- 05
- September
Claude for Financial Services is Anthropic's open-source repository on GitHub (anthropics/financial-services) that packages 20 finance plugins in one place — 10 ready-made AI agents for work like month-end close, general ledger reconciliation, KYC document review and financial modeling, plus 7 skill bundles organised by function, 2 partner data plugins and 12 MCP data connectors. Everything is plain Markdown and YAML you can open, read and edit, released under the Apache 2.0 licence.
This article answers four questions in order: what is actually in the repo, what it can do, how to install it across all three surfaces, and what limits you need to know before pointing it at real accounting work. If the words Skills and MCP are new to you, read those two first — this repo is built entirely out of both.
In one line: Claude for Financial Services is an open-source plugin set that gives Claude specialist finance workflows immediately — install with a single command, claude plugin marketplace add anthropics/financial-services, then call it with slash commands such as /dcf, /comps and /earnings.
What Is Claude for Financial Services?
Back in May 2026, Anthropic announced ten AI agents for finance work. That was the news; this is the delivery. The code now sits on GitHub — and it does not arrive as shrink-wrapped software you install and forget. It arrives as a reference implementation: task instructions, workflow steps and data wiring written out in plain text for firms to adapt to how they actually work.
What separates it from a general-purpose assistant is the organising principle. Nothing here is grouped by feature; everything is grouped by the job a finance team actually does. The agents are named after the work, not the technology — Month-End Closer, GL Reconciler, Statement Auditor — and the same agent runs in a chat window, in a terminal, or headless behind a workflow engine with nobody watching.
Three surfaces, one agent
| Surface | Form | Best for | What you need |
|---|---|---|---|
| Claude Cowork | Plugin installed from Settings | Accountants and analysts who never touch a terminal | An account with Cowork access |
| Claude Code (CLI) | Plugin plus slash commands in the terminal | Teams working on local Excel files and data | Claude Code installed, on a paid plan |
| Managed Agents API | Headless, behind your own workflow engine | Platform and engineering teams | An API key and internal MCP endpoints |
The deployment-template documentation puts it plainly: "Same agent, same skills — pick your surface." The agent and its skills do not change; only the place you call them from does. For the headless side, see our deeper piece on Claude Managed Agents.
What Is Inside the Repo?
anthropics/financial-services/
├── plugins/
│ ├── agent-plugins/ # 10 ready-made agents (skills bundled in)
│ ├── vertical-plugins/ # 7 skill bundles by function + data connectors
│ └── partner-built/ # partner plugins (LSEG, S&P Global)
├── managed-agent-cookbooks/ # 10 headless deployment templates
├── claude-for-msft-365-install/ # Microsoft 365 add-in provisioning
└── scripts/ # deploy-managed-agent.sh, validate.py, orchestrate.py
The marketplace listing comes to exactly 20 entries — 10 agents, 7 function bundles, 2 partner plugins and 1 Microsoft 365 provisioning tool.
All of it is text. A skill is a folder with a Markdown file describing the work step by step; an agent inside a plugin is a Markdown file with a YAML front matter block, while an agent in the deployment templates is plain YAML. Either way it names the model, the tools it may use and the skills it pulls in. There is no compiled code hiding underneath — you can read every instruction before deciding what data it is allowed near.
The 10 Agents — What They Do
These are the closest thing to ready-to-run in the repo, because each one bundles the skills it needs. Install one and start working.
| Function | Agent | What it does |
|---|---|---|
| Coverage & advisory | pitch-agent | Comps, precedents and an LBO, through to a branded pitch deck |
meeting-prep-agent | Assembles a briefing pack before a client meeting | |
| Research & modeling | market-researcher | Sector or theme in, industry overview, peer comps and a shortlist out |
earnings-reviewer | Earnings call and filings to a model update to a draft note | |
model-builder | DCF, LBO, 3-statement and comps, live in Excel | |
| Fund admin & finance ops | gl-reconciler | Finds breaks between ledger and subledger, traces root cause, routes for sign-off |
month-end-closer | Accruals, roll-forwards and variance commentary | |
valuation-reviewer | Ingests GP packages and runs the valuation template | |
statement-auditor | Audits LP statements before they go out | |
| Operations & onboarding | kyc-screener | Parses onboarding documents, runs the rules grid, flags gaps |
Note for corporate finance teams: three of the ten map onto ordinary monthly accounting rather than Wall Street work — gl-reconciler, month-end-closer and statement-auditor. All three are repetitive, rule-shaped tasks with complete source documents, which is precisely where AI in accounting performs best and where the monthly close loses the most hours.
