Firefly Iii MCP server

by YakupEmreYerli·io.github.YakupEmreYerli/mcp-firefly-iii·v1.1.2

Security-first, self-hosted MCP server for Firefly III — 152 operations behind 5 scoped tools.

B83/100grade B

What users say

No reviews yet

Safety scan

B83/100

Adoption

Growing

2 stars74 downloads/wk

Reviews

Nobody has reviewed Firefly Iii yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

firefly_get_schema
Get the parameter schema for a specific operation.
firefly_list_operations
List available Firefly III operations, optionally filtered by entity.

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

no findings

Code scan95 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 8 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y @yakupemreyerli/firefly-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-firefly-iii -- npx -y @yakupemreyerli/firefly-mcp

Is Firefly Iii MCP server safe?: Mostly: it is graded B (83/100). Read the Firefly Iii safety report
How do I install Firefly Iii?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Firefly Iii need an API key?: Yes. The registry entry asks for FIREFLY_API_TOKEN.
Is Firefly Iii maintained?: The last commit was 8 days ago (2026-09-12). The latest release is v1.1.2.
What can I use instead of Firefly Iii?: Servers from other publishers that do the same job: Reversecore MCP server, CodeInspectus MCP server and MCPProxy MCP server. Compare all Firefly Iii alternatives.

Same job from other publishers: the closest match first, then the best rated.

Reversecore MCP
Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
not reviewed
Established
B
CodeInspectus
Local-first MCP security scanner and CLI for AI-generated applications.
not reviewed
Growing
C
MCPProxy
Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings
not reviewed
Growing
B
Cork MCP
Every Cork API operation, plus cross-client risk attribution and exploitability-first vuln triage.
not reviewed
Growing
B
SecHelix
Evidence-first security review of authorized repositories. Read-only, root-confined, no shell.
not reviewed
Growing
A

Local package. It runs on your machine, not through the gateway.

FIREFLY_API_URLYour Firefly III instance URL (a bare domain, or a full base URL including /api/v1)
FIREFLY_API_TOKENsecretFirefly III Personal Access Token (Options → Profile → OAuth → Create New Personal Access Token)

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/yakupemreyerli-mcp-firefly-iii.svg)](https://mcp.market/server/yakupemreyerli-mcp-firefly-iii)