POCKETSMITH_API_TOKEN | Yes | — | API token from your PocketSmith account |
POCKETSMITH_USER_ID | No | — | User ID (auto-detected from token if omitted) |
POCKETSMITH_API_BASE_URL | No | https://api.pocketsmith.com/v2 | Custom API endpoint |
Create a .env file or set these in your shell environment.
To generate an API token: PocketSmith Settings > Security > Manage Developer Keys.
Add to your claude_desktop_config.json:
{
"mcpServers": {
"pocketsmith": {
"command": "node",
"args": ["/path/to/pocketsmith-mcp/build/index.js"],
"env": {
"POCKETSMITH_API_TOKEN": "your-api-token"
}
}
}
}claude mcp add pocketsmith -- node /path/to/pocketsmith-mcp/build/index.jsget_me, get_user, update_user
list_institutions, create_institution, get_institution, update_institution, delete_institution
list_accounts, create_account, get_account, update_account, delete_account, reorder_accounts, list_institution_accounts
list_transaction_accounts, get_transaction_account, update_transaction_account
list_transactions, list_account_transactions, list_category_transactions, list_transaction_account_transactions, create_transaction, get_transaction, update_transaction, delete_transaction
list_categories, create_category, get_category, update_category, delete_category
list_category_rules, create_category_rule
list_budget, get_budget_summary, get_trend_analysis, delete_forecast_cache
list_events, list_scenario_events, create_event, get_event, update_event, delete_event
list_attachments, list_transaction_attachments, create_attachment, assign_attachment, unassign_attachment, get_attachment, update_attachment, delete_attachment
list_currencies, get_currency, list_time_zones, list_labels, list_saved_searches
npm run dev — Watch mode with TypeScript compilationnpm run build — Build the projectnpm start — Start the built serverMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.