Function Bundles and Slash Commands
The other half of the repo is the vertical plugins. These are not agents; they are toolboxes that extend your session. Five of them add slash commands — type the command and the workflow runs. fund-admin and operations ship skills only, with no commands attached; those fire on their own when Claude judges the task to match.
| Plugin | Function | Commands it adds |
|---|---|---|
financial-analysis (core) | Modeling and analysis | /dcf /comps /lbo /3-statement-model /debug-model /competitive-analysis /ppt-template |
investment-banking | Advisory and deals | /cim /teaser /buyer-list /merger-model /one-pager /process-letter /deal-tracker |
equity-research | Sell-side research | /earnings /earnings-preview /initiate /model-update /sector /thesis /catalysts /morning-note /screen |
private-equity | Sourcing and diligence | /source /screen-deal /dd-checklist /dd-prep /ic-memo /portfolio /returns /unit-economics /value-creation /ai-readiness |
wealth-management | Advisory and planning | /client-review /client-report /financial-plan /proposal /rebalance /tlh |
fund-admin | Fund back office | Skills: gl-recon, break-trace, accrual-schedule, roll-forward, variance-commentary, nav-tieout |
operations | Client onboarding | Skills: kyc-doc-parse, kyc-rules |
lseg / sp-global | Partner data | Bond pricing, yield curves, company tear sheets and more |
Install financial-analysis first, always — it carries the 13 shared skills and every data connector. Worth knowing: not all of those skills are finance-specific. xlsx-author and pptx-author write real Excel and PowerPoint files (the documentation scopes them to headless Managed Agent mode), audit-xls traces formulas through a workbook somebody else built, clean-data-xls tidies raw extracts, and skill-creator exists so you can write your own skills in the same shape.
The 12 Data Connectors
The .mcp.json file inside financial-analysis declares twelve MCP servers, all HTTP, all pointing straight at the data provider:
| Type | Providers |
|---|---|
| Market and fundamental data | FactSet, S&P Global (Kensho), Morningstar, Moody's, Daloopa, LSEG |
| News and earnings calls | MT Newswires, Aiera |
| Fund and deal data | PitchBook, Chronograph |
| Document repositories | Box, Egnyte |
Important: installing the plugin does not grant data entitlements. The repo notes that MCP access may require a subscription or an API key from the provider — in practice that is true of nearly all of them. If your firm does not use FactSet or PitchBook, skip the section entirely and repoint .mcp.json at your own internal systems instead — your data warehouse, or the document repository you already run. See also Claude connectors and enterprise search.
From an actual install test, 5 September 2026
At the repo's current commit, the .mcp.json shipped with financial-analysis is not valid JSON — a comma is missing before the "box" block and one closing brace is absent. The practical effect is that after installing, claude mcp list shows none of these connectors (verified against the lseg plugin, whose file is well-formed and which appears immediately). The twelve providers listed above do match the file's contents, but to use them today you either patch those two characters locally and reinstall, or wait for the upstream fix. This is a defect in the repo, not in the install steps.
How to Install It
1) On Claude Code (CLI)
# Add the marketplace first
claude plugin marketplace add anthropics/financial-services
# Core skills and connectors — install this one first, always
claude plugin install financial-analysis@claude-for-financial-services
# Then pick the agents you want
claude plugin install month-end-closer@claude-for-financial-services
claude plugin install gl-reconciler@claude-for-financial-services
# Or install a whole function bundle
claude plugin install fund-admin@claude-for-financial-services
claude plugin install equity-research@claude-for-financial-services
The marketplace name after the @ is claude-for-financial-services — spelled exactly like that, and not the same as the repo name. Once installed, the slash commands appear in a new session — if you had a session open in another window while installing, restart it before they show up. Skills fire on their own whenever Claude judges the task to match.
