02-347-7730  |  Saeree ERP - Complete ERP System for Thai Businesses Contact Us

What Is Claude for Financial Services? Anthropic's 20 Finance Plugins and How to Install Them (2026)

What Is Claude for Financial Services? Anthropic's 20 Finance Plugins and How to Install Them (2026)
  • 05
  • September

Claude for Financial Services is Anthropic's open-source repository on GitHub (anthropics/financial-services) that packages 20 finance plugins in one place — 10 ready-made AI agents for work like month-end close, general ledger reconciliation, KYC document review and financial modeling, plus 7 skill bundles organised by function, 2 partner data plugins and 12 MCP data connectors. Everything is plain Markdown and YAML you can open, read and edit, released under the Apache 2.0 licence.

This article answers four questions in order: what is actually in the repo, what it can do, how to install it across all three surfaces, and what limits you need to know before pointing it at real accounting work. If the words Skills and MCP are new to you, read those two first — this repo is built entirely out of both.

In one line: Claude for Financial Services is an open-source plugin set that gives Claude specialist finance workflows immediately — install with a single command, claude plugin marketplace add anthropics/financial-services, then call it with slash commands such as /dcf, /comps and /earnings.

What Is Claude for Financial Services?

Back in May 2026, Anthropic announced ten AI agents for finance work. That was the news; this is the delivery. The code now sits on GitHub — and it does not arrive as shrink-wrapped software you install and forget. It arrives as a reference implementation: task instructions, workflow steps and data wiring written out in plain text for firms to adapt to how they actually work.

What separates it from a general-purpose assistant is the organising principle. Nothing here is grouped by feature; everything is grouped by the job a finance team actually does. The agents are named after the work, not the technology — Month-End Closer, GL Reconciler, Statement Auditor — and the same agent runs in a chat window, in a terminal, or headless behind a workflow engine with nobody watching.

Three surfaces, one agent

SurfaceFormBest forWhat you need
Claude CoworkPlugin installed from SettingsAccountants and analysts who never touch a terminalAn account with Cowork access
Claude Code (CLI)Plugin plus slash commands in the terminalTeams working on local Excel files and dataClaude Code installed, on a paid plan
Managed Agents APIHeadless, behind your own workflow enginePlatform and engineering teamsAn API key and internal MCP endpoints

The deployment-template documentation puts it plainly: "Same agent, same skills — pick your surface." The agent and its skills do not change; only the place you call them from does. For the headless side, see our deeper piece on Claude Managed Agents.

What Is Inside the Repo?

anthropics/financial-services/
├── plugins/
│   ├── agent-plugins/        # 10 ready-made agents (skills bundled in)
│   ├── vertical-plugins/     # 7 skill bundles by function + data connectors
│   └── partner-built/        # partner plugins (LSEG, S&P Global)
├── managed-agent-cookbooks/  # 10 headless deployment templates
├── claude-for-msft-365-install/  # Microsoft 365 add-in provisioning
└── scripts/                  # deploy-managed-agent.sh, validate.py, orchestrate.py

The marketplace listing comes to exactly 20 entries — 10 agents, 7 function bundles, 2 partner plugins and 1 Microsoft 365 provisioning tool.

All of it is text. A skill is a folder with a Markdown file describing the work step by step; an agent inside a plugin is a Markdown file with a YAML front matter block, while an agent in the deployment templates is plain YAML. Either way it names the model, the tools it may use and the skills it pulls in. There is no compiled code hiding underneath — you can read every instruction before deciding what data it is allowed near.

The 10 Agents — What They Do

These are the closest thing to ready-to-run in the repo, because each one bundles the skills it needs. Install one and start working.

