SkillFoxx

Alfa API MCP: Alfa-Bank accounts and payments

alfa-bank-mcp

An MCP server for the Alfa-Bank Business Alfa API: accounts, statements, payments and rates, flagged as an unverified demo until a bank agreement is signed

  • 2 ★ on the repository
  • Last commit
  • MIT
MCP server

Broad access

Why this level

  • create_payment_order can move real money once a signing module is connected
  • Requires mTLS certificates and a bank agreement; a misconfiguration can expose banking data
All reasons and checks
Russian stack

theyahia/alfa-bank-mcpAuthor:theYahia

Install

Services

In your terminal, with SkillFoxx CLI

npx skillfoxx add mcp/alfa-bank-mcp

Detects the agents on your machine, shows the access level and pins the version.

Other ways to install

Access and checks

How we review

Broad accessThe tool can change data, run commands or handle secrets.

  • create_payment_order can move real money once a signing module is connected
  • Requires mTLS certificates and a bank agreement; a misconfiguration can expose banking data

This is third-party code. Review the repository files before installing.

What it does

The server gives eight tools over the Alfa API: listing business accounts, the current balance for an account, transactions for a period, creating a payment order (flagged as a destructive action), payment order or registry status, saved counterparties, exchange rates, and salary registries. Authorization uses OAuth 2.0 client credentials with token caching. The author explicitly and thoroughly explains that production access needs an mTLS client certificate, GOST PKCS#7 request signing, and a signed technical-interaction agreement with the bank; without those, the server only works in demo mode and cannot reach the live environment. create_payment_order has no default signer implemented: without your own Signer module, the tool returns a clear error instead of sending money.

Who it is for. For companies with an Alfa-Bank business account and a signed technical-interaction agreement who want Alfa API access from an agent.

Good fit when

  • You want to check a business account balance and statement from a chat with an agent
  • You have a bank agreement, mTLS certificates and a ready GOST signing module, and need production payment access
  • You need an exchange rate or the list of saved Alfa-Bank Business counterparties

Not a fit when

  • You have no technical-interaction agreement, mTLS certificates or GOST signing: the server only works in demo mode, production payments will not go through
  • You need a guarantee of exact API paths: part of the endpoints in the README are marked "verify" and not confirmed live

Example request

Show all my Alfa-Bank business accounts and their balances

MCP

Transport
stdio, http
Authentication
OAuth

Environment variables

ALFA_CLIENT_ID required
OAuth 2.0 client ID from the Alfa-Bank developer portal
ALFA_CLIENT_SECRET required, secret
OAuth 2.0 client secret
ALFA_TLS_CERT secret
mTLS client certificate, required for production access
ALFA_TLS_KEY secret
mTLS client private key
ALFA_TLS_CA
mTLS root certificate bundle

Limitations

Production access needs mTLS certificates, GOST PKCS#7 signing and a signed bank agreement, none of which the server provides on its own. The signer for create_payment_order has no default implementation and must be wired up yourself. Some endpoint paths (account balance, salary registries, counterparty list) are compiled from documentation and explicitly marked by the author as unverified, needing a Swagger check.

How to disable. Remove the alfa-bank server from claude_desktop_config.json, or with claude mcp remove alfa-bank.

FAQ

Will the server work right after installation?

Only in demo mode; production access to real accounts requires mTLS certificates, GOST signing and an agreement with Alfa-Bank.

Can the server send a payment on its own?

Not by default: create_payment_order without a connected Signer module returns an error instead of sending money, and the tool has destructiveHint set for explicit confirmation.

Discussion

No questions or reviews yet.

MCP servers
Russian stack

An MCP server for the Sberbank Business API: accounts, balance, statements, payment orders and counterparties for an AI agent

MCP serverBroad access1
Russian stack

An MCP server for Tochka Bank's live business API: accounts, statements, and drafting rouble payments that a human signs via SMS in online banking

MCP serverBroad access2
Official

The server gives agents read access to your bank accounts and transactions through Enable Banking, without payment tools.

MCP serverExtended access319
Official

Alpaca's official MCP server: orders for stocks, ETFs, crypto and options, position management and market data in plain language

MCP serverBroad access1.1K

Tochka Bank MCP server

MCP-сервер Точка Банка

Official

Tochka Bank's official MCP: an agent checks accounts and balances, builds statements and drafts payments that you sign in online banking

MCP serverBroad access
Official

Official Alpha Vantage MCP server: quotes, historical series, indicators and company data

MCP serverExtended access227

README in short

The README opens with a warning to read the endpoint-verification section before use, shows a quick start for Claude Desktop, Claude Code, VS Code, Cursor and Windsurf, a table of eight tools flagged read-only or destructive, the authorization and mTLS architecture, and a detailed per-tool table with an API-path verification status (documented, likely, verify).

README badge

Report a problem