Íon MCP

The material states that no local API key or environment variable is required, which reduces local secret exposure. However, because it connects to Íon/Open Finance accounts, real use will likely involve account authorization tokens or sessions, and misuse would affect sensitive financial data.

The system checks show outbound access to api.mcp.ai. Based on the described functionality, account-related requests and financial data are likely transmitted through this remote endpoint. This egress is consistent with the stated purpose, and there is no evidence here of transmission to unknown or unrelated domains.

The tool is flagged as executes-code, meaning it has local code-execution or process-launch capability. However, the available material does not show abnormal system privileges beyond what such a connector may normally require, nor any suspicious execution chain details.

By description, it can handle highly sensitive financial data such as balances, statements, cards, and investments. However, the material does not indicate arbitrary local file access or requests for data beyond its stated financial-account purpose.

It is listed in the official registry and has an auditable open-source repository with updates in the last year, which are strong risk-reducing signals. Although the README is absent, the license is unspecified, and community stars are low, these limit transparency and social validation but do not amount to a high-risk red flag here.