Integrate with Starling Bank API

This MCP server integrates with Starling Bank's developer API, giving an AI assistant tools to interact with account management and transactions on a Starling Bank account. It is explicitly a third-party integration and is not affiliated with Starling Bank.

The project carries a direct safety warning: at time of writing, models make frequent mistakes and are vulnerable to prompt injection, and because this server gives the model some control of your bank account, mistakes could be costly - it should be used with caution and at your own risk.

Use it if you want an AI assistant to check balances, review transactions, or manage a Starling Bank account on your behalf, and you're comfortable scoping the personal access token narrowly to only what the AI should be able to access. If you want the assistant to be able to send payments specifically, that requires the additional payment-signing setup documented separately in the repository.

Do not run the optional HTTP transport mode without putting it behind a reverse proxy or another secured setup - the HTTP transport ships with no authentication, so any other process on your machine, including a website open in your browser, could potentially reach the endpoint and control your bank account. The default stdio transport (used by Claude Desktop, Cursor, and similar clients) does not carry this specific risk in the same way, but the general prompt-injection warning above still applies to any transport.

The server is configured with a single required credential: a Starling Bank personal access token, set as the STARLING_BANK_ACCESS_TOKEN environment variable. You create it by signing up for a Starling Developers account, linking it to your Starling Bank account, and generating an access token with scopes chosen based on what you want the AI system to access. The token is a long, structured string (it typically begins eyJhbGciOiJQUzI1NiIsInppcCI6IkdaSVAifQ.).

By default the server runs over stdio, the transport used by Claude Desktop, Cursor, and comparable MCP clients. It can alternatively run as an HTTP server (MCP_TRANSPORT=http, a configurable PORT, with the MCP endpoint served at /mcp) for setups that need network-accessible access - with the authentication caveat above. Installation is handled through the install-mcp tool, which generates the right configuration for a range of MCP clients including Claude Code, Claude Desktop, Cursor, Cline, and VS Code.

Starling Bank customers comfortable giving an AI assistant scoped, token-based access to their account data and transactions, who understand and accept the explicit risk warnings around model mistakes, prompt injection, and the HTTP transport's lack of built-in authentication.