If bank passwords arrived as tool arguments they would end up in conversation history and in whatever logs the client keeps; reading them from the process environment keeps them out of both. That is a genuine mitigation, not a guarantee: this drives real logins to real bank accounts, and the author's own security section stops short of endorsing it. Start with a read-only use and a machine you control.
An MCP server over the `israeli-bank-scrapers` library, covering the major Israeli banks and credit card issuers. It lists which institutions are supported and exactly which environment variables each one needs, then fetches transactions over a date range you choose, with a separate step for institutions that require two-factor authentication.
- Transactions fetched from a supported bank over a date range — `fetch-transactions`
- Two-factor authentication handled as its own step for the institutions that require it — `two-factor-auth`
- A resource listing every supported bank and credit card company with the environment-variable names it needs — `banks://list`
- Credentials read from the environment rather than passed as tool arguments, so they never enter the LLM conversation history
- Coverage of Bank Hapoalim, Leumi, Discount, Mercantile, Mizrahi, Otsar Hahayal, Union Bank, Beinleumi, Massad, Yahav, Beyhad Bishvilha, Behatsdaa, OneZero (experimental), and the card issuers Visa Cal, Max, Isracard and Amex
Your online banking credentials, supplied only through the environment. Each institution uses `<BANK_ID>_<FIELD>` variables — Bank Leumi needs `LEUMI_USERNAME` and `LEUMI_PASSWORD`, Hapoalim needs `HAPOALIM_USERCODE` and `HAPOALIM_PASSWORD` — and the `banks://list` resource reports the exact names per institution. Build from a clone with `npm install` and `npm run build`, then register `build/server.js` with `node` and put the variables in the client's `env` block. The package is `israeli-bank-mcp` 1.0.0. The author's own security note is a shrug rather than a reassurance — read it before deciding this belongs on a machine with your real banking credentials.