ibi-portfolio-mcp

A read-only MCP server for IBI (Israel Brokerage & Investments, אי.בי.אי). It lets Claude, ChatGPT, Cursor and other AI apps read your IBI portfolio (positions, cash, profit/loss and recent account activity) so you can ask things like "how is my portfolio doing?". It cannot buy, sell or move money. Works on Mac and Windows.

🇮🇱 שרת MCP לקריאה בלבד עבור חשבון המסחר שלך באי.בי.אי (IBI NextGen). הוא נותן ל-Claude, ל-ChatGPT או לכל עוזר AI אחר לראות את תיק ההשקעות שלך: אחזקות, מזומן, רווח והפסד ופעולות אחרונות. הוא לא יכול לבצע פקודות קנייה או מכירה. הסיסמה נשמרת רק במחשב שלך ולא מגיעה למודל. עובד על Mac ועל Windows.

Unofficial. Not affiliated with or endorsed by IBI.

Demo with made-up numbers. The answer is a real reply from Claude.

How it is secured

Your IBI login gives full access to your money, so this is the most important part.

Your password

• 🔒 It is saved only in your computer's own secure vault: Keychain on Mac, Credential Manager on Windows. Both are encrypted by your operating system. It is never saved in a file.
• 🔒 It is typed only into IBI's real login page (auth.ibi.co.il), over HTTPS, inside a hidden browser on your own computer.
• 🔒 It is never sent to the AI. The AI cannot ask for it: no tool takes a password, and no tool returns one.
• 🔒 Your AI app's settings hold only the location of the program, not your username or password.
• 🔒 It is never written to logs, and error messages are cleaned of your username and password before the AI sees them (there is a test for this).

Your account

• 🛡️ Read-only. There is no code to buy, sell, cancel or transfer anything.
• 🛡️ The only things it clicks are the Login button, the login form's submit button and the "Latest Account Activity" tab.
• 🛡️ A second safety net: a built-in guard blocks any request sent to an order, trade, transfer, deposit or withdrawal address, even if IBI's website tried to send one, and tells you if it ever had to.
• 🛡️ It does not collect your account number, your name or your personal details.

Your data

• 🏠 Everything runs on your computer. There is no server of ours, no sign-up, no tracking and no analytics. When it reads your portfolio, it opens only IBI's website, which loads exactly as it does in your own browser. (Installing downloads the program and its browser once, from GitHub, PyPI and Microsoft's Playwright servers.)
• 🧹 Nothing is kept on disk: each read opens a fresh browser and closes it after, with no cookies, tokens or sessions saved. The last result stays in memory for 5 minutes, then it is gone.
• 👀 What the AI does see: your portfolio numbers (positions, values, cash, profit/loss, recent activity). They go to your AI company like any other chat message, under its privacy policy.

What it cannot protect you from

• ⚠️ Someone who can use your unlocked computer, or malware on it, could read your portfolio the same way. Keep your computer locked and updated.
• ⚠️ This is an unofficial tool. Before trusting it with your login, read the code yourself (about 750 lines, start with scraper.py) or ask an AI to review it for you.

Remove it anytime

• ibi-portfolio-mcp forget deletes the saved login from your vault.
• uv tool uninstall ibi-portfolio-mcp removes the program.
• Changing your IBI password also stops it from logging in.

🇮🇱 בקצרה: הסיסמה נשמרת רק בכספת המוצפנת של המחשב שלך (Keychain / Credential Manager) ולא נשלחת אף פעם ל-AI. הכלי רק קורא נתונים: אין בו קוד לקנייה, מכירה או העברת כסף, ויש חסימה מובנית לכל בקשה כזו. הכל רץ אצלך במחשב, בלי שרת ובלי מעקב. ה-AI רואה רק את מספרי התיק (אחזקות, שווי, מזומן, רווח והפסד).

Which AI apps work

It runs on your own computer, so it works with AI apps installed on your computer. Website-only chats cannot reach it.

Linux works too if you are comfortable with a terminal.

Set it up (about 5 minutes)

You will copy 3 lines into a terminal. The terminal is the "Terminal" app on Mac, and "PowerShell" from the Start menu on Windows.

