# actual_query_run

Execute SQL queries for advanced financial data analysis. RECOMMENDED: Use SQL syntax - Most reliable and well-tested format. SQL SYNTAX (Preferred): SELECT [fields] FROM [table] WHERE [conditions] ORDER BY [field] DESC LIMIT [n] Examples: •

Agent View of the PolicyLayer registry record for `actual_query_run`. HTML page: https://policylayer.com/tools/actual/actual-query-run

## Facts

- Tool: `actual_query_run`
- Server: Actual (`actual-mcp-server`) — https://policylayer.com/tools/actual.md
- Install: `npx -y actual-mcp-server`
- Homepage: git+https://github.com/agigante80/actual-mcp-server.git
- Risk category: Execute (High risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "actual_query_run",
    "arguments": {}
  }
}
```

## Why actual_query_run is rated High

This tool executes raw SQL queries against a financial database. While framed as 'analysis,' arbitrary SQL execution can include DDL/DML statements (DROP, DELETE, UPDATE) that are destructive or data-modifying. Even if read-only, the blast radius is critical due to the financial context and the broad attack surface of arbitrary SQL execution. Ranked Execute (bordering Destructive) with critical severity.

From the tool's own definition: "'Execute SQL queries' — the tool explicitly runs arbitrary SQL against financial data, including potentially destructive statements like DROP or DELETE"

## Use case

AI agents invoke actual_query_run to trigger actions in Actual. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Actual:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "actual_query_run": {
      "limits": [
        {
          "counter": "actual_query_run_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Actual (63)

- `actual_accounts_delete` — Destructive — https://policylayer.com/tools/actual/actual-accounts-delete.md
- `actual_categories_delete` — Destructive — https://policylayer.com/tools/actual/actual-categories-delete.md
- `actual_category_groups_delete` — Destructive — https://policylayer.com/tools/actual/actual-category-groups-delete.md
- `actual_payees_delete` — Destructive — https://policylayer.com/tools/actual/actual-payees-delete.md
- `actual_rules_delete` — Destructive — https://policylayer.com/tools/actual/actual-rules-delete.md
- `actual_schedules_delete` — Destructive — https://policylayer.com/tools/actual/actual-schedules-delete.md
- `actual_tags_delete` — Destructive — https://policylayer.com/tools/actual/actual-tags-delete.md
- `actual_transactions_delete` — Destructive — https://policylayer.com/tools/actual/actual-transactions-delete.md
- `actual_bank_sync` — Execute — https://policylayer.com/tools/actual/actual-bank-sync.md
- `actual_session_close` — Other — https://policylayer.com/tools/actual/actual-session-close.md
- `actual_accounts_list` — Read — https://policylayer.com/tools/actual/actual-accounts-list.md
- `actual_budgets_get_all` — Read — https://policylayer.com/tools/actual/actual-budgets-get-all.md
- `actual_budgets_getMonth` — Read — https://policylayer.com/tools/actual/actual-budgets-getmonth.md
- `actual_budgets_getMonths` — Read — https://policylayer.com/tools/actual/actual-budgets-getmonths.md
- `actual_budgets_list_available` — Read — https://policylayer.com/tools/actual/actual-budgets-list-available.md
- `actual_categories_get` — Read — https://policylayer.com/tools/actual/actual-categories-get.md
- `actual_category_groups_get` — Read — https://policylayer.com/tools/actual/actual-category-groups-get.md
- `actual_entities_search` — Read — https://policylayer.com/tools/actual/actual-entities-search.md
- `actual_get_id_by_name` — Read — https://policylayer.com/tools/actual/actual-get-id-by-name.md
- `actual_notes_get` — Read — https://policylayer.com/tools/actual/actual-notes-get.md
- `actual_payee_rules_get` — Read — https://policylayer.com/tools/actual/actual-payee-rules-get.md
- `actual_payees_common_list` — Read — https://policylayer.com/tools/actual/actual-payees-common-list.md
- `actual_payees_get` — Read — https://policylayer.com/tools/actual/actual-payees-get.md
- `actual_rules_get` — Read — https://policylayer.com/tools/actual/actual-rules-get.md
- `actual_schedules_get` — Read — https://policylayer.com/tools/actual/actual-schedules-get.md
- `actual_server_info` — Read — https://policylayer.com/tools/actual/actual-server-info.md
- `actual_session_list` — Read — https://policylayer.com/tools/actual/actual-session-list.md
- `actual_tags_list` — Read — https://policylayer.com/tools/actual/actual-tags-list.md
- `actual_transactions_filter` — Read — https://policylayer.com/tools/actual/actual-transactions-filter.md
- `actual_transactions_get` — Read — https://policylayer.com/tools/actual/actual-transactions-get.md
- …and 33 more: https://policylayer.com/tools/actual.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=actual · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/actual