SkillFoxx

Sberbank business API MCP server

@theyahia/sber-mcp

An MCP server for the Sberbank Business API: accounts, balance, statements, payment orders and counterparties for an AI agent

  • 1 ★ on the repository
  • Last commit
  • MIT
MCP server

Broad access

Why this level

  • The create_payment tool creates a real payment order and moves money from the company account
  • The implementation is unverified against a live bank environment; test on an account with a minimal limit
All reasons and checks
Russian stack

theyahia/sber-mcpAuthor:theYahia

Install

Services

In your terminal, with SkillFoxx CLI

npx skillfoxx add mcp/theyahia-sber-mcp

Detects the agents on your machine, shows the access level and pins the version.

Other ways to install

Access and checks

How we review

Broad accessThe tool can change data, run commands or handle secrets.

  • The create_payment tool creates a real payment order and moves money from the company account
  • The implementation is unverified against a live bank environment; test on an account with a minimal limit

This is third-party code. Review the repository files before installing.

What it does

A TypeScript server provides 8 tools on top of the Sberbank Business API: account list and balance, a statement for a period with pagination and a transaction summary (inflows, outflows, net total), creating a payment order and checking its status, a list of saved counterparties, and company details. Authorization is via a Bearer token or OAuth client_credentials, optionally over mTLS with a PFX file or separate PEM files. Every money-moving operation carries a stable idempotent RqUID key that is reused on retries so the bank does not create the payment twice.

Who it is for. For businesses with a Sberbank account who want to check balance, statements and build payment orders from a chat with an agent instead of internet banking.

Good fit when

  • You want a quick look at balance and recent inflows on an account
  • You need a transaction summary for a period without a manual export from internet banking
  • You need to build a payment order and immediately check its status

Not a fit when

  • You have no bank-approved application for the Sberbank Business API and no mTLS certificate: authorization will not work without them
  • You need proven stability: the author states plainly the implementation is not verified against a live Sberbank Business API environment

Example request

Summarize account transactions for May and create a 150,000-ruble payment order to LLC Romashka for payment under contract no. 7

MCP

Transport
stdio, http
Authentication
key is optional

Environment variables

SBER_TOKEN secret
A direct API Bearer token, one of the authorization options
SBER_CLIENT_ID secret
Client ID for OAuth client_credentials, paired with SBER_CLIENT_SECRET
SBER_CLIENT_SECRET secret
Client secret for OAuth client_credentials
SBER_PFX_PATH secret
Path to a .p12 or .pfx certificate for mTLS

Limitations

The production Sberbank Business API sits behind mTLS and a separate bank application, so the author states plainly the implementation is unverified against a live environment. Sberbank has coexisting API generations, and the README advises checking exact endpoint paths and parameters against your own integration agreement; spots needing verification are marked VERIFY in the source. The same codebase also lives inside the author's WWmcp monorepo.

How to disable. Remove the sber server from your MCP client settings, for example claude mcp remove sber.

FAQ

Can I authorize without an mTLS certificate?

The README describes mTLS as optional on top of a Bearer token or OAuth, but the real requirements depend on your integration agreement with Sberbank.

What stops a payment from being created twice by accident?

Every payment carries an idempotent x-Introspect-RqUID reused on all retries, and the bank deduplicates the repeat.

Discussion

No questions or reviews yet.

All Sber tools
Official

Sber's official MCP for corporate clients: an agent works with ruble payment orders and account statements through the bank API

MCP serverBroad access
Russian stack

Unofficial MCP server and Python SDK for SberBank Online: balances, operations and transfers between your own accounts with confirmation

MCP serverBroad access6
Russian stack

An unofficial Python client and skill for the SberMobile account: tariff, package balances, services and bonuses

SkillExtended access1
Russian stack

MCP server for Sber SaluteSpeech: transcribe Russian speech to text and voice text with Sber voices

MCP serverExtended access1
Official

An MCP server for Sber's SaluteSpeech voice API: records speech from the microphone, recognizes it and speaks the agent's reply

MCP serverExtended access9

README in short

The Russian README describes a quick start for Claude Desktop, Claude Code, VS Code, Cursor and Windsurf, the full list of environment variables for Bearer and OAuth authorization plus mTLS, a table of 8 tools covering accounts, statements, payments and counterparties, demo prompts, the idempotency and retry architecture, and a separate API-compliance section that honestly warns the implementation is unverified against Sberbank's live environment.

README badge

Report a problem