FunctionAgentWhat it does
Coverage & advisorypitch-agentComps, precedents and an LBO, through to a branded pitch deck
meeting-prep-agentAssembles a briefing pack before a client meeting
Research & modelingmarket-researcherSector or theme in, industry overview, peer comps and a shortlist out
earnings-reviewerEarnings call and filings to a model update to a draft note
model-builderDCF, LBO, 3-statement and comps, live in Excel
Fund admin & finance opsgl-reconcilerFinds breaks between ledger and subledger, traces root cause, routes for sign-off
month-end-closerAccruals, roll-forwards and variance commentary
valuation-reviewerIngests GP packages and runs the valuation template
statement-auditorAudits LP statements before they go out
Operations & onboardingkyc-screenerParses onboarding documents, runs the rules grid, flags gaps

Note for corporate finance teams: three of the ten map onto ordinary monthly accounting rather than Wall Street work — gl-reconciler, month-end-closer and statement-auditor. All three are repetitive, rule-shaped tasks with complete source documents, which is precisely where AI in accounting performs best and where the monthly close loses the most hours.

Function Bundles and Slash Commands

The other half of the repo is the vertical plugins. These are not agents; they are toolboxes that extend your session. Five of them add slash commands — type the command and the workflow runs. fund-admin and operations ship skills only, with no commands attached; those fire on their own when Claude judges the task to match.

PluginFunctionCommands it adds
financial-analysis (core)Modeling and analysis/dcf /comps /lbo /3-statement-model /debug-model /competitive-analysis /ppt-template
investment-bankingAdvisory and deals/cim /teaser /buyer-list /merger-model /one-pager /process-letter /deal-tracker
equity-researchSell-side research/earnings /earnings-preview /initiate /model-update /sector /thesis /catalysts /morning-note /screen
private-equitySourcing and diligence/source /screen-deal /dd-checklist /dd-prep /ic-memo /portfolio /returns /unit-economics /value-creation /ai-readiness
wealth-managementAdvisory and planning/client-review /client-report /financial-plan /proposal /rebalance /tlh
fund-adminFund back officeSkills: gl-recon, break-trace, accrual-schedule, roll-forward, variance-commentary, nav-tieout
operationsClient onboardingSkills: kyc-doc-parse, kyc-rules
lseg / sp-globalPartner dataBond pricing, yield curves, company tear sheets and more

Install financial-analysis first, always — it carries the 13 shared skills and every data connector. Worth knowing: not all of those skills are finance-specific. xlsx-author and pptx-author write real Excel and PowerPoint files (the documentation scopes them to headless Managed Agent mode), audit-xls traces formulas through a workbook somebody else built, clean-data-xls tidies raw extracts, and skill-creator exists so you can write your own skills in the same shape.

The 12 Data Connectors

The .mcp.json file inside financial-analysis declares twelve MCP servers, all HTTP, all pointing straight at the data provider:

TypeProviders
Market and fundamental dataFactSet, S&P Global (Kensho), Morningstar, Moody's, Daloopa, LSEG
News and earnings callsMT Newswires, Aiera
Fund and deal dataPitchBook, Chronograph
Document repositoriesBox, Egnyte

Important: installing the plugin does not grant data entitlements. The repo notes that MCP access may require a subscription or an API key from the provider — in practice that is true of nearly all of them. If your firm does not use FactSet or PitchBook, skip the section entirely and repoint .mcp.json at your own internal systems instead — your data warehouse, or the document repository you already run. See also Claude connectors and enterprise search.

From an actual install test, 5 September 2026

At the repo's current commit, the .mcp.json shipped with financial-analysis is not valid JSON — a comma is missing before the "box" block and one closing brace is absent. The practical effect is that after installing, claude mcp list shows none of these connectors (verified against the lseg plugin, whose file is well-formed and which appears immediately). The twelve providers listed above do match the file's contents, but to use them today you either patch those two characters locally and reinstall, or wait for the upstream fix. This is a defect in the repo, not in the install steps.

How to Install It

1) On Claude Code (CLI)

# Add the marketplace first
claude plugin marketplace add anthropics/financial-services

# Core skills and connectors — install this one first, always
claude plugin install financial-analysis@claude-for-financial-services

# Then pick the agents you want
claude plugin install month-end-closer@claude-for-financial-services
claude plugin install gl-reconciler@claude-for-financial-services

# Or install a whole function bundle
claude plugin install fund-admin@claude-for-financial-services
claude plugin install equity-research@claude-for-financial-services

The marketplace name after the @ is claude-for-financial-services — spelled exactly like that, and not the same as the repo name. Once installed, the slash commands appear in a new session — if you had a session open in another window while installing, restart it before they show up. Skills fire on their own whenever Claude judges the task to match.

