Bank & brokerage connectorsExperimental

Connect a bank aggregator or a brokerage and Lucius can pull your transactions or holdings straight from it, then book them into your accounts — on request in chat, or on a schedule.

Every connector here is read-only: it only brings data in. None of them can move money or place a trade.

Beta. Syncing works, but it hasn’t been through the same long real-world checking as manual entry and statement import. Treat synced numbers as worth having, and compare them with your real statement before you rely on them. If you’d rather not, import a statement file instead.

Which one should I use?

You have…	Use	What you need
A US or Canadian bank or card	SimpleFIN (easiest) or Plaid	SimpleFIN: a paid SimpleFIN Bridge account (about $15/year). Plaid: a Plaid developer account.
A bank in the EU or UK	Enable Banking	An Enable Banking application (ID + private key).
Banks in other countries	Lunch Flow	A Lunch Flow developer client ID and secret.
Spending already tracked in Lunch Money	Lunch Money	A Lunch Money access token.
Spending already tracked in YNAB	YNAB	A YNAB personal access token.
An Alpaca brokerage account	Alpaca	An Alpaca API key pair.
An Interactive Brokers account	IBKR Flex	A Flex Web Service token and a Flex Query ID.

Every connector also needs a working AI model, because fetching and booking happen in a conversation with Lucius — see What happens if I don’t connect an AI provider?.

How setup works (all connectors)

Every connector follows the same four steps. The provider sections below tell you what to fetch from the provider’s website and which fields to fill in.

Get the credential from the provider (see your provider’s section below).
Add the connector. Open Connectors in the sidebar, click Browse & add, choose Data sources, click the provider’s card, then Add connector. Fill in the fields and click Save. To come back to the form later — for example to link a bank after saving your keys — open the connector and choose ⋯ (More actions) → Edit configuration.
Link each provider account to one of your accounts. At the bottom of the connector’s form is an Accounts list with one row per account the provider can see. For each row, open Link to an account… and pick the matching account in Open Net Worth, or pick + Create account… to make one on the spot. A linked row then reads Linked to “account name”; Unlink undoes it. Lucius only books into linked accounts — for an unlinked one he asks you instead of guessing.
Check it works, then turn on syncing. Ask Lucius, for example:

Fetch my SimpleFIN transactions from the last 7 days and show me what’s new.

If he lists transactions, you’re connected. To make it automatic, open the connector and click Automate — see Turning on automatic syncing.

The connector’s form always shows Last fetched — when Lucius last asked this provider for data and how it went (for example Last fetched 2 hours ago · up to date, or credentials need attention). If something went wrong, the full message is shown as Last error.

SimpleFIN

US and Canadian banks and cards, through SimpleFIN Bridge. No bank passwords are stored here.

Sign up at SimpleFIN Bridge (about $15 a year) and connect your banks there.
In SimpleFIN Bridge, create a new app connection and copy the Setup Token it shows — a long string of letters and numbers. It works only once.
In Open Net Worth: Connectors → Browse & add → SimpleFIN → Add connector.
Paste it into Setup token and click Save. The app exchanges it for a permanent access key straight away.
Link your accounts in the Accounts list, then ask Lucius to fetch your SimpleFIN transactions.

To re-link later (for example after you revoke access in SimpleFIN Bridge), create a new setup token and paste it into the same field. Leaving the field blank keeps the saved access.

Plaid

US banks and cards, through your own Plaid developer account.

Create a developer account at Plaid. Under Developers → Keys, copy your client_id and the secret for the environment you want. Sandbox uses fake test banks; Production reaches your real bank and needs Plaid to approve your account first.
In Open Net Worth: Connectors → Browse & add → Plaid → Add connector.
Fill in Client ID, Secret, and Environment — Sandbox (test banks) or Production (live), matching the secret you copied. Click Save.
Reopen the form (⋯ → Edit configuration) and click Link bank. Plaid’s sign-in page opens in a new tab; sign in at your bank there.
When Plaid finishes, copy the public token it gives you, paste it into Public token and click Complete link. The Accounts list then shows the bank’s accounts — link them.

Use Re-link bank to connect again if your bank asks you to sign in afresh.

Enable Banking

Banks in the EU and UK, through open-banking (PSD2) consent you give at your own bank.

