HTTP 404 on Login

[keithah]

All authentication attempts fail with HTTP Code 404: Not Found, indicating that Monarch Money has changed their API endpoints.

Environment

• Library Version: v0.1.15 (latest)
• Python: 3.13.7
• Platform: macOS 15.6 (ARM64)
• Date: August 19, 2025

Issue Details

What's Broken

All login attempts fail immediately with:

LoginFailedException: HTTP Code 404: Not Found

This occurs even with test credentials, indicating the authentication endpoint itself no longer exists.

What I've Tested

1. Clean Installation: Uninstalled and reinstalled v0.1.15 from PyPI
2. Session Reset: Removed .mm directory as recommended in v0.1.15 release notes
3. Multiple Approaches: Tested with both test credentials and different authentication methods

Root Cause Analysis

I investigated Monarch Money's current web application and found:

1. Current Architecture: The web app (https://app.monarchmoney.com) is now a React SPA
2. API Endpoint: Uses GraphQL at https://api.monarchmoney.com/graphql
3. Authentication: Appears to use GraphQL mutations instead of REST endpoints
4. Missing Endpoints: The old REST authentication endpoints that this library relies on no longer exist

Evidence

Current Web App CSP Header shows these API endpoints:

connect-src 'self' ... https://api.monarchmoney.com https://events-api.monarchmoney.com ...

Testing endpoints directly:

• https://api.monarchmoney.com/auth/login/ → 404 Not Found ❌
• https://api.monarchmoney.com/graphql → 401 Unauthorized (but exists) ✅

Test Script Output

🧪 TEST 2: Authentication (Test Credentials)
---------------------------------------------
Testing with: test@example.com / testpassword
❌ Login failed: HTTP Code 404: Not Found
   Error type: LoginFailedException
   🔍 Analysis: HTTP 404 - Authentication endpoint doesn't exist
   💡 This suggests Monarch Money changed their API endpoints

[techdoutdev]

I'm having this same issue - 404 when trying to authenticate. I don't have a fix for this but a workaround in the meantime is to grab the token from the browser. It's pretty rudimentary but it works. I did this by:

1. navigate to https://app.monarchmoney.com/
2. open dev tools (I'm using chrome)
3. run JSON.parse(JSON.parse(localStorage.getItem("persist:root")).user).token in the console. Output will be the token to copy.
4. make a new .mm/mm_session.pickle with the token. Example code below.
5. use load_session() like the example in readme and make sure it's grabbing the session file

import pickle

token = input("Enter token: ").strip()
if token:
    with open(".mm_session.pickle", "wb") as f:
        pickle.dump({'token': token}, f)
    print("Wrote token to .mm_session.pickle")
else:
    print("No token provided. Exiting.")

[keithah]

Fixed in PR #157. The issue was missing authentication headers (device-uuid, Origin) and incorrect field names for email OTP codes. Authentication now works properly with both email OTP and TOTP, plus GraphQL fallback for 404 scenarios.

[keithah]

Thanks for the hint @techdoutdev! I used it to write a PR.

[keithah]

✅ Fixed in Fork

This issue has been resolved in my fork: https://github.com/keithah/monarchmoney

Fixes included:

• GraphQL fallback when REST endpoints return 404
• Proper browser headers (device-uuid, Origin, User-Agent)
• Email OTP vs TOTP field detection
• Exponential backoff retry logic
• Comprehensive test suite

The fork maintains full compatibility with the original API while fixing the authentication issues described in this thread.

[ejlevin1]

Really excited about this library! I am trying to use it with the mcp wrapper to interact with monarch via Claude Desktop. @keithah I am seeing your PR is way ahead, but also behind the main branch of this repo. Should I use your repo in the deps for python and you are planning on maintaining, or should I wait until this gets released? @techdoutdev do you have an idea when this will be merged into the published package?

[keithah]

@ejlevin1 @techdoutdev is not the maintainer @hammem is and he's MIA. I created an 'enhanced' version in my repo, incorporated all the issues and PRs, and will be maintaining mine moving forward. I can't tell you what @hammem plans on doing.

I also have a MCP wrapper fork FYI that matches the python library fork I have: https://github.com/keithah/monarch-money-mcp-enhanced and I'm presently building a Claude extension for it, so its one click install.

[ianrtracey]

Ran into the same thing, awesome work @keithah