bank-mcp runs on your own machine — the client starts it, so there is no endpoint to ping. 798 installs a week from pypi. Last commit 27 Oct 2026.
Unofficial read-only MCP server for UK bank and card data via TrueLayer Open Banking
We read the source, 4 d ago · rules 995398eba69f
Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.
result = subprocess.run( # noqa: S603 - fixed argv, no shell
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
result = subprocess.run( # noqa: S603 - fixed argv, no shell
icacls = os.path.join(os.environ.get("SYSTEMROOT", r"C:\Windows"), "System32", "icacls.exe")
settings = dict(os.environ if env is None else env)
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch bank-mcp and you get told the day something new turns up.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add bank-mcp -e 'TRUELAYER_CLIENT_ID=<TRUELAYER_CLIENT_ID>' -e 'TRUELAYER_CLIENT_SECRET=<TRUELAYER_CLIENT_SECRET>' -- uvx bank-mcp
{
"mcpServers": {
"bank-mcp": {
"command": "uvx",
"args": [
"bank-mcp"
],
"env": {
"TRUELAYER_CLIENT_ID": "<TRUELAYER_CLIENT_ID>",
"TRUELAYER_CLIENT_SECRET": "<TRUELAYER_CLIENT_SECRET>"
}
}
}
}
[mcp_servers.bank-mcp]
command = "uvx"
args = ["bank-mcp"]
env = { TRUELAYER_CLIENT_ID = "<TRUELAYER_CLIENT_ID>", TRUELAYER_CLIENT_SECRET = "<TRUELAYER_CLIENT_SECRET>" }
{
"mcpServers": {
"bank-mcp": {
"command": "uvx",
"args": [
"bank-mcp"
],
"env": {
"TRUELAYER_CLIENT_ID": "<TRUELAYER_CLIENT_ID>",
"TRUELAYER_CLIENT_SECRET": "<TRUELAYER_CLIENT_SECRET>"
}
}
}
}
{
"servers": {
"bank-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"bank-mcp"
],
"env": {
"TRUELAYER_CLIENT_ID": "<TRUELAYER_CLIENT_ID>",
"TRUELAYER_CLIENT_SECRET": "<TRUELAYER_CLIENT_SECRET>"
}
}
}
}
Put your own values in place of
<TRUELAYER_CLIENT_ID> (TrueLayer Console client id), <TRUELAYER_CLIENT_SECRET> (TrueLayer Console client secret).
The author’s registry entry marks them as required.
Optional settings from the registry entry, left out of the block above:
TRUELAYER_ENV (live (default) or sandbox).
Unofficial read-only MCP server exposing Yahoo Finance data (via yfinance) over stdio or HTTP.
Unofficial read-only MCP server for VeryChic hotel offers
Unofficial community MCP server for the Spot AI camera and video-intelligence REST API. Read-only.
Unofficial read-only MCP server for Greek supermarket price data from PosoKanei.
Unofficial MCP server for YNAB: read-only by default, every change previewed and undoable.
Unofficial read-only MCP server for the Panasonic AiSEG2 HEMS controller.
Unofficial read-only MCP server exposing several Mercury banking organizations to one AI session.
Official MCP server for OpenWeb Ninja APIs - 40+ real-time web data and SERP APIs as MCP tools
Answers built from our own checks of this server.