Security-first, self-hosted MCP server for Firefly III: 152 operations behind 5 scoped tools.
- 5 tools instead of 152: query, mutate and destructive, plus two discovery tools; a typed registry maps every Firefly endpoint onto them.
- dry_run on every write returns the exact request, resolved record IDs included, without sending it.
- Bulk writes need max_matches and refuse an incomplete scan before the first write.
TypeScriptMCPDocker











