comdirect MCP Server

What the code does

We read the source, 1 d ago · rules ccca72095570

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

        result = subprocess.run(

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

        result = subprocess.run(

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add comdirect-mcp -- uvx comdirect-mcp

{
  "mcpServers": {
    "comdirect-mcp": {
      "args": [
        "comdirect-mcp"
      ],
      "command": "uvx"
    }
  }
}

[mcp_servers.comdirect-mcp]
command = "uvx"
args = ["comdirect-mcp"]

{
  "mcpServers": {
    "comdirect-mcp": {
      "args": [
        "comdirect-mcp"
      ],
      "command": "uvx"
    }
  }
}

{
  "mcpServers": {
    "comdirect-mcp": {
      "args": [
        "comdirect-mcp"
      ],
      "command": "uvx"
    }
  }
}

This one needs environment variables set before it will start: COMDIRECT_CLIENT_ID (comdirect API client id (or stored in the OS keychain via `comdirect-mcp configure`)), COMDIRECT_CLIENT_SECRET (comdirect API client secret (or stored in the OS keychain via `comdirect-mcp configure`)), COMDIRECT_USERNAME (comdirect Zugangsnummer (or stored in the OS keychain via `comdirect-mcp configure`)), COMDIRECT_PASSWORD (comdirect PIN (or stored in the OS keychain via `comdirect-mcp configure`)), COMDIRECT_MCP_PUSH_TAN_WAIT (Seconds to wait for the push TAN approval if the client cannot show a confirmation dialog), COMDIRECT_MCP_UNMASK_IBANS (Set to true to return counterparty IBANs unmasked), COMDIRECT_MCP_MASK_NAMES (Set to true to replace counterparty names with stable pseudonyms), COMDIRECT_ENV_FILE (Path to a dotenv file with the credentials (opt-in; prefer the OS keychain)), COMDIRECT_MCP_CACHE_TTL (Seconds the server keeps bank results within a session; 0 disables the cache), COMDIRECT_MCP_MAX_DOCUMENT_BYTES (Size limit for postbox documents in bytes), COMDIRECT_MCP_CATEGORIES (Path of the category rules file (default ~/.config/comdirect-mcp/categories.toml)), COMDIRECT_MCP_SKIP_ELICITATION (Set to 1 to skip the login confirmation dialog and wait for the push TAN approval instead), COMDIRECT_MCP_LOG_FILE (File the server appends its log to (default stderr)), COMDIRECT_MCP_LOG_LEVEL (Log level of the server). The author declared them in the registry entry; get the values from the project itself.