monarch-money-mcp-server
Warn
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires cloning a repository from an unverified source (
https://github.com/robcerda/monarch-mcp-server.git) and installing multiple Python dependencies viapiporuv. It also relies on themonarchmoneycommunitylibrary fromhttps://github.com/bradleyseanf/monarchmoneycommunity. - [COMMAND_EXECUTION]: Users are instructed to run setup scripts (
login_setup.py) and the MCP server (server.py) locally. These scripts execute with the user's permissions and handle authentication and financial data. - [DATA_EXPOSURE]: The skill manages highly sensitive information, including Monarch Money login credentials and 2FA codes. It stores long-lived session tokens in a local file at
~/.monarch/session.pickle, which is a sensitive path. - [PROMPT_INJECTION]: The skill ingests transaction descriptions, merchant names, and notes from an external API. This creates a surface for indirect prompt injection if an attacker-controlled transaction contains instructions that influence the agent's behavior during analysis.
Audit Metadata