Ask Claude "what's my net worth?" and it will, politely, make something up or tell you it can't know. As of today, if you use Krosos, it can answer with your actual number.
Every Krosos instance now speaks MCP, the Model Context Protocol: the open standard that Claude, Cursor and most AI assistants use to work with outside tools. Connect once, and your assistant sees your ledger as a set of typed tools it can call whenever money comes up in conversation.
What your assistant can do
Eight tools, deliberately curated rather than a mirror of the whole API:
- Read your net worth, balance sheet and holdings
- Read your net-worth history
- List your transactions
- Read the capital-gains tax estimate for any year, exemptions and carry-forward included
- Read your forecast assumptions
- Look up your accounts, providers and tickers
- Log a trade or record a balance change, if and only if you gave it a token that may write
So "how did my net worth move this quarter", "what's my estimated tax for 2026", or "log the ETF purchase I just made" all become things you say in a chat, answered from your own records.
Setup is one command
- In Krosos, open Settings, then API access, and generate a token. Read only is the sensible default for an assistant.
- The moment the token appears, so does a ready-made command. For Claude Code it looks like this:
`` claude mcp add krosos --transport http https://app.krosos.com/api/mcp --header "Authorization: Bearer YOUR_TOKEN" ``
- Open a new session and ask something.
Cursor and Claude Desktop take the same URL and header in their MCP settings. On the desktop app it is simpler still: no token exists because no sign-in exists, so the command is just the add line with your local address, shown right in the panel. Nothing off your machine can reach it.
The part that matters: what it can't do
This is your money, so the boundaries are the feature:
- A read-only token can never change a number. Write tools refuse it, every time.
- Nobody can move money, whatever the token. Krosos holds read-only connections to your banks, brokers and exchanges; there is no sell or transfer anywhere in the app for an assistant to find.
- Revoking is instant. Delete the token in Settings and the assistant is out.
- The public part of the endpoint is only the handshake: anyone can ask which tools exist (the same information our public API spec lists), but every actual data call requires your token.
- Underneath it all sits the same architecture as always: your own database, not a row in a shared one.
Krosos is listed on the official MCP Registry as com.krosos/krosos, so it also appears in the MCP directories your assistant's ecosystem uses.
The full how-to, including the skill-file alternative for agents that don't speak MCP, is at krosos.com/docs/api-access. Tax figures remain estimates, not advice, whoever asks for them.