redbark-mcp

<p align="center">
  <img src="logo.png" width="120" height="120" alt="Redbark logo" />
</p>

<h1 align="center">Redbark MCP Server</h1>

<p align="center">
  Connect AI agents to your Australian and NZ bank and global brokerage data, and let them manage your Redbark syncs, destinations, rules and categories over the Model Context Protocol.
</p>

<p align="center">
  <a href="https://redbark.com">Website</a> ·
  <a href="https://docs.redbark.com/api-reference/mcp">Documentation</a> ·
  <a href="https://app.redbark.com">Dashboard</a>
</p>

---

Redbark syncs bank and brokerage accounts to Google Sheets, Airtable, Notion, YNAB, and webhooks. The Redbark MCP server gives MCP-compatible AI agents (Claude, Cline, Cursor, ChatGPT, VS Code, and others) live access to the same financial data, plus scoped management of your Redbark account: syncs, destinations, rules, categories and event destinations. It is a thin layer over the [Redbark API v2](https://docs.redbark.com/api-reference/v2/overview): every API operation is one tool, under the same name as the operation id.

Australian banking data is sourced through the regulated **Consumer Data Right (CDR / open banking)** framework. Your banking credentials are never shared with Redbark or your AI agent, and Redbark never stores your banking data. Every read is proxied live from the source.

## Quickstart

The server is **remote and hosted**. There is nothing to install or run.

```
https://mcp.redbark.com/mcp
```

- **Transport:** Streamable HTTP
- **Auth:** OAuth 2.1 (automatic, your client opens a browser consent flow), or a personal API key as a fallback
- **Requirements:** a Redbark account on a Developer or Professional plan (API access is included in the free trial)

### Cline

Add to `cline_mcp_settings.json` (Cline → MCP Servers → Configure):

```json
{
  "mcpServers": {
    "redbark": {
      "type": "streamableHttp",
      "url": "https://mcp.redbark.com/mcp"
    }
  }
}
```

Cline discovers the OAuth authorization server automatically and opens a browser window to approve access. To use an API key instead (created at [app.redbark.com](https://app.redbark.com) → Settings → API Keys):

```json
{
  "mcpServers": {
    "redbark": {
      "type": "streamableHttp",
      "url": "https://mcp.redbark.com/mcp",
      "headers": {
        "Authorization": "Bearer rbk_live_YOUR_API_KEY"
      }
    }
  }
}
```

### Claude Code

```bash
claude mcp add --transport http redbark https://mcp.redbark.com/mcp
```

### Claude (desktop / web)

Settings → Connectors → **Add custom connector** → paste `https://mcp.redbark.com/mcp`.

### Cursor

```json
{
  "mcpServers": {
    "redbark": {
      "url": "https://mcp.redbark.com/mcp"
    }
  }
}
```

## Tools

Every Redbark API v2 operation is a tool, named after its operation id (81 tools, 62 listed by default), plus five composite tools. Reads fetch banking data live. Writes change Redbark configuration only (syncs, destinations, rules, categories, event destinations), never your bank. The AI only gets the scopes you grant on the consent screen; tools outside those scopes refuse and say which scope to grant.

| Family | Example tools | Scope | Example prompt |
| --- | --- | --- | --- |
| Account | `get_me` | none | "Which plan am I on?" |
| Connections, consents, institutions | `list_connections`, `get_connection`, `list_consents`, `list_institutions`, `revoke_connection` | `mcp:read`, `connections:write` to revoke | "Which of my bank connections expire this month?" |
| Accounts and balances | `list_accounts`, `get_account`, `get_account_balance`, `get_account_details` | `mcp:read` | "What is the balance on my offset account?" |
| Transactions | `list_transactions`, `get_transaction` | `mcp:read` | "List my transactions over $500 since 1 July" |
| Holdings and trades | `list_holdings`, `list_trades` | `mcp:read` + `brokerage:read` | "What are my largest positions?" |
| Syncs and runs | `list_syncs`, `create_sync`, `update_sync`, `run_sync`, `resync_sync`, `list_sync_runs`, `cancel_sync_run` | `mcp:read`, `syncs:write` | "Run the Notion sync now and tell me when it finishes" |
| Destinations | `list_destinations`, `create_destination`, `list_destination_resources`, `rotate_destination_secret` | `mcp:read`, `destinations:write` | "Which tabs does my Budget spreadsheet have?" |
| Categories | `list_categories`, `create_category`, `set_category_sources`, `list_provider_categories` | `mcp:read`, `categories:write` | "Make a Subscriptions category and map streaming merchants to it" |
| Rules | `list_rulesets`, `create_rule`, `preview_ruleset`, `reorder_ruleset_rules`, `attach_sync_ruleset` | `mcp:read`, `rules:write` | "Preview what my cleanup ruleset would do to last month" |
| Events | `list_events`, `get_event`, `redeliver_event`, `list_event_destinations`, `create_event_destination` | `mcp:read`, `events:write` | "Show the last failed sync run event and redeliver it" |
| Link sessions | `create_link_session`, `get_link_session` | `connections:write` | "Give me a link to connect another bank" |
| API keys | `list_api_keys`, `get_api_key` | not available over OAuth | Keys are created in the dashboard. API-key clients with `keys:write` can manage keys |