2) On Claude Cowork
No terminal required. Open Settings → Plugins → Add plugin and choose one of two routes:
| Route | How | Best for |
|---|---|---|
| Paste the repo URL | Enter https://github.com/anthropics/financial-services, then pick the agents and bundles you want from the marketplace list | Running what Anthropic ships, unmodified |
| Upload a zip | Zip any directory under plugins/ (for example plugins/agent-plugins/month-end-closer/) and drop it in | Firms that have edited the contents and want to distribute their own version internally |
3) Headless, via the Managed Agents API
For teams that want an agent running behind their own systems — say, at 2am on the last day of every month — the repo ships deployment templates for all ten agents under managed-agent-cookbooks/. This route differs from the other two in one important way: you have to clone the repo first, because marketplace add leaves no checkout for you to run the script from.
# requires jq and python3 with pyyaml, or the script stops immediately
git clone https://github.com/anthropics/financial-services
cd financial-services
export ANTHROPIC_API_KEY=sk-ant-...
export GL_MCP_URL=... # your ledger endpoint (read-only)
export SUBLEDGER_MCP_URL=... # your subledger endpoint
# rehearse first — no API key needed, nothing is sent to the API
scripts/deploy-managed-agent.sh gl-reconciler --dry-run
# the real thing
scripts/deploy-managed-agent.sh gl-reconciler
The script resolves the file references in the template, uploads the skills as custom skills, creates the leaf-worker subagents first and POSTs the orchestrator to /v1/agents last. The agent.yaml itself is more readable than you would expect — this is part of gl-reconciler:
name: gl-reconciler
model: claude-opus-4-7
tools:
- type: agent_toolset_20260401
default_config:
enabled: false # everything off by default
configs:
- name: read
enabled: true
- name: grep
enabled: true
mcp_servers:
- type: url
name: internal-gl
url: ${GL_MCP_URL} # set via environment or a vault
Two details are worth copying. The model: line pins a specific version — change it to whichever model your firm has approved, Opus 5 included. And enabled: false as the default, with tools switched on one at a time, is the posture every agent in your organisation should start from, not just this one.
Before you run it for real: Managed Agents is still a gated beta — the script sends an anthropic-beta: managed-agents-2026-04-01 header, and if your organisation has not been granted access the call fails even with a valid API key. One more trap: the script derives REPO_SLUG from git config --get remote.origin.url, so if you run it outside a checkout with a remote you must set that variable yourself.
The Security Architecture — the Part Worth Stealing
The most valuable thing in this repo may not be the finance skills at all. It is the pattern for structuring an agent so that a document from outside cannot do damage. Look at how gl-reconciler splits one job across four roles, each holding a different set of permissions:
| Role | Job | Permissions |
|---|---|---|
| Reader | Reads external documents — counterparty and custodian statements | Read and grep only. No MCP access, no write tool. Output must be schema-validated JSON with a length cap |
| Orchestrator | Runs the reconciliation, dispatches to the other workers, aggregates results and hands off — it never opens an external document itself | Read-only MCP servers. No write access, no shell |
| Critic | Independently re-verifies every reported break against the ledger and subledger, returning confirmed or rejected, before the set reaches the resolver | Trusted internal sources only. Never opens counterparty files, and holds no write access |
| Resolver | Writes the exception report | The only role that can write files — and it never touches an external document directly |
Security Warnings — why the separation matters
Documents arriving from outside your firm are untrusted input. If someone embeds instructions inside a PDF or a spreadsheet and the agent reading it also holds write access or a line into internal systems, those hidden instructions reach production. The repo states the intent directly: a payload in one of those documents cannot reach a shell, a write tool, or a firm system. Any organisation designing its own agents should read this alongside security and data governance for Claude.
One more deliberate constraint: named agents never call each other directly. They emit a handoff_request, and your own orchestration layer validates it against an allowlist before routing it on. When gl-reconciler finishes confirming breaks, that is how the work reaches month-end-closer — through a checkpoint, not through a private back channel.
