Updated September 5, 2026.
This private service lets invited users read and change their own YNAB records through ChatGPT. It accesses budgets, accounts, categories, payees, transactions and scheduled transactions only to carry out requested operations.
We store your Auth0 issuer and user identifier, OAuth client registrations, authorization grants, and encrypted YNAB credentials in a persistent SQLite database. MCP bearer tokens are hashed for lookup. To prevent duplicate creation, encrypted idempotency records include a request fingerprint and the resulting transaction. These records and your account link remain until the operator deletes them; revoking upstream access does not automatically erase stored records.
API responses may be cached in memory for 30 seconds. Pagination snapshots may retain matching records in memory for five minutes. Writes invalidate the affected user's cached data. Operational logs record tool name, request ID, duration and status, not financial payloads or credentials.
Requested results are sent to your ChatGPT conversation and are subject to OpenAI's privacy policy. Auth0 handles login, Railway hosts the service, and YNAB provides the account data. We do not sell data or use it for advertising or profiling.
Production communication uses HTTPS. Stored records use authenticated encryption; provider credentials are not returned to ChatGPT. Revoke YNAB access in its authorized-app settings and remove the ChatGPT connection to stop future access. Previously returned conversation data is controlled separately through ChatGPT. To request deletion of stored account and idempotency data, contact j.grasso87@gmail.com. Backups may retain deleted data until the operator removes or expires them.