Ids are the public ids from the API (`acct_...`, `conn_...`, `sync_...`, `dest_...`). Lists are paginated the same way as the API: the AI passes `limit` and follows the `page` token. The full list of tools, with every argument, is the [API reference](https://docs.redbark.com/api-reference/v2/overview).

### Composite tools

Five tools combine several API calls so common questions take one step:

| Tool | What it does |
| --- | --- |
| `account_overview` | Every account with a live balance, grouped by connection, with consent expiry and reauthorisation flags |
| `spending_summary` | Spend and income for a date range, grouped by category, merchant, account or month, with the largest transactions. Raw transactions are never returned |
| `setup_sync` | Checks the destination, resolves its resources (Sheets tabs, YNAB accounts), builds the mappings and creates the sync |
| `diagnose_sync` | Last runs, failure reason, related events, connection and consent state, and a recommended next action |
| `connect_bank` | Finds the institution and creates a link session, returning the hosted URL to hand to the user |

### Default and admin toolsets

By default the server lists the core tools (62 API operations, the composites and `redbark_guide`). Nineteen admin tools (API keys, consents, sync category mappings, category reset, ruleset duplicate/reorder, event destination enable/disable/ping/rotate, destination rotate_secret/enable) are hidden but still callable; add `?toolsets=admin` to the server URL to list them. The list is also filtered to the scopes you granted.

### Prompts and guides

Clients that support MCP prompts get `set_up_sync`, `monthly_spending_review`, `fix_failing_sync` and `connect_bank`. `redbark_guide` returns a topic guide (onboarding, syncs and destinations, rules and categories, events and webhooks, errors and scopes, API conventions) generated from the docs, and the server sends short usage instructions on connect.

Every tool takes a `context` argument: a one-line statement of the goal the user is trying to reach. It is used for product analytics and never contains your banking data.

Example prompts once connected:

> "What did I spend on groceries across all my accounts last month?"
> "What's my total cash balance right now?"
> "Create a sync from my everyday account to the Budget sheet and run it now."
> "Add a rule that tags Uber transactions as Travel."

## Authentication & scopes

**OAuth (recommended).** The server implements the standard MCP authorization flow (OAuth 2.1 with Dynamic Client Registration and PKCE). Clients that support MCP OAuth need only the server URL. Registration, browser consent, and token refresh are automatic. Scopes offered on the consent screen:

| Scope | Grants |
| --- | --- |
| `mcp:read` | Every read tool |
| `brokerage:read` | Holdings and trades (Professional plan) |
| `account:read` | `get_me` |
| `connections:read`, `connections:write` | Connections, consents, institutions; revoke, reauthorize, refresh, link sessions |
| `data:read` | Accounts, balances, transactions, holdings, trades, provider categories |
| `categories:read`, `categories:write` | Your category taxonomy |
| `destinations:read`, `destinations:write` | Destinations and destination links |
| `syncs:read`, `syncs:write` | Syncs, runs, category mappings, ruleset attachment |
| `rules:read`, `rules:write` | Rulesets and rules |
| `events:read`, `events:write` | Events and event destinations |

`keys:write` is never offered over OAuth: an OAuth-connected agent cannot create API keys. Write scopes are optional. Leave one unticked and the matching tools refuse with a message that names the scope.

You can review and revoke any connected agent at any time from **Connected Apps** in your [Redbark settings](https://app.redbark.com).

**API key (fallback).** For clients without OAuth support, create a key at app.redbark.com → Settings → API Keys and send it as `Authorization: Bearer rbk_live_...`. The key's own scopes apply.

## Security

- **No stored banking data.** Redbark proxies data live from providers at request time; customer banking data is never persisted to Redbark's database.
- **Regulated data access.** Australian bank connections run on the CDR (open banking) framework. Credentials go to your bank, never to Redbark or your agent.
- **Scoped access.** The AI can only use the scopes you grant. Reads and each write family are separate. Nothing can touch your bank itself; writes change Redbark syncs, destinations, rules, categories and event destinations only.
- **Revocable.** Revoke a connected app from the dashboard at any time. The server immediately stops accepting its tokens.
- **Traceable.** Every error carries a request id you can quote to support.
- Requests