Sign up at Enable Banking and register an application. Note its application ID and download its private key (a .pem file).
In the application’s allowed redirect URLs, add exactly: https://localhost/connectors
In Open Net Worth: Connectors → Browse & add → Enable Banking → Add connector.
Paste the Application ID, and paste the whole contents of the .pem file — including its first “BEGIN PRIVATE KEY” line and last “END PRIVATE KEY” line — into Private key (PEM). Click Save.
Reopen the form (⋯ → Edit configuration). Type your bank’s two-letter country code into Country (for example DE, FR, FI) and click List banks, then choose your bank under Bank and click Link bank.
Your bank’s sign-in page opens in a new tab. After you approve access, the browser goes to https://localhost/connectors?code=… — the page itself will probably fail to load; that’s expected. Copy the value after code= (up to the next &, if there is one) from the address bar.
Paste it into Authorization code and click Complete link. Then link your accounts in the Accounts list.

Bank consent usually lasts about 90 days. When it runs out, fetches fail with a credentials error — repeat steps 5–7 to renew it.

Lunch Flow

Banks and investment accounts in 30+ countries, through Lunch Flow’s own sign-in page.

At Lunch Flow’s developer page, create an app and copy its client ID and client secret.
In Open Net Worth: Connectors → Browse & add → Lunch Flow → Add connector.
Fill in Client ID and Client secret. Email is optional — it just pre-fills your address on Lunch Flow’s sign-in page. Click Save.
Reopen the form (⋯ → Edit configuration) and click Connect bank. Lunch Flow’s page opens in a new window; sign in and link your bank there. The form shows Waiting for sign-in… until you finish, then lists the bank under Linked institutions.
Link the accounts in the Accounts list.

Sign-in only works when you reach Open Net Worth over HTTPS or on the machine it runs on — see Troubleshooting. Each linked institution has its own Disconnect button.

If the form shows a Caution: line after a fetch, read it: it flags transactions whose money-in/money-out direction looked uncertain.

Lunch Money

If you already track spending in Lunch Money, its transactions can flow in from here.

In Lunch Money, go to Settings → Developers and request a new access token. Copy it.
In Open Net Worth: Connectors → Browse & add → Lunch Money → Add connector.
Paste it into Access token and click Save.
Link the accounts in the Accounts list.

Only transactions come across — assets you track by hand in Lunch Money are not imported, and categories are left for you or an Automation to set.

YNAB

If you already budget in YNAB, its transactions can flow in from here.

In YNAB, go to Account Settings → Developer Settings → New Token. Copy the token — YNAB shows it only once.
In Open Net Worth: Connectors → Browse & add → YNAB → Add connector.
Paste it into Access token and click Save.
If your YNAB login has more than one budget, reopen the form (⋯ → Edit configuration) and choose one under Budget (click Refresh if the list is empty), then Save. With only one budget, it’s picked for you.
Link the accounts in the Accounts list.

Categories are not copied from YNAB — they’re left for you or an Automation to set.

Alpaca

Your Alpaca holdings and cash, kept up to date in your portfolio. Alpaca reports what you hold now, not a transaction history.

Sign in at Alpaca. Switch to the account you want — paper (practice) or live — and generate an API key pair from its dashboard. Copy the key ID and the secret key (the secret is shown only once).
In Open Net Worth: Connectors → Browse & add → Alpaca → Add connector.
Fill in API key id and Secret key, and set Environment to Paper account or Live account to match the keys. Click Save.
Link the Alpaca account in the Accounts list. Once connected, the form shows a Paper or LIVE badge and your Alpaca cash and buying power.

Alpaca keys could place trades if used elsewhere; this app never does — it only reads positions and cash.

Interactive Brokers (IBKR Flex)

Positions, trades, dividends and other cash activity from Interactive Brokers, through its Flex Web Service. Figures arrive about a day behind — Flex is a daily report, not a live feed.

In IBKR’s Client Portal (Account Management), go to Performance & Reports → Flex Queries.
Create an Activity Flex Query:
- Set Format to XML.
- Include the sections Open Positions, Trades and Cash Transactions.
- Set the Period to cover at least the last 14 days (for example Last 30 Calendar Days).
- Save it and note its numeric Query ID from the Flex Queries list.
On the same page, open Flex Web Service Configuration, turn the service on and generate a token. Copy it.
In Open Net Worth: Connectors → Browse & add → IBKR Flex → Add connector.
Fill in Flex token and Flex query ID and click Save.
Link the IBKR account in the Accounts list.

A fetch can take a little while: IBKR prepares the report first and the app waits for it. Shares and ETFs are priced automatically; options and futures you price yourself. The Flex token can only export data — it cannot place or cancel orders.

Yodlee

Yodlee is no longer offered in Browse & add — it requires an enterprise contract with Yodlee. If you set it up before, it still appears in your Connectors list so you can see and remove it, but it is no longer supported — use one of the connectors above instead.

