---
bezeichner: "io.github.ohneben/wafeq-mcp"
art: "mcp_server"
slug: "io-github-ohneben-wafeq-mcp"
paketkoordinate: "oci:ghcr.io/ohneben/wafeq-mcp:2.1.0"
status: "aktiv"
homepage: "https://github.com/ohneben/Wafeq-MCP#readme"
erhebungsstand: "2026-10-11T01:17:01.851Z"
namensraum: "io.github.ohneben"
registerseite: "https://tracevero.com/mcp/io-github-ohneben-wafeq-mcp"
abgerufen_am: "2026-10-11"
zugangsdaten_erforderlich: false
ausfuehrungsort: "lokal"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
einsatzgebiet: "finanzen"
roh_beschreibung: "Wafeq accounting API: all 251 endpoints as safety-categorized MCP tools, over stdio or HTTP."
version: "2.1.0"
roh_umgebungsvariablen: "MCP_TRANSPORT, WAFEQ_API_KEY, WAFEQ_ACCESS_TOKEN, WAFEQ_TOOL_GROUPS, WAFEQ_API_BASE_URL, MCP_AUTH_TOKEN"
roh_geheime_pflichtvariablen: ""
roh_transportarten: "stdio"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/ohneben/Wafeq-MCP"
roh_paketquellen: "oci"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: ""
roh_remote_hosts: ""
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-09-15"
roh_aktualisiert_am: "2026-09-15"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "ghcr.io/ohneben/wafeq-mcp:2.1.0"
roh_paketversionen: ""
roh_laufzeithinweise: "docker"
roh_umgebungsformate: ""
roh_umgebungsbeschreibungen: "MCP_AUTH_TOKEN=Only for MCP_TRANSPORT=http: bearer token required on /mcp. Without it a non-loopback bind refuses to start. · MCP_TRANSPORT=Server transport. Set to 'stdio' for local MCP clients; the image otherwise starts the Streamable HTTP transport. · WAFEQ_ACCESS_TOKEN=OAuth2 app access token, sent as `Authorization: Bearer <token>`. Use instead of WAFEQ_API_KEY. · WAFEQ_API_BASE_URL=Overrides the Wafeq API base URL. Defaults to https://api.wafeq.com/v1 · WAFEQ_API_KEY=Private organization API key, sent as `Authorization: Api-Key <key>`. Wafeq -> Settings -> Developer -> API keys. Required unless WAFEQ_ACCESS_TOKEN is set. · WAFEQ_TOOL_GROUPS=Comma-separated resource groups to expose, e.g. invoices,bills,reports. Empty exposes all 251 generated tools."
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"oci\",\"identifier\":\"ghcr.io/ohneben/wafeq-mcp:2.1.0\",\"runtimeHint\":\"docker\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"MCP_TRANSPORT\",\"description\":\"Server transport. Set to 'stdio' for local MCP clients; the image otherwise starts the Streamable HTTP transport.\",\"required\":true,\"secret\":false},{\"name\":\"WAFEQ_API_KEY\",\"description\":\"Private organization API key, sent as `Authorization: Api-Key <key>`. Wafeq -> Settings -> Developer -> API keys. Required unless WAFEQ_ACCESS_TOKEN is set.\",\"required\":false,\"secret\":true},{\"name\":\"WAFEQ_ACCESS_TOKEN\",\"description\":\"OAuth2 app access token, sent as `Authorization: Bearer <token>`. Use instead of WAFEQ_API_KEY.\",\"required\":false,\"secret\":true},{\"name\":\"WAFEQ_TOOL_GROUPS\",\"description\":\"Comma-separated resource groups to expose, e.g. invoices,bills,reports. Empty exposes all 251 generated tools.\",\"required\":false,\"secret\":false},{\"name\":\"WAFEQ_API_BASE_URL\",\"description\":\"Overrides the Wafeq API base URL. Defaults to https://api.wafeq.com/v1\",\"required\":false,\"secret\":false},{\"name\":\"MCP_AUTH_TOKEN\",\"description\":\"Only for MCP_TRANSPORT=http: bearer token required on /mcp. Without it a non-loopback bind refuses to start.\",\"required\":false,\"secret\":true}],\"additional_arguments_declared\":false}],\"remotes\":[]}"
---

