SBER-MCP
Unofficial MCP server and Python SDK for SberBank Online: balances, operations and transfers between your own accounts with confirmation
- 6 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- Logs into a personal bank account through an unofficial API
- With the write flag it executes real money transfers
- The bank may block the account
Install
- Works in
- Services
In your terminal, with SkillFoxx CLI
npx skillfoxx add mcp/sber-mcpDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Logs into a personal bank account through an unofficial API
- With the write flag it executes real money transfers
- The bank may block the account
This is third-party code. Review the repository files before installing.
What it does
The server logs into SberBank Online with direct HTTP requests, no browser, and gives the agent cards, accounts and operation history. It is read-only by default: transfer and card rename tools only appear when started with --allow-writes. Transfers take two steps, prepare calculates and confirm executes after explicit human approval, and a retry does not send money twice. Login, password, PIN and SMS code are entered in the terminal via the login command and never pass through the agent. A demo mode runs on synthetic data without contacting the bank.
Who it is for. For technically capable Sber customers who want to ask an agent about their spending and balances and understand the risks of unofficial access.
Good fit when
- You want a quick look at card and account balances
- You need to review a month of operations and group spending
- You want to see how it works in demo mode without an account
Not a fit when
- You cannot risk your account being blocked
- You need transfers to other people: only transfers between your own products are supported
- You are on a shared or someone else's machine
Example request
How much is on my cards and what did I spend the most on this month?MCP
- Transport
- stdio
- Authentication
- not required
Limitations
The project is not affiliated with Sberbank and relies on observed bank web endpoints. The author states plainly that use may violate the terms of service and get the account blocked. Any change on the bank side can break login. The profile with device data is stored locally in a 0600 file. Requires Python 3.11+ and uv or pipx. No warranty, all responsibility lies with the user.
How to disable. Run claude mcp remove sber, uninstall with uv tool uninstall sber-unofficial-mcp and delete the saved profile. To be safe, also end the session in SberBank Online security settings.
FAQ
Can the agent move money on its own?
Without --allow-writes the transfer tools are not even registered. With the flag a transfer runs only after explicit confirmation, and confirm must not be auto-approved.
Does the agent see my password?
No. No tool accepts or returns login, password, PIN, codes or tokens. Login happens in the terminal.
Discussion
No questions or reviews yet.
Related
All Sber toolsSber API MCP for corporate clients
Sber API MCP
Sber's official MCP for corporate clients: an agent works with ruble payment orders and account statements through the bank API
Sberbank business API MCP server
@theyahia/sber-mcp
An MCP server for the Sberbank Business API: accounts, balance, statements, payment orders and counterparties for an AI agent
An unofficial Python client and skill for the SberMobile account: tariff, package balances, services and bonuses
MCP server for Sber SaluteSpeech: transcribe Russian speech to text and voice text with Sber voices
An MCP server for Sber's SaluteSpeech voice API: records speech from the microphone, recognizes it and speaks the agent's reply
Semantic search over Jivo and SaluteBot docs
MCP Docs Hub
A collection of MCP servers with FAISS indexes for semantic search over Jivo, SaluteBot and SberSalute docs: search, file reads and contents
README in short
The README opens with a warning about unofficial status and blocking risk, then shows a one-command demo mode. It covers login through an interactive command that saves a profile, setup for Claude Code, Claude Desktop, Codex and Cursor, and the secret handling model. It explains that writes are off by default and how the two-phase transfer works. The second part describes a standalone async SDK and its CLI. MIT license with a DISCLAIMER.md.