Turning on automatic syncing

Nothing is booked on a schedule until you turn it on. Open the connector and click Automate. That opens a ready-made Automation — for example Sync SimpleFIN — as a draft you can read and edit; click Create automation to switch it on. You’ll find the same drafts under Automations → Sync a connector.

Connector	Default schedule
SimpleFIN, Plaid, Lunch Money, Lunch Flow, YNAB, Enable Banking	Every 6 hours
Interactive Brokers	Every 6 hours
Alpaca	Every hour

The schedule and the wording are yours to change. Each run:

Looks back 14 days every time, so a transaction your bank posts late is still caught.
Never books the same transaction twice. One it already booked is skipped.
Uses the linked account for each transaction, and asks you about any account that isn’t linked instead of guessing.
Brings a changed transaction in line, but never over your own edits. If your bank changes something already booked — a pending charge that settles at a different amount, a date that moves — Lucius updates it. If you’d already changed that amount or date by hand, he keeps your version and tells you. Every change is in the transaction’s history.
Flags a withdrawn transaction, never deletes it. If a transaction disappears from your bank’s feed, Lucius marks it for your review and tells you. Deleting is always your call.
Matches a transaction you typed yourself. If you entered a purchase by hand and the bank later reports it, Lucius links the bank’s record to your entry instead of booking a second copy. It shows under Source in the transaction’s details; Unlink source there separates them if he got it wrong.
For brokers, adds or updates positions but never removes one — he tells you about any that are missing instead.
Messages you only when something was booked or something went wrong.

The Automation runs on its own without asking you to approve each booking. Details on schedules and approval modes are in Automations.

You don’t need an Automation to use a connector: you can always just ask, “fetch my Plaid transactions since Monday and book the new ones.”

Where your credentials are stored

On this machine only. They’re never sent to Lucius or the AI model, never included in an export, and left out of a sanitised backup. Secret fields are hidden; where a field has an eye icon you can reveal the saved value to check it. Access tokens the app receives from a bank link (SimpleFIN, Plaid, Lunch Flow) are never shown at all.

To stop a connector, open it and click Pause (fetching stops; Resume turns it back on), or choose ⋯ → Remove connector to delete its saved credentials. Revoke the key or token at the provider too if you no longer need it.

Known limitations

A transaction flagged for your review still counts toward balances and net worth until you deal with it.
Whether a bank’s transaction is “the same one” as one you typed is Lucius’s judgement, from the amount, date and description. It’s usually right; Unlink source fixes it when it isn’t.
Enable Banking is the newest connector here and the least tested against real banks.

Troubleshooting

“Could not save. The setup token may be invalid or already used.” (SimpleFIN) — a setup token works only once. Create a new one in SimpleFIN Bridge and paste that. An error ending in (already claimed? setup tokens are one-time) means the same thing.

“Provider rejected the saved credentials” / Last fetched · credentials need attention — the key or token is wrong, expired or revoked. Open ⋯ → Edit configuration and paste a fresh one. IBKR Flex tokens expire after the period you chose when generating them; Enable Banking consent lasts about 90 days.

“Provider is rate-limiting requests right now” — the provider is throttling you. Wait a while and try again; if it keeps happening, make the Automation run less often.

“Couldn’t reach provider” — a network problem or a provider outage. Try again later.

No accounts in the Accounts list — you haven’t linked a bank yet (Plaid, Enable Banking, Lunch Flow), or the connector is paused. For Plaid, check the Environment matches your secret.

Link bank / List banks / Connect bank is greyed out — save your credentials first, then reopen the form.

“Could not start the bank link. Save your credentials first.” (Plaid) — the client ID or secret was rejected, or you haven’t saved them yet.

Enable Banking: “starting the bank link failed: HTTP 4xx” — usually the redirect URL isn’t registered. Add https://localhost/connectors to your application’s allowed redirect URLs.

Enable Banking: “the Enable Banking private key is not a valid PEM RSA key” — paste the whole .pem file, including the BEGIN and END lines.

Lunch Flow: “Sign-in needs a secure address. Reach this instance over HTTPS, or from the machine it runs on.” — open Open Net Worth on the machine it runs on (localhost), or over an HTTPS address, and click Connect bank again.

YNAB fetches nothing — your token can see several budgets and none is picked. Choose one under Budget.

IBKR fetch fails or is empty — check the Flex Query’s Format is XML, it includes Open Positions, Trades and Cash Transactions, and its period covers recent days.

Lucius says he can’t fetch — make sure an AI model is connected and the connector isn’t paused.

Automations — schedules, approval modes and the sync templates
Importing — the statement-file alternative (CSV, OFX, QIF, PDF…)
What Lucius can do — and what he can’t
Email — book transactions from your bank’s notification emails instead