degiro-mcp

A read-only MCP server for your DEGIRO account. It lets Claude (or any MCP client) answer questions about your holdings, cash, trades and dividends.

Unofficial, and you use it at your own risk. This project is not affiliated with or endorsed by DEGIRO or flatexDEGIRO Bank. Read the Disclaimer before you give it your login.

Read-only by design

Your DEGIRO login can trade, so this server makes sure it never does:

• No write tools. It has no tools to place, change or cancel orders, or to edit favourites or notes.
• An HTTP guard blocks everything else. Every request the server's DEGIRO session sends is checked before it leaves your machine. Only GETs to trader.degiro.nl and DEGIRO's price feed, the login call and the product-details lookup get through. Any other request is refused and reported as an error, even if a future code change tries to send it. The one request that skips the guard is a plain GET: when DEGIRO answers a login with "under maintenance", degiro-connector fetches the maintenance page to show you its text.
• Your credentials stay with you. They are read from environment variables or the macOS Keychain and sent only to DEGIRO.
• No lockout from retries. If DEGIRO rejects your credentials, the server never sends the same ones again.

Tools

Fields ending in _base are in your account's base currency. Date ranges end today unless you pass to_date, and start on 1 January of the end date's year unless you pass from_date.

get_portfolio prices positions the way the DEGIRO app does, from DEGIRO's own price feed. Each position's price_quality is REALTIME or DELAYED (15 minutes), depending on your DEGIRO market-data subscription. It is CLOSE when the feed has no price, and the position is then valued at the last close.

Setup

You need uv. Choose how you log in:

DEGIRO_TOTP_SECRET is the 32-character setup key DEGIRO shows when you turn on 2FA. You can also take it from the secret= part of the QR code. DEGIRO shows it only once, so if you don't have it you'll need to switch 2FA off and on again. Add the new code to your authenticator app at the same time.

Claude Code

claude mcp add degiro \
  -e DEGIRO_USERNAME=your-username \
  -e DEGIRO_PASSWORD='your-password' \
  -e DEGIRO_TOTP_SECRET=YOURSETUPKEY \
  -- uvx degiro-mcp

Claude Desktop and other clients

{
  "mcpServers": {
    "degiro": {
      "command": "uvx",
      "args": ["degiro-mcp"],
      "env": {
        "DEGIRO_USERNAME": "your-username",
        "DEGIRO_PASSWORD": "your-password",
        "DEGIRO_TOTP_SECRET": "YOURSETUPKEY"
      }
    }
  }
}

macOS Keychain (keeps the password out of config files)

security add-generic-password -s degiro-mcp -a DEGIRO_USERNAME -w   # prompts for the value
security add-generic-password -s degiro-mcp -a DEGIRO_PASSWORD -w
security add-generic-password -s degiro-mcp -a DEGIRO_TOTP_SECRET -w   # optional
claude mcp add degiro -e DEGIRO_KEYCHAIN_SERVICE=degiro-mcp -- uvx degiro-mcp

Configuration

Troubleshooting

• "DEGIRO wants a captcha": log in once at trader.degiro.nl in a browser, then try again.
• "DEGIRO rejected the username, password or 2FA key": fix the credentials. The server won't resend rejected ones. A Keychain change takes effect on the next call; an env var change needs a restart of your MCP client.
• Scheduled maintenance: DEGIRO's API is down during its maintenance windows. Try again later.

Development

uv run --group dev pytest

Disclaimer

• Unofficial. This is a community project. It is not affiliated with, endorsed by or supported by DEGIRO or flatexDEGIRO Bank. "DEGIRO" is used only to say which service the software works with.
• No public API. DEGIRO doesn't offer one. This server uses the community degiro-connector library, which talks to the same private endpoints as DEGIRO's website and app. DEGIRO can change them at any time, and the server can stop working without notice.
• Check DEGIRO's terms. Automated access to your account may not be allowed by DEGIRO's terms of service. Read them before you use this. Your account is your responsibility, including any restriction or lockout DEGIRO applies to it.
• Use at your own risk. The software is provided "as is", without warranty of any kind (see the MIT license). The authors are not liable for any loss, including financial loss, account restrictions or exposed credentials.
• Not financial advice. Nothing this server or an AI assistant using it tells you is investment advice. Prices can be delayed, so check figures in DEGIRO before you act on them.

License

MIT