Back to Browse

Switchwize MCP Server

Developer ToolsModerate7.6MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Sixteen read-only US rate, savings-gap, Fed, card and CD tools with sources and freshness.

About

Sixteen read-only US rate, savings-gap, Fed, card and CD tools with sources and freshness.

Remote endpoints: streamable-http: https://www.switchwize.com/api/mcp

Security Report

7.6
Moderate7.6Low Risk

This is a thin stdio MCP proxy that forwards read-only tool calls to SwitchWize's public rate-data API, with no credentials required, which matches its stated purpose. The main concerns are low-severity: remote tool output is passed to the model without validation, tool inputs such as balance are sent to a third-party host, and the SWITCHWIZE_API_URL override can redirect all traffic. No malicious patterns, hardcoded secrets, or shell execution were found. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

4 files analyzed · 10 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

SwitchWize MCP client

Read-only MCP tools for U.S. rates, savings comparisons, financial indexes, card offers and changes, rewards, CD rollover rules, and downgrade paths.

Connect now

For clients supporting Streamable HTTP, use the hosted endpoint:

https://www.switchwize.com/api/mcp

No SwitchWize account or API key is required. The API is rate-limited. Documentation: SwitchWize Developers.

Run the stdio client from source

Use a supported Node.js LTS release and npm:

git clone https://github.com/switchwize/switchwize-mcp.git
cd switchwize-mcp
npm ci --ignore-scripts
npm run build
npm start

For a desktop MCP client, configure command node with the absolute path to dist/index.js as its argument. No environment file or database credentials are needed. SWITCHWIZE_MCP_URL is an optional full MCP endpoint override for developers.

Run from npm

npx -y switchwize-mcp@0.3.0

For a desktop MCP client, configure command npx with arguments ["-y", "switchwize-mcp@0.3.0"]. No API key is required.

The source bridge and package manifest now use 0.3.0, matching the published npm bridge. Building this repository does not republish the existing npm version.

Available tools

  • get_top_rates
  • get_top_hysa_rates
  • get_bank_gap
  • compare_switch_savings
  • get_rate_freshness
  • get_index_dataset
  • get_bank_gap_index
  • get_reality_score
  • get_card_offers
  • get_transfer_bonuses
  • get_card_changes
  • get_reward_valuations
  • best_move_this_week
  • get_cd_rollover_rules
  • get_card_downgrade_path
  • get_fed_hike_pass_through

The hosted server currently discovers 16 tools, three prompts, and four resources. The source-built stdio bridge forwards the hosted tool schemas and annotations, prompts, resources, structured results and tool error status.

The client connects to /api/mcp using Streamable HTTP and exposes that catalog over stdio. It does not initiate financial transactions or request bank credentials. Balance inputs supplied to tools are transmitted to the hosted API; do not include account numbers or other sensitive identifiers.

Validate a source checkout

npm run verify:package checks the build and package contents without publishing. npm run verify:live compares the source bridge's tools, prompts and resources with the public hosted service and performs a hypothetical Bank Gap call. It requires network access and contributes internal acceptance traffic; it does not establish independent user adoption or verify every upstream data source.

Data boundaries

Observations may be aggregator-sourced and may be aging. Preserve each response's source dates and freshness labels. Monthly index data is not a current offer. Confirm product terms directly with the provider before making a decision.

Savings-gap figures are hypothetical estimates. The comparison benchmark is the average of the top three tracked savings rates, not an average across every tracked bank. Card Reality Scores model a consumer segment's assumptions and may carry stale terms; they are not personalized advice or guaranteed benefits.

Attribute data as SwitchWize (switchwize.com). The MIT license covers this client software, not upstream datasets, third-party materials, or trademarks. See data and service terms.

Package verification

npm run verify:package builds the client and checks the npm tarball against an exact allowlist: LICENSE, README.md, dist/index.js, and package.json. npm pack creates a local tarball; neither command publishes it.

License: MIT. Copyright SW Digital Holdings LLC.

Reviews

No reviews yet

Be the first to review this server!