A

actual-budget-mcp

henfrydls/actual-budget · v0.12.0 · Tools & Integrations

by henfrydlsScan grade: Acceptable

MCP server: ask your Actual Budget where the money went, and record transactions, transfers and budget moves from any MCP client, with duplicate checks before anything is written

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is actual-budget-mcp a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Antigravity CLI
  • MCP
  • 1 MCP server

Before you install

Sign-in
Not declared
Declared access
Not declared
License
Not declared

Check before relying on it

  • The publisher has not verified ownership on HOL.
  • No license declared in the manifest.

What is actual-budget-mcp?

actual-budget-mcp is a published tools & integrations plugin for AI coding agents that works with Antigravity CLI and MCP, developed by henfrydls and distributed through the HOL AI plugin registry. MCP server: ask your Actual Budget where the money went, and record transactions, transfers and budget moves from any MCP client, with duplicate checks before anything is written.

Canonical slug
henfrydls/actual-budget
Version
v0.12.0 · updated Nov 5, 2026

Registry snapshot

Support the project
GitHub Sponsors
Owner verification
Not verified
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes

Trust and security

Trust & reputation

74

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
85/100
MCP server setup
100/100
Plugin Security
78/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/henfrydls/actual-budget-mcp
Source commit
c80038f04a50…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Needs review
Security result
78
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
C · Acceptable
Version
3.24.2
codex:hol-plugin-scanner-mlRUP7 / cisco-skill-scanner: skippedcodex:hol-plugin-scanner-mlRUP7 / cisco-mcp-scanner: skipped

[codex:.] Manifest Validation

21/31

9 checks

[codex:.] Security

13/16

9 checks

[codex:.] Operational Security

3/6

5 checks

[codex:.] Best Practices

6/9

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

N/A

3 checks · not applicable

[codex:.] Code Quality

10/10

2 checks

[gemini:.] Gemini Extension

10/10

3 checks

[gemini:.] Security

13/16

6 checks

[gemini:.] Operational Security

3/6

5 checks

[gemini:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowsecuritySECURITY_MD_MISSINGReported 2 times

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

lowoperational-securityDEPENDABOT_MISSINGReported 2 times

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_AUTHOR

The manifest is missing the documented recommended field "author".

Add "author" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_HOMEPAGE

The manifest is missing the documented recommended field "homepage".

Add "homepage" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_LICENSE

The manifest is missing the documented recommended field "license".

Add "license" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_KEYWORDS

The manifest is missing the documented recommended field "keywords".

Add "keywords" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Antigravity CLI

Install the bundled skills into Antigravity CLI with the open Skills CLI.

Skills CLI docs
  1. 1

    Install with the Skills CLI

    The open Skills CLI detects installed agents and installs this plugin's skills for Antigravity CLI.

    shell
  2. 2

    Restart and verify

    Start a new Antigravity CLI session and confirm the skill is listed before relying on it. The Skills CLI lists what it installed.

    shell

To remove it later, run npx [email protected] remove henfrydls/actual-budget-mcp.

Did setup work in Antigravity CLI?

