rocketmoney-mcp

A read-only Model Context Protocol server for Rocket Money. It lets an MCP client (Claude Desktop, claude.ai, etc.) browse your accounts, transactions, spending, budgets, net worth, and subscriptions so you can talk to an assistant about your finances.

It performs no write operations — every tool is annotated readOnlyHint and the server never mutates anything in your Rocket Money account.

Tools

Tool	What it returns
session_status	Whether the Rocket Money session is authenticated
list_accounts	Every linked institution + account with current balance
get_account	One account's detail: balances, credit limit, liability/APRs, balance history
net_worth	Net worth split into cash / savings / investments / debts, with trend
spending_summary	This month vs last month spend + earnings, by-category breakdown
budgets	Earnings and per-category spend across the last four months
subscriptions	Active recurring charges with next-bill estimates
upcoming_bills	Upcoming charges in the next N days
search_transactions	Transactions by merchant text and/or date
category_transactions	This month's transactions within one category

All amounts are returned in USD.

How auth works

Rocket Money has no third-party OAuth, so this server reuses your own web session. You grab the tb.auth0.sid cookie from a logged-in app.rocketmoney.com browser tab and paste it into the server's /auth page. The server keeps a rotating cookie jar (Rocket Money re-issues the cookie on every response, ~3h48m rolling TTL) persisted to disk, and runs a keepalive loop. There is no offline refresh token, so when the session eventually expires you re-paste a fresh cookie.

The cookie lives only on the machine running this server and is sent only to Rocket Money's own API.

Endpoints

Path	Purpose
POST /mcp	MCP streamable-HTTP transport (stateless)
GET /auth	Paste-a-cookie session page
POST /auth/submit	Session intake
GET /healthz	Health check

Running locally

npm install
npm run build
ROCKETMONEY_STATE_DIR=./.state PORT=8080 node dist/index.js
# open http://localhost:8080/auth and paste your cookie

Environment

Var	Default	Purpose
PORT	8080	HTTP port
ROCKETMONEY_STATE_DIR	/data/rocketmoney	Where the rotating session is persisted
ROCKETMONEY_KEEPALIVE_MS	7200000	Keepalive interval (2h)
ROCKETMONEY_WEB_CLIENT_VERSION	captured default	x-truebill-web-client-version header

Deployment

Designed to run behind an authenticating gateway (e.g. a Cloudflare Access / OAuth front door) so the /mcp and /auth endpoints are never exposed unauthenticated — the server itself holds a live financial session and must not be publicly reachable.

Notes

• If a tool returns PersistedQueryNotFound, Rocket Money rotated a GraphQL query hash; re-capture it from a fresh HAR and update PERSISTED in src/rm/client.ts.
• Not affiliated with or endorsed by Rocket Money / Rocket Companies.

License

MIT