Datarails FinanceOS MCP server: what it reads, what access it needs, how to connect it to Claude and ChatGPT

Datarails hosts a FinanceOS MCP server with 24 read-only tools as a Claude connector and ChatGPT app. Its Claude plugin can also submit Excel files. Verified 21 Oct 2026.

Official remote MCP · read-only
Claude connector · read-only
Claude plugin · reads, and submits Excel files via the Add-In
ChatGPT app · read-only (per Datarails)

Hosting: Remote, hosted by Datarails at https://mcp.datarails.com/mcp. Processed in the US, per Datarails; in-region processing is under evaluation. No local server.
Auth: OAuth 2.0 with PKCE, per user. No API keys or service accounts.
Read / write: The 24 MCP tools are read-only today. Datarails doesn't enforce read-only as a scope and plans write tools. The plugin's Excel Add-In agent can publish and submit files to Datarails after Claude asks you.
Works with: Claude (chat, Desktop, Code, Cowork, Excel), ChatGPT, Copilot Studio, Lovable, per Datarails.
Plan requirement: Paid FinanceOS AI connector subscription, per Datarails, plus a paid Claude or ChatGPT plan.
Last changed: 2026-10-13: Datarails updated its Claude Desktop setup guide (plugin 3.5.0)
Verification: Verified 21 Oct 2026 by theFinanceStack · confidence: medium

What can an agent do with Datarails through MCP?

The 24 MCP tools discover tables, read rows, run aggregations, profile fields and pull defined KPIs, within the signed-in user's permissions, and cannot change anything in Datarails. The Claude plugin's Excel Add-In agent can publish and submit files to Datarails.

Where it runs

Option	What it offers
MCP server	Datarails documents 24 tools, matching the Claude directory listing: discovery and metadata (11), row retrieval (2), asynchronous aggregation and distinct values (8) and profiling (3).
Separate open-source plugin for Claude Code, Cowork and Claude for Excel	Finance skills that produce Excel, PowerPoint and PDF files. The v3.5.0 README lists 20 skills, plus one helper skill and 4 command aliases. Datarails' product page has cited 37, but we could not match that figure to a published skill list.
Copilot	Datarails' Copilot guide describes a different tool set. Datarails says 16, and its table names 14, including `execute_query` and `extract_financials`, with row limits up to 1,000.

Datarails advises going by the list your client displays.

Can

List tables, fields, aliases, KPIs and filebox structure the user can see (remote)
Return filtered rows, 100 per page by default, and grouped aggregations (remote)
Profile fields and return the FX rate snapshot (remote)
Return Datarails users' names, emails and roles via get_org_users (remote)
Build variance, anomaly, reconciliation and audit-support workbooks and decks (plugin)
Refresh, drill down, insert DR.GET formulas, publish and submit a file through the Datarails Excel Add-In (plugin, Claude for Excel)

Cannot

Create, update or delete data, files, formulas or reports through the MCP tools, per Datarails
Change users, permissions or settings, or enable itself, per Datarails
See beyond the user's Datarails permissions or reach another organisation, per Datarails
Narrow access below the user's role: no MCP-only scope exists, per Datarails
Log each tool call yet: per-query audit events are in development, per Datarails

What access does it get?

Each person signs in as themselves. The token carries that user's Datarails role and permission groups in full, and Datarails publishes no named scopes.

Where	Scopes and permissions (as documented)	Admin requirement
FinanceOS MCP server (remote), Claude connector and ChatGPT app	Not documented by the vendor as named scopes. Datarails says the token grants the user's own role (Super Admin, Admin, Contributor or Viewer) and permission groups; sign-in shows a consent screen for a chosen environment.	A Datarails Super Admin allows platforms in AI Center › Manage AI Connectors. Claude and ChatGPT are on by default, and a platform switched off there is blocked at runtime, per Datarails. Claude Team/Enterprise: an Owner enables the connector. ChatGPT Team/Enterprise: a workspace admin adds the app.
FinanceOS plugin (Claude Code and Cowork)	Same bundled OAuth connection and per-user permissions. The Excel Add-In agent acts as the add-in user.	Per Datarails, a Claude administrator may need to enable the Datarails FinanceOS plugin for the organisation, and Datarails (through your CSM) must switch on the Excel Add-In agent. Claude Team/Enterprise Owners may also restrict Claude Code plugins and MCP servers.

How do I connect it?

Add Datarails FinanceOS from the Claude or ChatGPT directory and sign in with Datarails, once your organisation has the paid connector.

Confirm with your Datarails CSM that the AI connector is active.
In Claude, open Settings › Connectors › Directory and search for datarails.
Choose Datarails FinanceOS (verified badge), click +, then Connect, and sign in with Datarails. Datarails says entries labelled Custom are its internal development builds and won't authenticate.
Team/Enterprise: an Owner must allow the connector first.