# Wafeq

## Measured values

| Property | Value | Source | Collected on | Level of trust | Raw declaration |
| --- | --- | --- | --- | --- | --- |
| Required secrets declared | false | MCP-Register | 2026-09-09T01:17:01.503Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: |
| Execution location | lokal | MCP-Register | 2026-09-09T01:17:01.503Z | abgeleitet | roh_transportarten: stdio |
| Path argument present | false | MCP-Register | 2026-09-09T01:17:01.503Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository URL listed | true | MCP-Register | 2026-09-09T01:17:01.503Z | abgeleitet | roh_repository_url: https://github.com/ohneben/Wafeq-MCP |
| Field of use, derived from the vendor description | finanzen | MCP-Register | 2026-09-09T01:17:01.503Z | abgeleitet | roh_beschreibung: Wafeq accounting API: all 251 endpoints as safety-categorized MCP tools, over stdio or HTTP. |
| Description (raw) | Wafeq accounting API: all 251 endpoints as safety-categorized MCP tools, over stdio or HTTP. | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Declared version | 2.1.0 | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Environment variables (raw) | MCP_TRANSPORT, WAFEQ_API_KEY, WAFEQ_ACCESS_TOKEN, WAFEQ_TOOL_GROUPS, WAFEQ_API_BASE_URL, MCP_AUTH_TOKEN | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Required secret variables (raw) |  | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Transports (raw) | stdio | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Path arguments (raw) |  | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Repository (raw) | https://github.com/ohneben/Wafeq-MCP | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Package registries (raw) | oci | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Required secret headers (raw) |  | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Path environment variables (raw) |  | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Remote URLs (raw) |  | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Remote hosts (raw) |  | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Registry status message (raw) |  | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| First listed in the registry (raw) | 2026-09-15 | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Last changed in the registry (raw) | 2026-09-15 | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Delivery form (raw) | paket | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Repository platform (raw) | github | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Repository subfolder (raw) |  | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Package identifiers (raw) | ghcr.io/ohneben/wafeq-mcp:2.1.0 | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Package versions (raw) |  | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Runtime hints (raw) | docker | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Environment variable formats (raw) |  | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Environment variable descriptions (raw) | MCP_AUTH_TOKEN=Only for MCP_TRANSPORT=http: bearer token required on /mcp. Without it a non-loopback bind refuses to start. · MCP_TRANSPORT=Server transport. Set to 'stdio' for local MCP clients; the image otherwise starts the Streamable HTTP transport. · WAFEQ_ACCESS_TOKEN=OAuth2 app access token, sent as `Authorization: Bearer <token>`. Use instead of WAFEQ_API_KEY. · WAFEQ_API_BASE_URL=Overrides the Wafeq API base URL. Defaults to https://api.wafeq.com/v1 · WAFEQ_API_KEY=Private organization API key, sent as `Authorization: Api-Key <key>`. Wafeq -> Settings -> Developer -> API keys. Required unless WAFEQ_ACCESS_TOKEN is set. · WAFEQ_TOOL_GROUPS=Comma-separated resource groups to expose, e.g. invoices,bills,reports. Empty exposes all 251 generated tools. | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |
| Icon formats (raw) |  | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft |  |
| Connection paths (source structure) | {"packages":[{"registryType":"oci","identifier":"ghcr.io/ohneben/wafeq-mcp:2.1.0","runtimeHint":"docker","transport":"stdio","environment":[{"name":"MCP_TRANSPORT","description":"Server transport. Set to 'stdio' for local MCP clients; the image otherwise starts the Streamable HTTP transport.","required":true,"secret":false},{"name":"WAFEQ_API_KEY","description":"Private organization API key, sent as `Authorization: Api-Key <key>`. Wafeq -> Settings -> Developer -> API keys. Required unless WAFEQ_ACCESS_TOKEN is set.","required":false,"secret":true},{"name":"WAFEQ_ACCESS_TOKEN","description":"OAuth2 app access token, sent as `Authorization: Bearer <token>`. Use instead of WAFEQ_API_KEY.","required":false,"secret":true},{"name":"WAFEQ_TOOL_GROUPS","description":"Comma-separated resource groups to expose, e.g. invoices,bills,reports. Empty exposes all 251 generated tools.","required":false,"secret":false},{"name":"WAFEQ_API_BASE_URL","description":"Overrides the Wafeq API base URL. Defaults to https://api.wafeq.com/v1","required":false,"secret":false},{"name":"MCP_AUTH_TOKEN","description":"Only for MCP_TRANSPORT=http: bearer token required on /mcp. Without it a non-loopback bind refuses to start.","required":false,"secret":true}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-16T01:17:01.931Z | selbstauskunft |  |

## Links

- Namespace: [[namensraum/io-github-ohneben|io.github.ohneben]]

---

- Registry page: <https://tracevero.com/mcp/io-github-ohneben-wafeq-mcp>
- Retrieved on: 2026-10-11
