SBER-MCP
Unofficial MCP server and Python SDK for SberBank Online: balances, operations and transfers between your own accounts with confirmation
Install
claude mcp add sber-demo -- uvx sber-unofficial-mcp --demoDemo on synthetic data, never contacts the bank.
This is third-party code. Review the repository files before installing.
What it does
The server logs into SberBank Online with direct HTTP requests, no browser, and gives the agent cards, accounts and operation history. It is read-only by default: transfer and card rename tools only appear when started with --allow-writes. Transfers take two steps, prepare calculates and confirm executes after explicit human approval, and a retry does not send money twice. Login, password, PIN and SMS code are entered in the terminal via the login command and never pass through the agent. A demo mode runs on synthetic data without contacting the bank.
Who it is for. For technically capable Sber customers who want to ask an agent about their spending and balances and understand the risks of unofficial access.
Good fit when
- You want a quick look at card and account balances
- You need to review a month of operations and group spending
- You want to see how it works in demo mode without an account
Not a fit when
- You cannot risk your account being blocked
- You need transfers to other people: only transfers between your own products are supported
- You are on a shared or someone else's machine
Example request
How much is on my cards and what did I spend the most on this month?Limitations
The project is not affiliated with Sberbank and relies on observed bank web endpoints. The author states plainly that use may violate the terms of service and get the account blocked. Any change on the bank side can break login. The profile with device data is stored locally in a 0600 file. Requires Python 3.11+ and uv or pipx. No warranty, all responsibility lies with the user.
How to disable. Run claude mcp remove sber, uninstall with uv tool uninstall sber-unofficial-mcp and delete the saved profile. To be safe, also end the session in SberBank Online security settings.
MCP
- Transport
- stdio
- Authentication
- not required
Security check
- Logs into a personal bank account through an unofficial API
- With the write flag it executes real money transfers
- The bank may block the account
README in short
The README opens with a warning about unofficial status and blocking risk, then shows a one-command demo mode. It covers login through an interactive command that saves a profile, setup for Claude Code, Claude Desktop, Codex and Cursor, and the secret handling model. It explains that writes are off by default and how the two-phase transfer works. The second part describes a standalone async SDK and its CLI. MIT license with a DISCLAIMER.md.
FAQ
Can the agent move money on its own?
Without --allow-writes the transfer tools are not even registered. With the flag a transfer runs only after explicit confirmation, and confirm must not be auto-approved.
Does the agent see my password?
No. No tool accepts or returns login, password, PIN, codes or tokens. Login happens in the terminal.
Related
Stripe's official MCP server, plugins and skills: the agent searches the API and docs, reads and changes account data
The official CCXT MCP server and skills: market data, balances and opt-in trading across crypto exchanges and prediction markets
Skill plugins for analyzing stocks, earnings, options and startups, plus readers for social feeds and market data
Skills and an MCP server for options traders: quotes, technical analysis, Greeks, spreads, scanners and Interactive Brokers portfolio