Back to MCP Directory
Ledger
Model Context Protocol moderate risk

Ledger

This MCP server provides an interface to Ledger CLI, enabling LLMs to analyze financial data, generate reports, and perform accounting tasks via command-line interactions.

Connections & Capabilities

Connects To

GitHubDocker

Capabilities

readexec

Quickstart

Install

npx -y @smithery/cli install @minhyeoky/mcp-ledger --client claude

Exposed MCP Tools (9)

safe
ledger_balance

Shows account balances with filtering options.

Read-only operation; no data modification.

safe
ledger_register

Shows transaction register with history.

Read-only operation; no data modification.

safe
ledger_accounts

Lists all accounts in the ledger file.

Read-only operation; no data modification.

safe
ledger_payees

Lists all payees from transactions.

Read-only operation; no data modification.

safe
ledger_commodities

Lists all commodities (currencies) used.

Read-only operation; no data modification.

safe
ledger_print

Prints transactions in ledger format.

Read-only operation; no data modification.

safe
ledger_stats

Shows statistics about the ledger file.

Read-only operation; no data modification.

safe
ledger_budget

Shows budget analysis.

Read-only operation; no data modification.

high
ledger_raw_command

Runs a raw Ledger CLI command.

Allows arbitrary command execution, potentially leading to data corruption or information disclosure.

Safety Assessment

This server is relatively safe for read-only operations and basic reporting. However, the `ledger_raw_command` tool introduces significant risk and should be used with extreme caution. Ensure the server is only accessible to trusted clients and carefully review all commands before execution.

  • Ledger CLI itself provides some level of data integrity through its double-entry accounting system.
  • The server requires a valid Ledger file, limiting access to only that file.
  • Basic validation is included to prevent command injection.
  • Access to the ledger file is limited to the path specified in the configuration.
  • The `ledger_raw_command` tool allows execution of arbitrary Ledger CLI commands, posing a risk if not carefully controlled.
  • Improperly configured file paths could expose sensitive financial data.
  • The server relies on the security of the underlying Ledger CLI tool.
  • Lack of built-in authentication mechanisms means it should only be used with trusted clients.