2) On Claude Cowork

No terminal required. Open Settings → Plugins → Add plugin and choose one of two routes:

RouteHowBest for
Paste the repo URLEnter https://github.com/anthropics/financial-services, then pick the agents and bundles you want from the marketplace listRunning what Anthropic ships, unmodified
Upload a zipZip any directory under plugins/ (for example plugins/agent-plugins/month-end-closer/) and drop it inFirms that have edited the contents and want to distribute their own version internally

3) Headless, via the Managed Agents API

For teams that want an agent running behind their own systems — say, at 2am on the last day of every month — the repo ships deployment templates for all ten agents under managed-agent-cookbooks/. This route differs from the other two in one important way: you have to clone the repo first, because marketplace add leaves no checkout for you to run the script from.

# requires jq and python3 with pyyaml, or the script stops immediately
git clone https://github.com/anthropics/financial-services
cd financial-services

export ANTHROPIC_API_KEY=sk-ant-...
export GL_MCP_URL=...          # your ledger endpoint (read-only)
export SUBLEDGER_MCP_URL=...   # your subledger endpoint

# rehearse first — no API key needed, nothing is sent to the API
scripts/deploy-managed-agent.sh gl-reconciler --dry-run

# the real thing
scripts/deploy-managed-agent.sh gl-reconciler

The script resolves the file references in the template, uploads the skills as custom skills, creates the leaf-worker subagents first and POSTs the orchestrator to /v1/agents last. The agent.yaml itself is more readable than you would expect — this is part of gl-reconciler:

name: gl-reconciler
model: claude-opus-4-7

tools:
  - type: agent_toolset_20260401
    default_config:
      enabled: false        # everything off by default
    configs:
      - name: read
        enabled: true
      - name: grep
        enabled: true

mcp_servers:
  - type: url
    name: internal-gl
    url: ${GL_MCP_URL}      # set via environment or a vault

Two details are worth copying. The model: line pins a specific version — change it to whichever model your firm has approved, Opus 5 included. And enabled: false as the default, with tools switched on one at a time, is the posture every agent in your organisation should start from, not just this one.

Before you run it for real: Managed Agents is still a gated beta — the script sends an anthropic-beta: managed-agents-2026-04-01 header, and if your organisation has not been granted access the call fails even with a valid API key. One more trap: the script derives REPO_SLUG from git config --get remote.origin.url, so if you run it outside a checkout with a remote you must set that variable yourself.

The Security Architecture — the Part Worth Stealing

The most valuable thing in this repo may not be the finance skills at all. It is the pattern for structuring an agent so that a document from outside cannot do damage. Look at how gl-reconciler splits one job across four roles, each holding a different set of permissions:

RoleJobPermissions
ReaderReads external documents — counterparty and custodian statementsRead and grep only. No MCP access, no write tool. Output must be schema-validated JSON with a length cap
OrchestratorRuns the reconciliation, dispatches to the other workers, aggregates results and hands off — it never opens an external document itselfRead-only MCP servers. No write access, no shell
CriticIndependently re-verifies every reported break against the ledger and subledger, returning confirmed or rejected, before the set reaches the resolverTrusted internal sources only. Never opens counterparty files, and holds no write access
ResolverWrites the exception reportThe only role that can write files — and it never touches an external document directly

Security Warnings — why the separation matters

Documents arriving from outside your firm are untrusted input. If someone embeds instructions inside a PDF or a spreadsheet and the agent reading it also holds write access or a line into internal systems, those hidden instructions reach production. The repo states the intent directly: a payload in one of those documents cannot reach a shell, a write tool, or a firm system. Any organisation designing its own agents should read this alongside security and data governance for Claude.

