Monte Bravo MCP

The material indicates no separate API key or environment variable is required, which is a positive sign; however, the tool connects to Monte Bravo/Open Finance accounts, so real usage would typically involve account authorization tokens or sessions that could expose sensitive financial data if misused.

It is known to access the remote endpoint api.mcp.ai, and the stated functionality involves balances, statements, cards, and investments, implying related query data may transit through that service; there is no evidence here of exfiltration to unrelated or unknown third-party endpoints.

The system checks explicitly mark it as capable of executing code/spawning processes, which is a common MCP-tool capability and warrants caution; the available material does not show it requesting abnormal system privileges beyond its stated purpose, so this alone does not justify a high-risk rating.

From the description, its primary data-access surface is the user's Monte Bravo/Open Finance financial account information, potentially including balances, statements/transactions, cards, and investments; no README is provided to define local file access scope, so extra local data access cannot be confirmed, but the financial data itself is highly sensitive.

The source is an official registry entry with a public source repository and updates within the last year, which materially lowers supply-chain risk; however, the repository has no declared license, very low adoption (0 stars), and no README, limiting audit context and maturity signals, so caution is still appropriate.