Limits You Should Know First
The repo is unusually candid about its own boundaries, and they are worth reading before expectations get set:
| Limit | What it means | What you must supply |
|---|---|---|
| It does not post and it does not approve | The disclaimer is explicit: these agents draft analyst work product for review by qualified professionals. They make no investment recommendations, execute no transactions, bind no risk, post to no ledger and approve no onboarding | A human reviewer and signature on every output |
| The accounting logic is shaped around LP/GP fund practice | Skills like accrual-schedule and nav-tieout are written in the vocabulary of capital calls, waterfalls and carried interest. There is no VAT, no withholding tax and no local statutory chart of accounts | Your own local accounting context, added to the skill files |
| Connectors need your own contracts | The plugin supplies the wiring, not the data | A provider subscription and API key, or a repoint to internal systems |
| Subagent delegation is a preview | The repo flags callable_agents as a research preview capability | A narrowly scoped first test |
| These are templates, not a product | No settings screen, no service level agreement | Team time to adapt them — which is exactly what they were published for |
How Far Can This Reach Into Your ERP?
The question finance teams ask within a minute is whether it can read the data in their ERP. The honest answer is yes, if somebody builds the connection. None of these agents is bound to a particular database; they speak MCP and nothing else. That is why gl-reconciler only ever says ${GL_MCP_URL} — the far end can be any ERP willing to expose a read-only endpoint.
On the Saeree ERP side we hold two lines:
| Question | Where we actually stand |
|---|---|
| Where does the data live? | The ERP itself can be deployed on-premise, so the data never leaves the building. Claude is a cloud service. These are two separate statements and we do not blur them into one sentence. |
| What can the AI touch? | Read access scoped by user role, with every access written to an audit trail. Not an open database handed to a model. |
We ran this on ourselves first — connecting MCP to our own procurement, inventory, HR and document workflows, hitting the problems and fixing them — and only opened MCP integration work to clients in September 2026. So there are no client results claimed in this article.
For a team starting out, the sensible order is to begin read-only and offline: export a trial balance, let the agent hunt for unmatched entries, and compare what it finds against what your people find by hand. When the two agree, open a read-only endpoint. Write-back is a much later conversation — and in plenty of organisations the final answer is that it is never needed at all.
Who It Suits — and Who It Does Not
| A good fit if… | Not yet, if… |
|---|---|
| You have someone comfortable editing Markdown and YAML | You want software that works out of the box with no editing |
| The target work is repetitive with complete source documents | The work is judgement-heavy with nothing to check against |
| You accept that every output needs a human reviewer | You expect the system to post entries or approve onboarding by itself |
| You want a well-considered pattern for agent permissions | You have no policy yet on who may access what |
| Claude is already in use at your firm (Team or above) | There is no plan for a paid deployment |
Conclusion
Claude for Financial Services is not a finished product. It is a set of blueprints published in full — how a working finance agent should be structured, how much permission it should hold, and where the human belongs in the process. For firms outside the US, the value may not be the DCF or LBO skills at all; it is the security pattern and the discipline of splitting one job into several narrow roles. That travels to your own internal workflows immediately, without waiting for anyone to localise it.
If you want a real feel for it, five minutes is enough: add the marketplace, install financial-analysis, and run /comps against your own sample data once. That will tell you more than ten pages of description.
"The part worth copying from this repo is not the valuation maths. It is splitting one job into four roles and giving only one of them the right to write."
- The Saeree ERP team
References
- anthropics/financial-services — GitHub repository (Apache 2.0)
- README — Getting started with Cowork, Claude Code and Managed Agents
- managed-agent-cookbooks — headless deployment templates
- GL Reconciler — reader / orchestrator / resolver architecture
Want Claude connected to your own systems?
Grand Linux Solution supplies Claude for organisations and builds MCP connections into ERP, procurement, inventory and document workflows — scoped by user role, with a full audit trail on every access.
Get advice / request a quoteTel 02-347-7730 | sale@grandlinux.com




