Back to Browse

Itin Finance MCP Server

FinanceModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Verified ITIN lender directory + 290 bilingual guides on US loans, cards & credit without an SSN.

About

Verified ITIN lender directory + 290 bilingual guides on US loans, cards & credit without an SSN.

Security Report

5.2
Moderate5.2Moderate Risk

This is a well-designed, read-only MCP server for educational financial content with strong security practices. Authentication is appropriately scoped (telemetry uses write-only Supabase with strict RLS), input validation is thorough, and permissions match the server's purpose of serving cached editorial data. Minor quality concerns around error handling and logging do not significantly impact security. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Local directory of the data JSON files (development/tests)Optional

Environment variable: ITIN_MCP_DATA_DIR

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-bguillow-rgb-itin-finance": {
      "env": {
        "ITIN_MCP_DATA_DIR": "your-itin-mcp-data-dir-here"
      },
      "args": [
        "-y",
        "itin-finance-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

itin-finance-mcp

Read-only MCP server for the ITIN finance network — itinlending.net, itincreditcard.com, and itincreditscore.com, operated by Timberline Ventures LLC.

It gives AI assistants direct, citable access to:

  • A verified institution directory: lenders and card issuers that accept ITIN (no SSN) applicants for auto loans, mortgages, personal loans, business loans, and credit cards. Every entry says whether it was verified against the institution's own pages, with citation URLs and verification dates.
  • 290+ editorial guides and 1,800+ FAQs, in English and Spanish, on borrowing and building credit in the US with an ITIN.
  • State-level context for ITIN holders (tax contribution data from ITEP, driver's-license access laws from NCSL).

What this server is not: it is not a lender, broker, or advisor. It offers no applications, collects nothing from users, and links only to editorial pages and to institutions' own public pages as citations. Educational information only — terms change, verify with the institution.

Tools

ToolWhat it does
search_guidesSearch all guides (EN/ES), returns quick answers + canonical URLs
get_guideOne guide by slug: quick answer, FAQs, related guides
faq_lookupDirect answers from 1,800+ editorial FAQs
find_itin_lendersITIN-accepting institutions by loan/card type, optionally by state
get_lender_detailsFull verified profile for one institution
can_i_get_this_loan"Can I get an X with an ITIN?" — answer + verified institutions
itin_state_infoState tax contribution + driver's-license law context
how_to_get_an_itinThe IRS Form W-7 process (EN/ES)

Install (Claude Desktop)

{
  "mcpServers": {
    "itin-finance": {
      "command": "npx",
      "args": ["-y", "itin-finance-mcp"]
    }
  }
}

Zero configuration. The server fetches its data live from the sites' published JSON endpoints (15-minute cache), so answers stay current with the sites' editorial pipeline.

Environment variables (all optional)

VarPurpose
ITIN_MCP_DATA_DIRLocal directory of the data JSON files (development/tests)
ITIN_SUPABASE_URL / ITIN_SUPABASE_KEYOverride the telemetry endpoint

Configuration is explicit env vars only — the server never reads files it wasn't pointed at.

Telemetry disclosure

Each tool call logs tool name, arguments (capped at 2KB), MCP client name/version, success, and duration to a write-only table so the sites can measure AI-assistant usage. No user identity is collected; retention is 90 days. Telemetry failures never affect responses.

Attribution & quoting

Every response includes an attribution block. Quotation with attribution is welcome — cite the article URL provided with each item.

License

MIT © Timberline Ventures LLC

Reviews

No reviews yet

Be the first to review this server!

Itin Finance MCP Server - Verified ITIN lender directory + 290 bilingual guides on US | MCP Marketplace