v2.1.1

Harden MCP tool discovery for Claude and Codex. Adds explicit YNAB auth/status and discovery helper tools, keeps the catalog discoverable when credentials are missing, and exposes write tools when YNAB_ALLOW_WRITES=1.

v2.1.0

Categorization-session ergonomics, two new bulk write tools, and a group-total rounding fix. Tool surface grows 45 → 47. Read-only by default (v2.0.0 safety model); write tools require YNAB_ALLOW_WRITES=1.

New write tools (hidden unless YNAB_ALLOW_WRITES=1)

• approve_transactions — bulk-approve unapproved transactions by filter (payeeId / categoryId / accountId), skipping uncategorized by default. Removes the build-a-large-ID-batch-by-hand step.
• reassign_payee_transactions — move all transactions from one payee to another (the merge workaround, since the YNAB API has no payee delete/merge endpoint).

Ergonomics

• review_unapproved gains compact: true — keeps per-transaction rows (with IDs) but drops bulky fields, so the response fits inline instead of overflowing to a file.
• update_transactions gains returnSummary: true — returns { updated_count, approved_count, verification } instead of full transaction objects.

Fixes

• Group totals now round to cents. review_unapproved by-payee totals and get_overspent_categories summed float amounts with raw reduce/+=, producing IEEE-754 artifacts (e.g. -53.730000000000004). A round2() helper is applied at all three total sites.

Install

Download ynab-mcp-server-2.1.0.mcpb below and open it with an MCPB-compatible client.

npm publish of this version is pending separate npm-auth recovery; this GitHub release ships the MCPB bundle.

v2.0.0

Highlights

• Defaults to read-only tool registration. Write tools are available only when YNAB_ALLOW_WRITES=1 is set at MCP server startup.
• Adds MCP tool annotations for read/write/destructive behavior.
• Pins outbound YNAB HTTP requests to https://api.ynab.com, disables redirect following, redacts bearer tokens from surfaced errors, and adds client-side rate limiting.
• Adds YNAB_API_TOKEN_FILE token fallback with a small-file guard.
• Keeps update_transactions post-write refetch verification for the category+approval bulk-update anomaly.
• Adds hosted OAuth connector guidance based on the Cloudflare/OAuth-provider pattern.

Verification

• npm test: 41 passed, 0 failed, 4 skipped
• npm run test:safety
• npm run smoke:list-tools
• YNAB_ALLOW_WRITES=1 npm run smoke:list-tools
• npm run smoke:review-unapproved
• YNAB_ALLOW_WRITES=1 YNAB_RATE_LIMIT_PER_HOUR=0 npm run smoke:batch-verify
• npm run release:check
• npm pack --dry-run

v1.8.3

What changed

• Hardened update_transactions so it refetches every requested transaction after the YNAB bulk update, verifies requested fields persisted, retries mismatches once through update_transaction, and returns a verification block.
• Added live regression coverage for combined categoryId + approved batch updates.
• Added npm run smoke:batch-verify for stdio MCP smoke testing of review_unapproved, update_transactions, and post-write refetch verification.
• Documented that review_unapproved queue counts are not enough after approval batches and that manual transfer fixes can replace one side of a transfer pair with a new transaction ID.

Verification

• npm run release:check
• npm run smoke:batch-verify
• npm run smoke:list-tools
• npm run smoke:review-unapproved
• npm test (41 passed, 0 failed, 4 skipped)
• MCPB artifact unpack/list-tools smoke test (45 tools)
• npm pack --dry-run

v1.8.2

What changed

• Added MCP SDK smoke tests for listing tools and calling review_unapproved in summary mode over stdio.
• Added release consistency checks for package metadata, server metadata, README release links, MCPB artifact references, and README tool counts.
• Added a reproducible MCPB build script and refreshed README release/debug documentation.
• Updated repo/package/server metadata to v1.8.2 and corrected README tool count to 45 tools.

Verification

• npm run release:check
• npm run smoke:list-tools
• npm run smoke:review-unapproved
• npm test (40 passed, 0 failed, 4 skipped)
• MCPB artifact unpack/list-tools smoke test (45 tools)
• npm pack --dry-run

v1.4.0

Aligns the GitHub release with the already-published npm package @oliverames/ynab-mcp-server@1.4.0.\n\nIncludes:\n- ynab-mcp-server-1.4.0.mcpb for MCPB-compatible clients\n- README links updated to the v1.4.0 bundle\n- Package metadata and server version aligned to 1.4.0

v1.3.0 - MCPB Bundle

MCPB bundle for one-click local MCP server installation.\n\nIncludes a 512x512 connector icon sourced from the YNAB official-site favicon, production runtime dependencies, and an MCPB manifest with credential prompts.\n\nBuilt from GitHub source for ynab-mcp-server on 2026-04-21.\n\nSHA-256: 4f741a5e582751b4bf9c3597a56753edfaebb051f65a4d3d6074849d8232adb2