Zenmoney Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Zenmoney Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Read-only MCP server for ZenMoney. It syncs ZenMoney data into process memory and exposes it through MCP tools and resources. It does not persist financial data or API responses to disk.
The read-only mode is a good fit for agentic workflows with tools such as Hermes and OpenClaw. Agents can analyze transactions in the way the user asks, compare spending patterns, prepare recurring personal-finance reports, and surface anomalies without being able to create, update, or delete ZenMoney data.
This is an unofficial project and is not affiliated with, endorsed by, or sponsored by ZenMoney. Users are responsible for complying with ZenMoney terms and for protecting their own access tokens.
Use the published CLI through npx and pass runtime configuration through your MCP client:
{
"mcpServers": {
"zenmoney": {
"command": "npx",
"args": ["-y", "@nonnname/zenmoney-mcp"],
"env": {
"ZENMONEY_ACCESS_TOKEN": "paste-token-here",
"ZENMONEY_SYNC_ON_START": "true",
"ZENMONEY_API_BASE_URL": "https://api.zenmoney.ru/v8",
"ZENMONEY_DEFAULT_RESULT_LIMIT": "100",
"ZENMONEY_MAX_RESULT_LIMIT": "500",
"ZENMONEY_REQUEST_TIMEOUT_MS": "30000",
"ZENMONEY_ENABLE_WRITE_TOOLS": "false"
}
}
}
}The same example is available in mcp-config.example.json.
ZENMONEY_ACCESS_TOKEN=
ZENMONEY_SYNC_ON_START=true
ZENMONEY_API_BASE_URL=https://api.zenmoney.ru/v8
ZENMONEY_DEFAULT_RESULT_LIMIT=100
ZENMONEY_MAX_RESULT_LIMIT=500
ZENMONEY_REQUEST_TIMEOUT_MS=30000
ZENMONEY_ENABLE_WRITE_TOOLS=falseZENMONEY_DEFAULT_RESULT_LIMIT and ZENMONEY_MAX_RESULT_LIMIT limit MCP responses from the in-memory snapshot. They do not limit ZenMoney API synchronization.
npm install
cp .env.example .env
npm run devFor a production-like local run from source:
npm run build
npm startsync_runsync_statusaccounts_listtransactions_listtransactions_gettransactions_suggesttags_listmerchants_listbudgets_listbudgets_get_statusbudgets_get_status calculates read-only category budget status for a month. It reports the configured outcome budget, actual spending, remaining amount, overspend state, and matched category ids. Child categories are included by default with includeChildren: true.
The server is read-only by default. Write tools are not registered unless you explicitly enable them at process startup.
Enable write tools with a launch argument:
{
"mcpServers": {
"zenmoney": {
"command": "npx",
"args": ["-y", "@nonnname/zenmoney-mcp", "--enable-write-tools"],
"env": {
"ZENMONEY_ACCESS_TOKEN": "paste-token-here"
}
}
}
}Or enable write tools with an environment variable:
{
"env": {
"ZENMONEY_ACCESS_TOKEN": "paste-token-here",
"ZENMONEY_ENABLE_WRITE_TOOLS": "true"
}
}Write tools can create, update, and delete ZenMoney user entities except budgets. Update and delete tools require expectedChanged, which is the changed value returned by the read tools. If the entity changes remotely before the write, the server returns a conflict and does not send the mutation.
Budget writes are not supported.
Write tools registered only after opt-in:
accounts_createaccounts_updateaccounts_deletetransactions_createtransactions_create_expensetransactions_create_incometransactions_create_transfertransactions_updatetransactions_deletetags_createtags_updatetags_deletemerchants_createmerchants_updatemerchants_deletereminders_createreminders_updatereminders_deletereminder_markers_createreminder_markers_updatereminder_markers_deletezenmoney://statuszenmoney://accountszenmoney://transactionszenmoney://transactions/{id}zenmoney://tagszenmoney://merchantszenmoney://budgetszenmoney://schema/accountzenmoney://schema/transactionzenmoney://schema/tagzenmoney://schema/merchantzenmoney://schema/budgetContributor setup, verification, and maintainer release instructions live in CONTRIBUTING.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.