Install
$ agentstack add mcp-qonto-qonto-mcp-server ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
💸 Qonto MCP Server 🤖
> [!IMPORTANT] > 📣 Qonto now has an officially supported MCP server, and it's live! 🎉 > > It is hosted by Qonto, authenticates via OAuth, and supports both read and write operations. Learn more at mcp.qonto.com. > > The official server should be preferred over this local one, which is no longer actively maintained.
Legacy local server documentation (no longer maintained)
🌐 Usage
https://github.com/user-attachments/assets/619cd6a1-e064-4518-a84c-8134c09fae03
> [!IMPORTANT] > Security and customer trust are fundamental to everything we do at Qonto. While this repository enables powerful innovation and integration capabilities, it's important to understand that certain risks are inherent to the use of the MCP technology itself. Please review the following security information carefully.
⚠️🔒 SECURITY NOTICE
The MCP (Model Context Provider) protocol gives AI models access to additional functionality like reading files, accessing APIs, and generate responses based on contextual data.
While this brings powerful integration capabilities, it also introduces important security considerations.
A malicious MCP server can secretly steal credentials and maliciously exploit other trusted MCP servers you're using (read more).
These risks are not specific to Qonto’s MCP server, but apply to any use of the MCP protocol.
We recommend to only use MCP servers you trust, just as you would with any software you install on your computer.
Questions or security concerns? Contact us at security@qonto.com.
Getting started
- Install Claude Desktop
- Get your organization ID and API key from your Qonto account's
/settings/integrationssection:
Option 1: Docker Installation (Recommended)
- Pull the Docker image:
``bash docker pull qonto/qonto-mcp-server:latest ``
- In your Claude Desktop
claude_desktop_config.jsonfile, add theQonto MCPserver as follows:
{
"mcpServers": {
"Qonto MCP Docker": {
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"-e", "QONTO_API_KEY=", // ", //
Option 2: Local Installation
1. Clone this repository locally
2. Install [`uv`](https://docs.astral.sh/uv/getting-started/installation/). If you're on Mac, you can just do `brew install uv`
3. In your Claude Desktop `claude_desktop_config.json` file, add the `Qonto MCP` server as follows:
> **Note**: You can optionally pass `--transport streamable-http` to use HTTP transport instead of the default `stdio` transport protocol.
```jsonc
{
"mcpServers": {
"Qonto MCP": {
"command": "uv",
"args": [
"run",
"--with",
"mcp[cli]",
"--with",
"requests",
"mcp",
"run",
"", // ", // ", // " //
## Available Tools
This MCP server provides the following tools for interacting with your Qonto account:
- **Organization Info**: Get details about your Qonto organization
- **Account Management**: Access account information and balances
- **Transaction History**: Retrieve and analyze transaction data
- **Business Operations**: Access business-related financial data
## Configuration
### Environment Variables
- `QONTO_API_KEY`: Your Qonto API key (required)
- `QONTO_ORGANIZATION_ID`: Your organization ID (required)
- `QONTO_THIRDPARTY_HOST`: API host URL (defaults to https://thirdparty.qonto.com)
### Transport Options
The server supports both `stdio` and `streamable-http` transport protocols. Use `stdio` for most cases, or `streamable-http` if you need HTTP-based communication.
## Troubleshooting
### Common Issues
1. **Invalid API credentials**: Ensure your API key and organization ID are correct
2. **Connection timeout**: Check your network connection and API host URL
3. **Claude Desktop not recognizing the server**: Restart Claude Desktop after configuration changes
## Contributing
Contributions are welcome! Please feel free to submit issues and enhancement requests.
## License
This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.
## Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- **Author:** [qonto](https://github.com/qonto)
- **Source:** [qonto/qonto-mcp-server](https://github.com/qonto/qonto-mcp-server)
- **License:** MIT
- **Homepage:** https://qonto.com
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.