One more deliberate constraint: named agents never call each other directly. They emit a handoff_request, and your own orchestration layer validates it against an allowlist before routing it on. When gl-reconciler finishes confirming breaks, that is how the work reaches month-end-closer — through a checkpoint, not through a private back channel.

Limits You Should Know First

The repo is unusually candid about its own boundaries, and they are worth reading before expectations get set:

LimitWhat it meansWhat you must supply
It does not post and it does not approveThe disclaimer is explicit: these agents draft analyst work product for review by qualified professionals. They make no investment recommendations, execute no transactions, bind no risk, post to no ledger and approve no onboardingA human reviewer and signature on every output
The accounting logic is shaped around LP/GP fund practiceSkills like accrual-schedule and nav-tieout are written in the vocabulary of capital calls, waterfalls and carried interest. There is no VAT, no withholding tax and no local statutory chart of accountsYour own local accounting context, added to the skill files
Connectors need your own contractsThe plugin supplies the wiring, not the dataA provider subscription and API key, or a repoint to internal systems
Subagent delegation is a previewThe repo flags callable_agents as a research preview capabilityA narrowly scoped first test
These are templates, not a productNo settings screen, no service level agreementTeam time to adapt them — which is exactly what they were published for

How Far Can This Reach Into Your ERP?

The question finance teams ask within a minute is whether it can read the data in their ERP. The honest answer is yes, if somebody builds the connection. None of these agents is bound to a particular database; they speak MCP and nothing else. That is why gl-reconciler only ever says ${GL_MCP_URL} — the far end can be any ERP willing to expose a read-only endpoint.

On the Saeree ERP side we hold two lines:

QuestionWhere we actually stand
Where does the data live?The ERP itself can be deployed on-premise, so the data never leaves the building. Claude is a cloud service. These are two separate statements and we do not blur them into one sentence.
What can the AI touch?Read access scoped by user role, with every access written to an audit trail. Not an open database handed to a model.

We ran this on ourselves first — connecting MCP to our own procurement, inventory, HR and document workflows, hitting the problems and fixing them — and only opened MCP integration work to clients in September 2026. So there are no client results claimed in this article.

For a team starting out, the sensible order is to begin read-only and offline: export a trial balance, let the agent hunt for unmatched entries, and compare what it finds against what your people find by hand. When the two agree, open a read-only endpoint. Write-back is a much later conversation — and in plenty of organisations the final answer is that it is never needed at all.

Who It Suits — and Who It Does Not

A good fit if…Not yet, if…
You have someone comfortable editing Markdown and YAMLYou want software that works out of the box with no editing
The target work is repetitive with complete source documentsThe work is judgement-heavy with nothing to check against
You accept that every output needs a human reviewerYou expect the system to post entries or approve onboarding by itself
You want a well-considered pattern for agent permissionsYou have no policy yet on who may access what
Claude is already in use at your firm (Team or above)There is no plan for a paid deployment

Conclusion

Claude for Financial Services is not a finished product. It is a set of blueprints published in full — how a working finance agent should be structured, how much permission it should hold, and where the human belongs in the process. For firms outside the US, the value may not be the DCF or LBO skills at all; it is the security pattern and the discipline of splitting one job into several narrow roles. That travels to your own internal workflows immediately, without waiting for anyone to localise it.

If you want a real feel for it, five minutes is enough: add the marketplace, install financial-analysis, and run /comps against your own sample data once. That will tell you more than ten pages of description.

"The part worth copying from this repo is not the valuation maths. It is splitting one job into four roles and giving only one of them the right to write."

- The Saeree ERP team

References

Want Claude connected to your own systems?

Grand Linux Solution supplies Claude for organisations and builds MCP connections into ERP, procurement, inventory and document workflows — scoped by user role, with a full audit trail on every access.

Get advice / request a quote

Tel 02-347-7730 | sale@grandlinux.com

Saeree ERP Author

About the Author

Paitoon Butri

Network & Server Security Specialist, Grand Linux Solution Co., Ltd.