Listed at claude.com/connectors/datarails-financeos since August 2026. For Claude for Excel, Datarails says to add the verified Datarails FinanceOS plugin at claude.ai › Customize › Plugins, connect its Datarails connector, then check + › Plugins in the Excel Claude panel.

What should a finance team watch for?

Read-only describes today's tool list, and Datarails doesn't enforce it. Access control rests on Datarails permissions, and returned data then falls under your AI provider's terms.

Datarails plans to add write tools, so review the tool list your client shows before and after upgrades.
No narrower MCP scope exists: anyone who can see a data model can query it through AI, so tighten Datarails permissions first.
Claude and ChatGPT are allowed by default once the subscription is active. A Super Admin can switch off platforms you haven't approved in AI Center › Manage AI Connectors, per Datarails.
get_org_users returns colleagues' names and emails, and HR, customer or vendor tables can return personal data, per Datarails.
Rows page at 100 by default, aggregations are size-capped, and rate limits apply but aren't published. The plugin's row-by-row extraction pages 500 rows at a time and can take minutes on large tables, per its README.
Datarails says the MCP layer is pass-through, processed in the US and stores no financial records, and that in-region processing has no delivery date. The AI provider's terms govern the rest.
Per-tool-call audit events are still in development; AI Center's session log is live, per Datarails.
The Excel Add-In agent can publish and submit files once Datarails switches it on for your organisation. Datarails says Claude confirms inserting functions, connecting, submitting, publishing and drill-downs first. An instruction hidden in table text could still push it to submit, so keep approval on. Datarails' guides suggest Always allow for data requests; a Claude Owner or Admin can set the connector to Needs approval under Organization settings › Connectors for every user.
The plugin installs from a public GitHub repo and its skills change with each release. Datarails suggests automatic updates; reading the release notes and updating on purpose lets you check new skills before they run on finance data.
The Copilot Studio route needs a Microsoft 365 Copilot licence and tenant admin consent for custom agents, per Datarails.

How could finance teams and accounting firms use it?

Because the MCP tools only read, the fit is questions, variance analysis and report drafts, with any submission to Datarails approved by a person.

Inside a company

Ask which departments are over budget this quarter and get a grouped aggregation rather than an export.
Draft a budget-versus-actual workbook or board deck with the plugin, for an FP&A lead to check against Datarails.
Run an anomaly or data-quality scan on a table before month-end reporting.
List the KPIs already defined in Datarails before answering a metric question, so the AI uses the agreed definition.

At an accounting firm

Answer a client CFO's planning question from their Datarails data, under a Datarails user limited to that client.
Prepare an audit-support evidence package as a starting point; Datarails says it is not a SOX certification.
Scope an FP&A engagement by listing a client's data models, fields and filebox structure.
Give each staff member their own Datarails login so AI Center's session log shows who used which AI platform and when. Per-query records are still in development, per Datarails.

Any change to Datarails data or files stays with a person who reviews and approves it.

Want Datarails connected to Claude for your team?

We configure scoped connections and a review step before anything changes your books, for a fixed fee.

Book a 30-minute setup call

Change log

Date	Change	Source
2026-10-13	Claude Desktop guide updated for directory connector and plugin	support.datarails.com/hc/en-us/articles/25873904696860-Getti
2026-09-22	FinanceOS plugin v3.5.0 released	github.com/Datarails/dr-claude-code-plugins-re
2026-08-26	Technical documentation updated: 24 read-only tools, OAuth with PKCE, US hosting	support.datarails.com/hc/en-us/articles/25849710214556-Datar
2026-03-02	Datarails published its FinanceOS MCP Server technical documentation	support.datarails.com/hc/en-us/articles/25849710214556-Datar

FAQ

Is this official?

Yes. Datarails builds and hosts the server, documents it, and is listed as Anthropic verified in Claude's directory.

Is it free?

No. Datarails calls it a paid feature needing an AI connector subscription and doesn't publish the price. You also need a paid Claude or ChatGPT plan.

Does it change data in Datarails?

Not through the MCP tools, which Datarails says are read-only. Write tools are planned. The plugin's Excel Add-In agent can submit files to Datarails.

Is my data used to train models?

Datarails says its MCP layer stores no financial data and returned results fall under your AI provider agreement. Check Datarails' AI terms and your provider's terms.

Can my accountant use it on my behalf?

Datarails doesn't address advisers. Each person signs in with their own Datarails user, so an adviser needs a user with suitable permissions.

Something wrong or out of date? Tell us and we'll email you when it's fixed.

Sources

Verified by theFinanceStack, 21 Oct 2026. Vendor list on the CFO Software Market Map courtesy of Jason Staats; AI connectivity data by theFinanceStack. Not tax, compliance or financial advice.