MyCaisse ships a remote MCP server: agents read/write freely, money moves only after human approval

Glittering-Cup9298 · reddit · 2026-11-01

The indie dev behind MyCaisse, a cash/budget app, launched a remote MCP server connectable from ChatGPT, Claude, or any MCP client. Agents can read accounts and write entries, but sending money always creates a pending request requiring in-app human approval. The stack includes a self-built OAuth 2.1 server (dynamic client registration, PKCE S256, rotating refresh tokens with replay revocation), per-account consent-scoped permissions, idempotency keys on writes, DB-level aggregation summaries, and a rule that agents can only delete entries they created in the last 7 days.

Original post →

More from coding & agent

coding & agent channel →