Redbark MCP Server

---

Redbark syncs bank and brokerage accounts to Google Sheets, Airtable, Notion, YNAB, and webhooks. The Redbark MCP server gives MCP-compatible AI agents (Claude, Cline, Cursor, ChatGPT, VS Code, and others) live access to the same financial data, plus scoped management of your Redbark account: syncs, destinations, rules, categories and event destinations. It is a thin layer over the Redbark API v2: every API operation is one tool, under the same name as the operation id.

Australian banking data is sourced through the regulated Consumer Data Right (CDR / open banking) framework. Your banking credentials are never shared with Redbark or your AI agent, and Redbark never stores your banking data. Every read is proxied live from the source.

Quickstart

The server is remote and hosted. There is nothing to install or run.

https://mcp.redbark.com/mcp

• Transport: Streamable HTTP
• Auth: OAuth 2.1 (automatic, your client opens a browser consent flow), or a personal API key as a fallback
• Requirements: a Redbark account on a Developer or Professional plan (API access is included in the free trial)

Cline

Add to cline_mcp_settings.json (Cline → MCP Servers → Configure):

{
  "mcpServers": {
    "redbark": {
      "type": "streamableHttp",
      "url": "https://mcp.redbark.com/mcp"
    }
  }
}

Cline discovers the OAuth authorization server automatically and opens a browser window to approve access. To use an API key instead (created at app.redbark.com → Settings → API Keys):

{
  "mcpServers": {
    "redbark": {
      "type": "streamableHttp",
      "url": "https://mcp.redbark.com/mcp",
      "headers": {
        "Authorization": "Bearer rbk_live_YOUR_API_KEY"
      }
    }
  }
}

Claude Code

claude mcp add --transport http redbark https://mcp.redbark.com/mcp

Claude (desktop / web)

Settings → Connectors → Add custom connector → paste https://mcp.redbark.com/mcp.

Cursor

{
  "mcpServers": {
    "redbark": {
      "url": "https://mcp.redbark.com/mcp"
    }
  }
}

Tools

Every Redbark API v2 operation is a tool, named after its operation id (81 tools, 62 listed by default), plus five composite tools. Reads fetch banking data live. Writes change Redbark configuration only (syncs, destinations, rules, categories, event destinations), never your bank. The AI only gets the scopes you grant on the consent screen; tools outside those scopes refuse and say which scope to grant.

Family	Example tools	Scope	Example prompt
Account	get_me	none	"Which plan am I on?"
Connections, consents, institutions	list_connections, get_connection, list_consents, list_institutions, revoke_connection	mcp:read, connections:write to revoke	"Which of my bank connections expire this month?"
Accounts and balances	list_accounts, get_account, get_account_balance, get_account_details	mcp:read	"What is the balance on my offset account?"
Transactions	list_transactions, get_transaction	mcp:read	"List my transactions over $500 since 1 July"
Holdings and trades	list_holdings, list_trades	mcp:read + brokerage:read	"What are my largest positions?"
Syncs and runs	list_syncs, create_sync, update_sync, run_sync, resync_sync, list_sync_runs, cancel_sync_run	mcp:read, syncs:write	"Run the Notion sync now and tell me when it finishes"
Destinations	list_destinations, create_destination, list_destination_resources, rotate_destination_secret	mcp:read, destinations:write	"Which tabs does my Budget spreadsheet have?"
Categories	list_categories, create_category, set_category_sources, list_provider_categories	mcp:read, categories:write	"Make a Subscriptions category and map streaming merchants to it"
Rules	list_rulesets, create_rule, preview_ruleset, reorder_ruleset_rules, attach_sync_ruleset	mcp:read, rules:write	"Preview what my cleanup ruleset would do to last month"
Events	list_events, get_event, redeliver_event, list_event_destinations, create_event_destination	mcp:read, events:write	"Show the last failed sync run event and redeliver it"
Link sessions	create_link_session, get_link_session	connections:write	"Give me a link to connect another bank"
API keys	list_api_keys, get_api_key	not available over OAuth	Keys are created in the dashboard. API-key clients with keys:write can manage keys

Ids are the public ids from the API (acct_..., conn_..., sync_..., dest_...). Lists are paginated the same way as the API: the AI passes limit and follows the page token. The full list of tools, with every argument, is the API reference.

