Inter MCP

The material says there are no environment variables or API keys, but connecting an Inter account via Brazil's Open Finance would typically involve account authorization or access tokens. Although the configuration method is not documented here, any such credentials should be treated as highly sensitive because compromise could expose financial data.

The tool is known to access the remote endpoint api.mcp.ai. Based on the feature description, account queries and financial data such as balances, statements, cards, or investments are likely transmitted through that endpoint. No unrelated or suspicious egress target is shown, but processing is not purely local, so privacy and retention policies should be verified.

The system flags indicate this MCP executes code or runs a local process, which is a normal property of this class of tool. The provided material does not show requests for unusual system privileges or clearly unrelated high-risk actions, so this remains caution rather than risk.

Its stated scope covers balances, statements, cards, and investments, which are highly sensitive categories of financial account data. Based on the available material, this access is aligned with the tool's declared purpose, and there is no explicit indication of extra local file access or overbroad permissions; however, the missing README leaves least-privilege boundaries unclear.

Positive signals include an official registry source, an open-source repository, and updates within the last year, all of which materially reduce supply-chain risk. However, the repository has no declared license, zero stars, and no README, which weakens auditability and maturity signals; review the source and dependencies before using it in sensitive environments.