Wise MCP server

@aiwerk/mcp-server-wise

Wise (TransferWise) Personal API MCP server. Read-only: profiles, balances, rates, transfers, recipients.

Tools (v0.1.4, 11 read-only)

• wiselistprofiles, wisegetprofile
• wiselistbalances, wisegetbalance
• wisegetexchangerate, wisegetexchangerate_history
• wiselisttransfers, wisegettransfer
• wiselistrecipients, wisegetrecipient, wisegetaccount_requirements

Write tools (create/fund/cancel transfer, create/delete recipient, create quote) are intentionally not in v0.1.x — they require idempotency + SCA state-machine handling, planned for v0.2.0.

Configuration

Base URL safety

WISEAPIBASE_URL is locked down by default:

• Must use https://
• Host must be on the allowlist: api.wise.com or api.sandbox.transferwise.tech

Violation throws WiseConfigError before any Bearer token leaves the machine. This prevents token exfiltration via a misconfigured env, a bad CI value, or a malicious override.

Dangerous override: set WISEAPIALLOWUNSAFEBASEURL=1 to bypass both checks (allow http:// and arbitrary hosts). Only use for local testing against a mock server. Never enable this in production or with a real Wise token.** The token will be sent to whatever host you configure.

Install

Two ways to run this server — pick the one that fits.

Option 1 — Hosted (zero setup)

No local runtime, no env vars on your machine — your Wise token is AES-256-GCM encrypted server-side via HashiCorp Vault.

1. Sign up at aiwerkmcp.com.
2. Install Wise from the catalog and paste your WISEAPITOKEN.
3. Point your MCP client (Claude.ai, Cursor, Hermes, …) at your hosted endpoint:

https://bridge.aiwerk.ch/u/<your-user-id>/mcp

with your Bearer token.

All 11 read-only tools appear. Install other AIWerk recipes from the same bridge.

Option 2 — Self-hosted (npx)

Run directly — you manage the token:

WISE_API_TOKEN=xxx npx @aiwerk/mcp-server-wise

Or install globally:

npm install -g @aiwerk/mcp-server-wise
WISE_API_TOKEN=xxx mcp-server-wise

Error taxonomy

Errors surface as MCP isError: true responses with distinct prefixes:

• Timeout: … — request exceeded WISEAPITIMEOUT_MS (wraps AbortController)
• Network error: … — fetch rejected (DNS, connection reset, etc.)
• Configuration error: … — missing token or invalid base URL
• Wise API error … — HTTP 4xx/5xx response from Wise

Typical flow

1. wiselistprofiles → pick profileId
2. wiselistbalances({profileId}) → see available currencies / amounts
3. wisegetexchange_rate({source, target}) → check rate
4. wiselisttransfers({profileId, status}) → history / status lookup

Build / dev notes

• src/version.ts is generated from package.json by scripts/gen-version.mjs (runs as prebuild / predev / pretest). The file IS committed so a fresh clone compiles immediately.
• The generator is idempotent: it only writes when the version actually changes. So npm run build on an in-sync tree leaves the working copy clean.
• Bumping package.json's version and running any of build / dev / test is enough to propagate — no separate manual step on src/version.ts.

About AIWerk MCP

Part of the AIWerk MCP platform — curated, signed MCP recipes served either as npm packages for self-hosting or through our multi-tenant hosted bridge (bridge.aiwerk.ch).

Other AIWerk MCP servers:

Shortened. The full README is on GitHub.