actual-mcp-server ghcr.io/agigante80/actual-mcp-server:latest https://github.com/agigante80/actual-mcp-server/pkgs/container/actual-mcp-server bridge sh false https://github.com/agigante80/actual-mcp-server/issues https://github.com/agigante80/actual-mcp-server Model Context Protocol (MCP) server that connects AI assistants (LibreChat, LobeChat, Claude Desktop, Cursor) to your self-hosted Actual Budget instance, exposing 71 tools for conversational financial management over HTTP. Fill in the "Actual server URL", "Actual server password", and "Actual server Sync ID" below, and SET A STRONG "MCP auth token": a blank token disables all HTTP authentication and exposes your financial data unauthenticated on the LAN. See the project README. Productivity: Tools:Utilities http://[IP]:[PORT:3600]/health https://raw.githubusercontent.com/agigante80/actual-mcp-server/main/unraid/actual-mcp-server.xml https://raw.githubusercontent.com/agigante80/actual-mcp-server/main/unraid/actual-mcp-icon-512.png MCP server with 71 tools for AI-driven financial management with Actual Budget, over the HTTP transport (for LibreChat, LobeChat, and other remote MCP clients). SETUP: fill in "Actual server URL", "Actual server password" and "Actual server Sync ID" (the Sync ID is in Actual Budget: open the budget, Settings, Show advanced settings, Sync ID). SECURITY, READ THIS: you MUST set a strong "MCP auth token" (MCP_SSE_AUTHORIZATION). A BLANK token disables ALL HTTP authentication, so anyone who can reach the port can read and modify your financial data unauthenticated on the LAN. Generate one with `openssl rand -hex 32`. The /health and /metrics endpoints are unauthenticated by design. The token travels in PLAINTEXT over HTTP on the default 0.0.0.0 bind, so for any non-loopback exposure put a reverse proxy (or native TLS via MCP_ENABLE_HTTPS with cert/key) in front. Keep the bind host at 0.0.0.0 (do NOT set it to your server's LAN IP) or the endpoint is unreachable in bridge mode. OWNERSHIP: on Unraid keep PUID=99 and PGID=100 so the container can write the appdata Data and Logs directories. 3600 /mnt/user/appdata/actual-mcp-server/data /mnt/user/appdata/actual-mcp-server/logs 99 100 Europe/Madrid production