No setup reports for Antigravity CLI yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "actual-budget",
  "version": "0.12.0",
  "description": "Ask your Actual Budget where the money went, and write back safely: every delete previews what it would destroy, and new transactions are checked against what is there.",
  "settings": [
    {
      "name": "Actual server URL",
      "description": "Where your Actual Budget server is reachable, for example http://localhost:5006",
      "envVar": "ACTUAL_SERVER_URL"
    },
    {
      "name": "Server password",
      "description": "The password for your Actual server. Leave empty if your server uses OIDC and you set a session token instead.",
      "envVar": "ACTUAL_PASSWORD",
      "sensitive": true
    },
    {
      "name": "Budget Sync ID",
      "description": "Actual shows this under Settings > Show advanced settings. It is the Sync ID, not the Budget ID shown above it: the two look alike and only the Sync ID works.",
      "envVar": "ACTUAL_BUDGET_ID"
    },
    {
      "name": "Session token (OIDC servers only)",
      "description": "For servers behind OIDC, which have no password. Use this instead of the password; if both are set, the token wins.",
      "envVar": "ACTUAL_SESSION_TOKEN",
      "sensitive": true
    },
    {
      "name": "Read-only mode",
      "description": "Set to 1 to expose only the read and analysis tools. The write tools are not registered at all, so they never reach tool discovery.",
      "envVar": "ACTUAL_READ_ONLY"
    },
    {
      "name": "Toolset",
      "description": "Set to chat to offer the 18 everyday tools instead of all 44: reading, recording and categorising transactions, and moving budgeted money. Setting up and repairing a budget is left out. Defaults to full.",
      "envVar": "ACTUAL_TOOLSET"
    },
    {
      "name": "Other budgets this server serves",
      "description": "Every budget sync id this server should serve, comma separated, when it is more than one. Each tool then takes a budget_id, each budget is opened in a process of its own, and list_budgets says which ones there are.",
      "envVar": "ACTUAL_BUDGET_IDS"
    },
    {
      "name": "Encryption passwords (several budgets)",
      "description": "A JSON object of budget sync id to encryption password, for when more than one of the budgets is end-to-end encrypted: {\"<sync id>\": \"<password>\"}. With one encrypted budget the single password setting is enough.",
      "envVar": "ACTUAL_ENCRYPTION_PASSWORDS",
      "sensitive": true
    },
    {
      "name": "Budgets open at once",
      "description": "How many budgets stay open at the same time, each in its own process. Defaults to 3; a fourth budget closes the one that went longest without a call.",
      "envVar": "ACTUAL_BUDGET_WORKERS"
    },
    {
      "name": "Minutes before an idle budget closes",
      "description": "How long an open budget with nothing to do stays open. Defaults to 15.",
      "envVar": "ACTUAL_WORKER_IDLE_MINUTES"
    },
    {
      "name": "Seconds to wait for a budget to open",
      "description": "How long a call waits for a budget that is still opening before it answers that it is still opening and nothing was sent. Defaults to 45.",
      "envVar": "ACTUAL_WORKER_READY_SECONDS"
    }
  ],
  "mcpServers": "./.registry/mcp.json",
  "repository": "https://github.com/henfrydls/actual-budget-mcp",
  "interface": {
    "displayName": "actual-budget",
    "developerName": "henfrydls"
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/henfrydls/actual-budget-mcp
Marketplace path
Unknown
Source path
.
Install policy
Unspecified

File inventory

.codex-plugin/plugin.json

plugin-manifest

3,031 bytes

083d7b64bc5f089e…

.registry/mcp.json

mcp-config

77 bytes

38fd252393dedf6a…

gemini-extension.json

file

3,357 bytes

239a5cf2318fe8b5…

LICENSE

file

1,420 bytes

11b3ae9151dda392…

package-lock.json

file

101,749 bytes

cca92d6dab2aff51…

package.json

file

1,899 bytes

c2242e23b2a79596…

README.md

file

82,060 bytes

33f5af7683d4c707…

tsconfig.json

file

530 bytes

7bb9f66a419bb612…

actual-budget-mcp — Frequently asked questions

What is actual-budget-mcp?
actual-budget-mcp is an AI plugin in the HOL registry. MCP server: ask your Actual Budget where the money went, and record transactions, transfers and budget moves from any MCP client, with duplicate checks before anything is written.
How do I install actual-budget-mcp?
Install actual-budget-mcp in your harness: Antigravity CLI — npx [email protected] add henfrydls/actual-budget-mcp; MCP — git clone https://github.com/henfrydls/actual-budget-mcp; Any agent — npx [email protected] add henfrydls/actual-budget-mcp. Full step-by-step guidance is on the HOL plugin page.
How do I install actual-budget-mcp in Antigravity CLI?
To install actual-budget-mcp in Antigravity CLI, start with npx [email protected] add henfrydls/actual-budget-mcp. The complete step-by-step install guide for Antigravity CLI is on the HOL plugin page.
How do I install actual-budget-mcp in MCP?
To install actual-budget-mcp in MCP, start with git clone https://github.com/henfrydls/actual-budget-mcp. The complete step-by-step install guide for MCP is on the HOL plugin page.
How is the Trust Score for actual-budget-mcp computed?
actual-budget-mcp has a HOL Trust Score of 74 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/henfrydls%2Factual-budget/trust
Who publishes actual-budget-mcp?
actual-budget-mcp is published by henfrydls and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W44. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Reviews and similar plugins