GlassFolio
Your wealth, encrypted on your side. Self-hosted or in the cloud.
A wealth dashboard that keeps your data encrypted, prepares your tax return with a modular tax engine (French rules built in), and runs on your own machine or in the managed cloud.
English · Français
Website · Self-host · Roadmap · Changelog
Why GlassFolio
- Encrypted before it leaves your browser. Transactions, holdings, goals and secrets live in a client-side vault: AES-256-GCM, with keys derived from your master password through PBKDF2 (600,000 iterations) and HKDF. A server only ever sees ciphertext.
- Self-hosted or cloud, your choice. One command starts a hardened Docker container on your own machine or NAS, with no account and no telemetry. Or use the managed cloud version: nothing to install, synced across your devices. Same app, same encryption.
- A modular tax engine. French rules are built in natively: compare the flat tax (PFU) with the progressive scale on your real numbers and prepare Cerfa 2042, 2074 and 3916. Rules are isolated by jurisdiction so new countries can be added.
- An AI assistant that asks first. Ask questions about your portfolio in plain language, with a local model (Ollama) or your own API key. 35 tools are exposed to the in-app assistant and to external MCP clients, and every action that changes financial data needs your explicit approval.
- Bring your history. Import CSV exports from your brokers and banks with column mapping, a live preview, duplicate protection and one-click rollback.
✨ Features
Portfolio and markets
- Multi-asset tracking: equities, ETFs, crypto, cash and savings, grouped by asset class, institution and account (PEA, CTO, life insurance, wallets…).
- Positions with quantity, average cost, valuation and unrealized gains, plus realized vs unrealized P&L.
- Market prices from Yahoo Finance and CoinGecko, multi-currency conversion, graceful offline fallback.
- Full transaction ledger (buys, sells, dividends, fees, deposits, withdrawals) with filters and search.
Analytics
- Performance over time, benchmark comparison and rebased (base 100) curves, with up to 8 series that never clash with gain/loss colors.
- ETF fee analysis: ongoing costs and their compounding effect over decades, plus side-by-side ETF comparison.
- Financial goals with progress tracking, and an investor progression system (ranks, quests, streaks).
Tax engine
- Modular engine: rules are isolated by jurisdiction. French rules are built in today; new jurisdictions plug into the same pipeline.
- PFU vs progressive scale comparison, with PEA and holding-period rules.
- Declaration assistant for Cerfa 2042, 2074 and 3916, plus tax optimization hints.
- Cost basis computed on a shared ledger, with a selectable method.
GlassFolio gives estimates and educational guidance. It is not certified tax or investment advice.
Import and backup
- Presets that auto-detect Binance, Bitget, BoursoBank, Trade Republic, Coinbase, Kraken and GlassFolio exports, and a column-first mapping step for anything else.
- History mode and snapshot mode, a dedicated cash import, duplicate detection and per-batch rollback.
- Full JSON backup, and a merge wizard that previews changes before touching your data.
AI and MCP
- In-app assistant with streaming, visible reasoning blocks and approval cards for sensitive actions.
- Local models through Ollama (no data leaves your machine), or OpenAI, Anthropic, OpenRouter and Groq with keys stored in your encrypted vault.
- Guardrails redact secrets (keys, recovery codes, TOTP seeds) before anything reaches a model.
- An MCP bridge: Claude Code, Codex, Cursor, Antigravity and other MCP clients call the tools of the app on your own data, through your open and unlocked tab, and every change waits for your approval. A local server (Docker or
npm run dev) includes it at /mcp; for GlassFolio online, start it on your computer with npm run mcp -- serve. See the documentation.
Security and privacy
- Passwords checked against NIST SP 800-63B guidance, TOTP two-factor authentication with backup codes, WebAuthn passkeys, and an emergency recovery key.
- Encrypted secrets vault and an encrypted, append-only security audit log.
- Strict Content-Security-Policy (
script-src 'self', Trusted Types), no third-party script.
Experience
- Three themes (light, dark, night), English and French, 16 translation namespaces.
- Semantic color tokens everywhere: one change to a token cascades to every screen and chart.
📸 Screenshots
🐳 Self-hosting with Docker
The image serves the app, proxies market data on the same origin and stores your vault records on a Docker volume. It needs Docker with Compose, and Node 22 on the host only for the npm run docker:* helpers.
Quick start
git clone https://github.com/Damien-Esilv/GlassFolio.git && cd GlassFolio && npm run docker:up
Open http://localhost:3000, create your master password, and you are in.
This is the beginning of the README. Read the rest at the original. Read the full README ↗
