rocketmoney-mcp

A self-hosted Model Context Protocol server for Rocket Money. It lets an MCP client (Claude Desktop, claude.ai, etc.) browse your accounts, transactions, spending, budgets, net worth, and subscriptions so you can talk to an assistant about your finances.

Every tool is read-only except the amazon_sync_* writers listed below, which set a transaction's note and category. Start the server with ROCKETMONEY_READ_ONLY=1 and those tools are never registered and the background sync never starts.

Security model, in one paragraph

Your Rocket Money session cookie is a live login to your finances. This server holds it on disk and sends it only to Rocket Money's API, so run the server yourself, on a machine you control, and put its /auth and /mcp endpoints behind authentication. There is no hosted instance: nothing in this repo points at a server the author operates, and the Chrome extension refuses to send the cookie anywhere until you enter your own server's URL.

Tools

Tool	What it returns
session_status	Whether the Rocket Money session is authenticated
list_accounts	Every linked institution + account with current balance
get_account	One account's detail: balances, credit limit, liability/APRs, balance history
net_worth	Net worth split into cash / savings / investments / debts, with trend
spending_summary	This month vs last month spend + earnings, by-category breakdown
budgets	Earnings and per-category spend across the last four months
subscriptions	Active recurring charges with next-bill estimates
upcoming_bills	Upcoming charges in the next N days
search_transactions	Transactions by merchant text and/or date
category_transactions	This month's transactions within one category
amazon_sync_preview	Dry run of the Amazon enrichment: what would be written
amazon_sync_status	Scheduler state and whether the server is in read-only mode

Write tools (absent under ROCKETMONEY_READ_ONLY=1):

Tool	What it changes
amazon_sync_apply	Sets note + category on recent Amazon transactions from order emails
amazon_sync_backfill	Same, over every Amazon transaction since a date
amazon_sync_enable / amazon_sync_disable	Turns the background sync on or off

All amounts are returned in USD.

How auth works

Rocket Money has no third-party OAuth, so this server reuses your own web session. You grab the tb.auth0.sid cookie from a logged-in app.rocketmoney.com browser tab and paste it into the server's /auth page (or let the Chrome extension push it to your server automatically). The server keeps a rotating cookie jar (Rocket Money re-issues the cookie on every response, ~3h48m rolling TTL) persisted to disk, and runs a keepalive loop. There is no offline refresh token, so when the session eventually expires you re-paste a fresh cookie.

The cookie lives only on the machine running this server and is sent only to Rocket Money's own API.

Endpoints

Path	Purpose
POST /mcp	MCP streamable-HTTP transport (stateless)
GET /auth	Paste-a-cookie session page
POST /auth/submit	Session intake
POST /auth/ingest	Session intake for the Chrome extension
GET /healthz	Health check

Running locally

npm install
npm run build
ROCKETMONEY_STATE_DIR=./.state PORT=8080 node dist/index.js
# open http://localhost:8080/auth and paste your cookie

Environment

Var	Default	Purpose
PORT	8080	HTTP port
ROCKETMONEY_STATE_DIR	/data/rocketmoney	Where the rotating session is persisted
ROCKETMONEY_READ_ONLY	unset	1 to omit the write tools and disable the background sync
ROCKETMONEY_KEEPALIVE_MS	7200000	Keepalive interval (2h)
ROCKETMONEY_WEB_CLIENT_VERSION	captured default	x-truebill-web-client-version header

Deployment

Designed to run behind an authenticating gateway (e.g. a Cloudflare Access / OAuth front door) so the /mcp and /auth endpoints are never exposed unauthenticated — the server itself holds a live financial session and must not be publicly reachable.

Notes

• If a tool returns PersistedQueryNotFound, Rocket Money rotated a GraphQL query hash; re-capture it from a fresh HAR and update PERSISTED in src/rm/client.ts.
• Not affiliated with or endorsed by Rocket Money / Rocket Companies.

License

MIT