Composite tools

Five tools combine several API calls so common questions take one step:

Tool	What it does
account_overview	Every account with a live balance, grouped by connection, with consent expiry and reauthorisation flags
spending_summary	Spend and income for a date range, grouped by category, merchant, account or month, with the largest transactions. Raw transactions are never returned
setup_sync	Checks the destination, resolves its resources (Sheets tabs, YNAB accounts), builds the mappings and creates the sync
diagnose_sync	Last runs, failure reason, related events, connection and consent state, and a recommended next action
connect_bank	Finds the institution and creates a link session, returning the hosted URL to hand to the user

Default and admin toolsets

By default the server lists the core tools (62 API operations, the composites and redbark_guide). Nineteen admin tools (API keys, consents, sync category mappings, category reset, ruleset duplicate/reorder, event destination enable/disable/ping/rotate, destination rotate_secret/enable) are hidden but still callable; add ?toolsets=admin to the server URL to list them. The list is also filtered to the scopes you granted.

Prompts and guides

Clients that support MCP prompts get set_up_sync, monthly_spending_review, fix_failing_sync and connect_bank. redbark_guide returns a topic guide (onboarding, syncs and destinations, rules and categories, events and webhooks, errors and scopes, API conventions) generated from the docs, and the server sends short usage instructions on connect.

Every tool takes a context argument: a one-line statement of the goal the user is trying to reach. It is used for product analytics and never contains your banking data.

Example prompts once connected:

"What did I spend on groceries across all my accounts last month?" "What's my total cash balance right now?" "Create a sync from my everyday account to the Budget sheet and run it now." "Add a rule that tags Uber transactions as Travel."

Authentication & scopes

OAuth (recommended). The server implements the standard MCP authorization flow (OAuth 2.1 with Dynamic Client Registration and PKCE). Clients that support MCP OAuth need only the server URL. Registration, browser consent, and token refresh are automatic. Scopes offered on the consent screen:

Scope	Grants
mcp:read	Every read tool
brokerage:read	Holdings and trades (Professional plan)
account:read	get_me
connections:read, connections:write	Connections, consents, institutions; revoke, reauthorize, refresh, link sessions
data:read	Accounts, balances, transactions, holdings, trades, provider categories
categories:read, categories:write	Your category taxonomy
destinations:read, destinations:write	Destinations and destination links
syncs:read, syncs:write	Syncs, runs, category mappings, ruleset attachment
rules:read, rules:write	Rulesets and rules
events:read, events:write	Events and event destinations

keys:write is never offered over OAuth: an OAuth-connected agent cannot create API keys. Write scopes are optional. Leave one unticked and the matching tools refuse with a message that names the scope.

You can review and revoke any connected agent at any time from Connected Apps in your Redbark settings.

API key (fallback). For clients without OAuth support, create a key at app.redbark.com → Settings → API Keys and send it as Authorization: Bearer rbk_live_.... The key's own scopes apply.

Security

• No stored banking data. Redbark proxies data live from providers at request time; customer banking data is never persisted to Redbark's database.
• Regulated data access. Australian bank connections run on the CDR (open banking) framework. Credentials go to your bank, never to Redbark or your agent.
• Scoped access. The AI can only use the scopes you grant. Reads and each write family are separate. Nothing can touch your bank itself; writes change Redbark syncs, destinations, rules, categories and event destinations only.
• Revocable. Revoke a connected app from the dashboard at any time. The server immediately stops accepting its tokens.
• Traceable. Every error carries a request id you can quote to support.
• Requests are rate-limited pre- and post-authentication, and every request is auditable.

Pricing

MCP access requires a Developer or Professional plan and is included in the free trial. Brokerage tools (list_holdings, list_trades) require Professional.

Support

• Docs: docs.redbark.com/api-reference/mcp
• Email: support@redbark.com

License

This repository (documentation and assets) is MIT licensed. The hosted service is governed by the Redbark terms.