1. Install uv (a small free tool that installs Python programs).

Mac:

curl -LsSf https://astral.sh/uv/install.sh | sh

Windows:

powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"

Then close the terminal and open a new one.

2. Install IBI Portfolio MCP:

uv tool install https://github.com/kobimantzur/ibi-portfolio-mcp/archive/refs/heads/main.zip

3. Run the guided setup:

ibi-portfolio-mcp setup

It will:

1. Ask for your IBI username and password. The password is hidden as you type and saved only in your computer's secure vault (Keychain on Mac, Credential Manager on Windows).
2. Download the small browser it uses to read IBI (one time, about 100 MB).
3. Test the login (about a minute).
4. Connect the AI apps it finds. Say yes to the ones you use.

4. Restart your AI app and ask: "How is my IBI portfolio doing?"

Prefer not to type commands?

If you have Claude Code or Codex (built into the ChatGPT desktop app), paste this and it does steps 1 and 2 for you:

Install https://github.com/kobimantzur/ibi-portfolio-mcp for me with steps 1 and 2 of its README. Do not run ibi-portfolio-mcp setup yourself and never ask me for my IBI password in the chat. When you are done, tell me to run ibi-portfolio-mcp setup in my own terminal.

Then run ibi-portfolio-mcp setup yourself, so you are the only one who types the password.

Try it with fake data first

Want to see it work before using your account? Run IBI_DEMO=1 ibi-portfolio-mcp check (Mac) or $env:IBI_DEMO=1; ibi-portfolio-mcp check (Windows). It answers with a made-up portfolio and does not log in to IBI.

What you get

Example questions once it is connected:

• "What's my IBI portfolio worth and how much cash do I have?"
• "Which 5 positions are the biggest, and what is the P/L on each?"
• "What did I buy or sell this month?"

{
  "currency": "USD",
  "total_value": 54105.1,
  "market_value": 49284.75,
  "cash": 4820.35,
  "cash_pct": 8.91,
  "total_cost": 41460.9,
  "unrealized_pl": 7823.85,
  "unrealized_pl_pct": 18.87,
  "position_count": 8,
  "positions": [
    {
      "symbol": "VOO", "qty": 22.0, "last_price": 541.3, "change_pct": 0.4,
      "cost_price": 455.1, "market_value": 11908.6, "total_cost": 10012.2,
      "todays_pl": 47.63, "unrealized_pl": 1896.4, "unrealized_pl_pct": 18.94, "weight_pct": 22.01
    },
    {
      "symbol": "AAPL", "qty": 40.0, "last_price": 228.9, "change_pct": -0.6,
      "cost_price": 171.25, "market_value": 9156.0, "total_cost": 6850.0,
      "todays_pl": -54.94, "unrealized_pl": 2306.0, "unrealized_pl_pct": 33.66, "weight_pct": 16.92
    }
  ],
  "balances": { "buying_power": 4820.35, "balance_usd": 4820.35 },
  "fetched_at": "2026-10-27T14:05:12+00:00",
  "source": "demo"
}

{
  "ref": "D-1003", "symbol": "NVDA", "side": "BUY", "status": "Filled", "order_type": "Limit",
  "created_at": "2026-10-21T10:02:11", "executed_at": "2026-10-21T10:02:13",
  "qty": 10.0, "exec_qty": 10.0, "limit_price": 135.0, "exec_price": 134.8,
  "profit_loss": null, "commission": 2.5, "fees": null, "currency": "USD"
}

Read-only, on purpose

Your login gives full access to your account, so you (or a developer friend) can read scraper.py before using this. It is about 200 lines.

Which IBI accounts work

• ✅ IBI NextGen (the US-stocks platform at ibi.orbisfn.io, English UI)
• ❌ Other IBI platforms (for example the Israeli TASE trading site) are not supported yet. PRs welcome.

Your IBI password (secrets)

This is the part to get right, so here is exactly what happens.

