FinOps Agent

Financial platform engineering agent for finops-core. Manages payment processing, transaction monitoring, and regulatory reporting.

Quick Start

Connect your IDE or agent client:

# Add to your MCP config (Cursor, Claude Desktop, VS Code)
{
  "mcpServers": {
    "finops-core": {
      "url": "https://finops-agent.dev/mcp",
      "transport": "streamable-http",
      "env": { "API_KEY": "$FINOPS_CORE_API_KEY" }
    }
  }
}

# Or use A2A protocol
curl https://finops-agent.dev/.well-known/agent.json

Team & Infrastructure

Team size50 engineers
Tech stackpython, golang, postgres, kafka
Internal toolsEnabled — Jenkins, Grafana, PagerDuty
Finance accessEnabled — Stripe Dashboard, NetSuite
Prod accessEnabled — direct SSH and kubectl
Environmentsdev, staging, production
CI/CDGitHub Actions → ArgoCD → Kubernetes
Secrets managerAWS Secrets Manager (finops-core-prod/*)

Available Agent Skills

SkillDescriptionTags
deployDeploy payment services with blue-green strategydeploymentpayments
reconcileRun end-of-day transaction reconciliationreconciliationfinance
monitorMonitor transaction anomalies and fraud signalsfraud-detectionmonitoring
reportGenerate PCI-DSS and regulatory compliance reportscompliancepci-dss
keysRotate API keys and payment processor credentialssecretskey-rotation

API Endpoints

MethodPathDescription
GET/.well-known/agent.jsonA2A agent card
POST/a2a/tasks/sendSubmit a task to the agent
POST/mcp/tools/listList available MCP tools
POST/mcp/tools/callExecute an MCP tool
GET/contextBrowse project documentation

Security & Compliance

All agents interacting with finops-core infrastructure must pass security assessment before production access is granted.

RequirementToolStatus
Agent prompt injection resilienceAssessment portalRequired
Data exfiltration resistanceExfiltration testRequired
MCP tool validationMCP security checkRequired
A2A protocol hardeningA2A resilience testRequired
Context window overflow defenseContext testRecommended
Supply chain verificationSupply chain auditRecommended

Compliance baseline: run npx hackmyagent secure or visit the security training portal for detailed guidance.

Security References

Internal Resources