bankmcp 0.1.4 → 0.1.5

package/README.md

@@ -71,6 +71,12 @@ Your browser will warn once about the certificate on localhost, which the
 server made for itself because Enable Banking requires https for the bank
 redirect. Continue past it. Say "connect my bank" and log in at your bank.
 
+To avoid the warning altogether, use a certificate your browser already
+trusts: [mkcert](https://github.com/FiloSottile/mkcert) makes one with
+`mkcert localhost 127.0.0.1`; point `TLS_CERT_PATH` and `TLS_KEY_PATH` at the
+two files and the server uses them instead of generating its own. BankMCP™
+itself does not touch your system's trust store.
+
 State lives in `~/.bankmcp`. Delete the folder to forget everything.
 
 ### On a server
@@ -286,20 +292,26 @@ Requires Node 24 or newer (runs TypeScript directly, no build step).
 ## Layout
 
 ```
-src/server.ts         Express: /mcp behind OAuth, OAuth endpoints, /callback, status page
-src/auth.ts           single-user OAuth provider, password login page
-src/mcp.ts            McpServer factory (tools + prompts + instructions)
+src/stdio.ts          entry point for npx bankmcp: stdio server plus the localhost https side
+src/server.ts         entry point for a hosted deployment: OAuth, /mcp, callback, status page
+src/app.ts            the Express app shared by both entry points
+src/local.ts          localhost https server and self-signed certificate for local mode
+src/mcp.ts            McpServer factory (tools, prompts, instructions)
 src/tools.ts          the MCP tools
 src/prompts.ts        the MCP prompts
 src/watcher.ts        background rule checks and notifications
+src/auth.ts           single-user OAuth provider
+src/setup.ts          first-run setup: validates and stores id, key and password
+src/pages.ts          the HTML pages: setup, sign-in, connected, status, privacy, terms
+src/config.ts         environment and data-directory configuration
 src/enablebanking.ts  JWT signing and a thin typed API client
 src/store.ts          the JSON state file
 src/data.ts           shaping balances and transactions for an assistant
-src/stdio.ts          local entry point (stdio, used by `npx bankmcp`)
-src/local.ts          localhost https server for setup and the bank redirect in local mode
-src/app.ts            the Express app shared by both modes
 src/cli.ts            check, hash-password, watch
-plugin/               Claude Code plugin with the bank skill
+bin/bankmcp.js        the npx entry; dispatches to stdio or cli
+scripts/              build-mcpb.sh (Claude Desktop bundle), local-chat.ts (Ollama bridge)
+plugin/               Claude Code plugin: setup and deploy skills, bank skill
+docs/                 landing page (GitHub Pages, bankmcp.dk)
 ```
 
 ## What this is, and is not

package/bin/bankmcp.js

@@ -5,4 +5,12 @@ if (major < 24) {
   console.error(`BankMCP needs Node 24 or newer (you have ${process.versions.node}).`);
   process.exit(1);
 }
-await import("../dist/lib/stdio.js");
+// A bare `bankmcp` is the stdio server an MCP client launches. Anything with
+// arguments is a command for the person at the keyboard, and those look in the
+// same place the local server keeps its state.
+if (process.argv.length > 2) {
+  process.env.BANKMCP_LOCAL ??= "1";
+  await import("../dist/lib/cli.js");
+} else {
+  await import("../dist/lib/stdio.js");
+}

package/dist/lib/cli.js

@@ -94,6 +94,6 @@ switch (command) {
         break;
     }
     default:
-        console.log("Usage: node src/cli.ts <hash-password [password] | check | watch [--force]>");
+        console.log("Usage: bankmcp <hash-password [password] | check | watch [--force]>");
         process.exit(command ? 1 : 0);
 }

package/dist/lib/local.js

@@ -6,7 +6,7 @@ import { X509Certificate } from "node:crypto";
 import { join } from "node:path";
 import { createServer as createHttpsServer } from "node:https";
 import selfsigned from "selfsigned";
-import { config } from "./config.js";
+import { config, tlsOptions } from "./config.js";
 import { createApp } from "./app.js";
 let server;
 let starting;
@@ -24,6 +24,12 @@ export function certificateStillGood(pem, now = Date.now()) {
     }
 }
 async function certificate() {
+    // An explicitly configured certificate wins, so anyone who would rather use
+    // one their browser already trusts (mkcert and friends) can point at it
+    // instead of trusting the generated one. `server.ts` already honours these.
+    const configured = tlsOptions();
+    if (configured)
+        return configured;
     const certPath = join(config.dataDir, "localhost-cert.pem");
     const keyPath = join(config.dataDir, "localhost-key.pem");
     if (existsSync(certPath) && existsSync(keyPath)) {

package/dist/lib/mcp.js

@@ -1,7 +1,7 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { registerTools } from "./tools.js";
 import { registerPrompts } from "./prompts.js";
-export const VERSION = "0.1.4";
+export const VERSION = "0.1.5";
 export function createServer() {
     const server = new McpServer({ name: "bank", version: VERSION }, {
         instructions: [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bankmcp",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "BankMCP™: self-hosted, read-only MCP server that lets any AI assistant (Claude, ChatGPT, Mistral, Cursor, or a local model) answer questions about your own bank accounts via open banking (Enable Banking, PSD2)",
   "license": "MIT",
   "type": "module",