What it needs

Your IBI NextGen username (email or ID) and password, the same ones you type at ibi.orbisfn.io. IBI has no API and no read-only keys, so the server logs in the way you do: it opens a hidden browser on your own computer and types them into IBI's real login page.

Where your password goes, and where it does not

What the AI does see: your portfolio numbers. Whatever a tool returns goes to your AI provider like any other chat message. If that is not OK for you, do not connect this server.

Ways to store the password (best first)

If several are set, the order is: IBI_USER / IBI_PASS, then IBI_USER_CMD / IBI_PASS_CMD, then the vault.

Option 2: password manager. Any command that prints only the password:

IBI_PASS_CMD=op read op://Private/IBI/password          # 1Password
IBI_PASS_CMD=bw get password ibi.orbisfn.io             # Bitwarden (vault must be unlocked)

IBI_USER_CMD works the same way for the username.

Options 3 and 4 put the password in a plain file. Keep that file private and never share or commit it. The server loads .env from the folder it starts in, or the file named in IBI_ENV_FILE.

Change or remove the saved login

ibi-portfolio-mcp forget     # removes it from the vault
ibi-portfolio-mcp setup      # saves a new one

SMS code (two-factor)

If IBI asks for a one-time code, the tool returns an IbiOtpRequired error. Set IBI_HEADED=1 (in the app's env block, or in the terminal before check): a visible browser window opens, the server fills in your username and password, and you type the code yourself. You get 3 minutes.

If you think your password leaked

Change it at IBI, then run ibi-portfolio-mcp setup again.

Connect by hand

setup does this for you. Use this section for other apps, or if you prefer editing settings yourself.

First get the program's full path: which ibi-portfolio-mcp (Mac) or where.exe ibi-portfolio-mcp (Windows). Below it is PATH_TO/ibi-portfolio-mcp.

Claude Desktop, Cursor, VS Code, Windsurf and most apps (JSON). Claude Desktop's file is ~/Library/Application Support/Claude/claude_desktop_config.json on Mac and %APPDATA%\Claude\claude_desktop_config.json on Windows; Cursor's is ~/.cursor/mcp.json.

{
  "mcpServers": {
    "ibi-portfolio": {
      "command": "PATH_TO/ibi-portfolio-mcp",
      "args": []
    }
  }
}

On Windows, write the path with double backslashes, for example "C:\\Users\\you\\.local\\bin\\ibi-portfolio-mcp.exe".

ChatGPT desktop app and Codex (~/.codex/config.toml, or in the app: Settings → MCP servers). Raise the tool timeout: a fresh IBI read takes about a minute and the default is 60 seconds.

[mcp_servers.ibi-portfolio]
command = 'PATH_TO/ibi-portfolio-mcp'
startup_timeout_sec = 30
tool_timeout_sec = 300

Claude Code:

claude mcp add --scope user ibi-portfolio -- PATH_TO/ibi-portfolio-mcp

Restart the app after any change.

Settings

Set these in the app's env block or in the terminal. All are optional.

How it works

1. A tool is called. If the last read is newer than IBI_CACHE_SECONDS, it is returned as is.
2. Otherwise a fresh hidden browser opens ibi.orbisfn.io and logs in with your saved login.
3. The IBI web app loads your data from its own backend. The server keeps a copy of those responses (portfolio, balance, latest activity) and reads the page as a fallback.
4. The browser is closed and the numbers are returned. Nothing is written to disk.

A read takes about 30 to 60 seconds. If IBI changes its website this can break; open an issue with the error text (never paste your password or screenshots with your balances).

Troubleshooting

For developers

git clone https://github.com/kobimantzur/ibi-portfolio-mcp
cd ibi-portfolio-mcp
uv sync
uv run pytest -q
uv run ibi-portfolio-mcp check      # needs a saved login, or IBI_DEMO=1

Tests use made-up numbers only. Never commit real account data. To re-record the demo GIF: uv run python docs/demo/record.py.

Disclaimer

Unofficial project, not affiliated with IBI Israel Brokerage & Investments. It automates your own login to read your own data; check that this fits IBI's terms of use for your account. Use at your own risk. Nothing here is investment advice. MIT license.