Expose a remote (streamable HTTP) MCP server so users can connect Whisper
Money to their own AI assistant (Claude web/desktop, Claude Code, ChatGPT)
to analyse their finances.
- Auth via Sanctum personal access tokens with MCP-only abilities
(mcp:read / mcp:write); tokens are created, rotated and revoked from a new
Settings -> MCP access page, with per-client connection instructions and a
one-time secret reveal.
- Read tools: search_transactions, spending_by_category, get_cashflow,
get_net_worth, list_accounts, list_categories, list_spaces. Transaction and
listing tools are space-scoped (optional space arg, defaults to personal);
the analytics tools reuse the existing user-scoped services/controllers.
- Pro-plan gating is enforced per request inside the tools, so a lapsed
subscription stops working without the user revoking the token. Free users
can still create tokens (marked PRO in the UI).
Write tools are intentionally out of scope for this PR (follow-up).
14ab73dcfb