Connect an assistant

A remote Streamable HTTP endpoint

The MCP server is https://app.westara.io/api/mcp.

It is a remote Streamable HTTP endpoint. Send MCP requests there. There is no local install and no stdio server.

OAuth 2.1 with PKCE

The server uses OAuth 2.1, authorization code with PKCE (S256). The client is public. There is no API key and no client secret.

You sign in on a Westara Software page. You do not give the assistant your password.

Public client ids: grok, grok-bot, cursor.

Twelve scopes, nothing else

Nothing is shared until you tick it and allow it. You can remove the connection later. The assistant cannot add, edit, or delete a booking, a rule, a contract, a cash wallet, a position, an illiquid asset, or a savings goal.

It reads your own accounts and the shared household accounts. It does not read another person's private accounts.

Categories, payees and memos that can show health, religion, politics, union membership or sex life stay hidden by default and are left out of every total. You can grant them separately for one client in Westara. Joint accounts stay hidden. Each response includes a note with no count and no amount.

budget.summary.read

Planned and actual amounts per category, and the totals. No payees.

budget.transactions.read

Date, recipient, amount, and category of a booking, plus the account name and its last four digits.

budget.rules.read

The rules that assign a category to a payee.

budget.contracts.read

Recurring obligations: name, cadence, last amount, currency, status, and the next renewal.

cash.wallets.read

Balances of your cash wallets (Portemonnaie / cash, own and joint), currency and last activity. Not bank balances. No writing.

wealth.holdings.read

Positions, home-currency values, and open purchase lots as shown in the app (depot, manual or read key). No trading, no broker write.

wealth.illiquid.read

Name, category, value and ownership (own and joint) — only if you use Sachwerte in the app, otherwise empty. No writing.

budget.savings_goals.read

Name, target, current amount, target date and the monthly amount still needed (own and joint pots). The monthly amount is the remaining gap, not a transfer. No writing.

wealth.net_worth.read

Assets minus loans, by cash, holdings, real estate and Sachwerte. Partner-private accounts stay out. No writing.

wealth.accounts.read

Name, type and balance for own and joint accounts. No IBAN and no provider name. No writing.

household.members.read

Given name and role. No email. Westara does not store ownership shares. No writing.

budget.forecast.read

A cash-flow forecast from the budget plan and typed contract debits. A forecast, not advice. No writing.

Data you grant leaves Westara for that AI provider and follows its terms (including outside the EU). Westara does not control the provider.

Manage and revoke later in the Westara app under Settings → Connected apps.

Add it in Grok Bot

Say “custom MCP server” so the bot does not install a catalog plugin with a similar name.

1. Open Grok Bot.
2. In a chat, ask it to add a custom MCP server named Westara Software at https://app.westara.io/api/mcp. If it asks for a client id, use grok-bot.
3. Confirm when it shows the name and the URL.
4. Choose Authorize. A Westara Software page opens. Sign in there, tick only the reads you want, and allow them. Do not paste your password into the chat.
5. In a chat, type @ and choose the server.

Add it in Cursor

Cursor reads ~/.cursor/mcp.json for every project, or .cursor/mcp.json for one project. You can also open Cursor Settings, then MCP, and add a global MCP server.

1. Add a remote server with the URL below. Set the OAuth client id to cursor. Do not set a client secret or an API key.
2. Save, then choose Connect. The browser opens the Westara Software sign-in.
3. Tick the reads you want and allow them. The tools appear after that.

{
  "mcpServers": {
    "westara-software": {
      "url": "https://app.westara.io/api/mcp",
      "auth": {
        "CLIENT_ID": "cursor",
        "scopes": [
          "budget.summary.read",
          "budget.transactions.read",
          "budget.rules.read",
          "budget.contracts.read",
          "cash.wallets.read",
          "wealth.holdings.read",
          "wealth.illiquid.read",
          "budget.savings_goals.read",
          "wealth.net_worth.read",
          "wealth.accounts.read",
          "household.members.read",
          "budget.forecast.read"
        ]
      }
    }
  }
}

Well-known documents

When the connector is switched on, these documents are public. A client uses them to find the server and the sign-in.

• https://app.westara.io/.well-known/oauth-protected-resource
• https://app.westara.io/.well-known/oauth-protected-resource/api/mcp
• https://app.westara.io/.well-known/oauth-authorization-server
• https://app.westara.io/.well-known/mcp-server

MCP Inspector

Testing instructions for MCP Inspector are available on request.