Privacy
Archived notice: the YNAB MCP Server is no longer offered. This page preserves the privacy record published for the former connector. Existing authorisations can be reviewed or revoked from YNAB account settings.
The hosted connector is designed to avoid storing your budget data.
What passes through the server
When you connect through Claude, the server receives your YNAB OAuth access token and uses it to call the YNAB API for the specific tool request you make. Responses are returned to your Claude session.
The hosted server does not intentionally persist budget data, transactions, category names, account balances, or OAuth tokens. Tokens are held only for the active request/session path needed to complete the connector flow.
What may be logged
Infrastructure logs may contain ordinary request metadata such as timestamps, route names, status codes, and operational errors. They should not contain full budget payloads by design.
Control
You can revoke access at any time from YNAB account settings. If you prefer full control, use the downloadable self-hosted version and run it with your own YNAB OAuth application.