github re-analysis due

KazeFreeze/actual-budget-mcp

github

MCP server for Actual Budget — direct @actual-app/api SDK, 52 tools, Streamable HTTP/SSE/stdio transports

maintainer
KazeFreeze
license
MIT
first seen
2026-06-07
last seen
2026-06-15
releases · 30d
3
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 1 tools
transport stdio · streamable-http · http · sse counts 1 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • query

    Execute raw ActualQL queries with full filter, aggregate, and join support

code evidence vv3.2.1 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 2

  • fs KazeFreeze-actual-budget-mcp-23ae03c/src/client/version-check.ts :1 import { readFileSync } from 'node:fs';
  • fs KazeFreeze-actual-budget-mcp-23ae03c/src/tools/utility.ts :1 import { readFileSync } from 'node:fs';

secrets 1

  • secrets KazeFreeze-actual-budget-mcp-23ae03c/src/config.ts :69 actualServerPassword: process.env.ACTUAL_SERVER_PASSWORD,

declared dependencies 31

  • @actual-app/api@^26.6.0
  • @modelcontextprotocol/sdk@^1.27.0
  • date-fns@^4.4.0
  • dotenv@^17.3.0
  • express@^5.2.0
  • express-rate-limit@^8.5.2
  • helmet@^8.2.0
  • p-retry@^8.0.0
  • pino@^10.3.1
  • zod@^4.4.3
  • @commitlint/cli@^21.0.2
  • @commitlint/config-conventional@^20.5.0
  • @eslint/js@^10.0.1
  • @types/express@^5.0.0
  • @types/node@^22.0.0
  • @types/supertest@^7.2.0
  • @typescript-eslint/eslint-plugin@^8.60.1
  • @typescript-eslint/parser@^8.60.1
  • eslint@^10.4.1
  • eslint-config-prettier@^10.1.8
  • eslint-plugin-n@^18.0.1
  • eslint-plugin-security@^4.0.0
  • husky@^9.1.7
  • lint-staged@^16.4.0
  • msw@^2.14.6
  • prettier@^3.8.3
  • supertest@^7.2.2
  • tsx@^4.22.4
  • typescript@^5.9.0
  • typescript-eslint@^8.60.1
  • vitest@^4.1.8