In April 2026, the Linux Foundation launched the x402 Foundation, giving Coinbase’s x402 payment protocol a neutral open-source home with support from Circle, Google Cloud, Microsoft, Stripe, and Visa.
That matters because financial AI is moving past chat.
The next frontier is an agent that can safely touch payments, filings, ledgers, statements, sanctions lists, market data, and approval workflows.
That stack is the tool layer: the APIs, MCP servers, repos, data standards, ledgers, parsers, and controls that let an agent reach a real financial workflow inside proper guardrails.
The firms that win will be the ones whose systems an agent can operate. MCP matters because it gives AI applications one standard way to connect to external tools instead of a custom integration per system.
Here is the stack, by vertical.
The simple rule
A repo is valuable if it sits near one of five choke points.
Money movement.
Identity and account access.
Market and company data.
Risk, compliance, and sanctions.
Workflow governance.
Everything else is noise.
How to read this
Repos are open-source code you run, fork, or learn from.
APIs are hosted services you call in production.
MCPs are Model Context Protocol servers. They let an agent call a financial system directly.
The MCP layer is early, but it is where the workflow advantage is forming.
1. The Agent Layer (MCPs)
Whoever controls the MCP layer controls how agents reach financial systems. These connect agents to real operations, not novelty.
Stripe MCP exposes tools for payments, refunds, invoices, subscriptions, disputes, and payment links, hosted at
mcp.stripe.com. A Treasury extension lets agents move money, pay bills, and issue cards.PayPal MCP is official and live at
mcp.paypal.com, with both a local agent toolkit and a remote OAuth server. It covers invoices, orders, refunds, and subscriptions.Square MCP is in beta and connects agents to customers, orders, catalog, and payments. It is the SMB commerce option.
Plaid MCP gives agents access to Plaid developer diagnostics, analytics, Link health, and integration support. The broad account and transaction data still runs through Plaid’s production APIs.
SEC EDGAR MCP connects agents to filings, financial statements, and insider trading data. It is the diligence workhorse.
OpenBB MCP serves market and research data into analyst and portfolio workflows.
Moov Watchman MCP runs sanctions and screening checks as an agent-callable gate.
Genesis Global MCP governs how agents act inside institutional capital markets applications, with permissions and human approval built in.
Guardrail. Read-only by default. Human approval before any money moves. Agent toolchains can now call payment, refund, billing, and treasury actions, so the controls are not optional. The unlock is not one MCP. It is chaining several safely.
2. Wealth Management
The cleanest agentic use case. Gather accounts, classify holdings, analyze risk, recommend, document suitability, push a human-approved action.
Plaid Investments pulls balances, holdings, and investment transactions. It is the connective tissue for a household balance sheet.
plaid.com/docsOpenBB is a credible open financial data layer covering equities, options, macro, and crypto.
github.com/OpenBB-finance/OpenBBOpenFIGI maps securities to proper identifiers across tickers, CUSIPs, and ISINs. Wealth and asset management break the moment IDs fail to reconcile.
openfigi.comPyPortfolioOpt implements mean-variance, Black-Litterman, shrinkage, and Hierarchical Risk Parity in Python.
github.com/robertmartin8/PyPortfolioOptQuantLib handles bond analytics, curve construction, and fixed-income risk.
github.com/lballabio/QuantLib
Do not treat PyPortfolioOpt as a black-box allocator. Weak inputs produce confident, wrong answers.
Build this. An Advisor Control Tower. Pull holdings through Plaid, normalize through OpenFIGI, analyze risk through OpenBB and PyPortfolioOpt, generate recommendations, require human approval, log every source and override.
3. Payments
This is where agentic finance gets real, and dangerous. An agent that reads docs is useful. An agent that can trigger payouts needs hard limits.
moov-io is one of the most important open-source payments ecosystems in the United States. It maintains
ach(NACHA files),achgateway(event-driven ACH run in production),wire(Fedwire),iso8583(card messaging),fed(routing lookup), andwatchman(sanctions). All Apache-2.0, all Go.github.com/moov-ioStripe API and MCP cover cards, billing, and agentic commerce. The
stripe/aimonorepo holds the agent toolkit.github.com/stripe/aiPayPal and Square MCPs cover merchant and SMB payment operations through natural language.
Plaid Auth, Identity, and Transactions handle account funding, verification, cash-flow underwriting, and fraud screening.
Blnk is an open-source double-entry ledger for wallets, balances, and reconciliation.
github.com/blnkfinance/blnk
Rule. If money moves, there must be a ledger. Do not store balances as casual database fields.
Build this. A Payment Ops Agent. Read Stripe, PayPal, or Square through MCP, verify accounts through Plaid, screen counterparties through Watchman or OpenSanctions, write ledger entries in Blnk, require approval for refunds and payouts.
4. Treasury and Cash Management
The most underrated agent use case in the sector. Treasury is full of repetitive, governed, high-value workflows.
ISO 20022 and CAMT.053 parsers ingest bank statements in the format adoption is accelerating toward across bank messaging. The
EmergentFinancial/iso-20022Rust SDK coverspain,pacs, andcamt.github.com/EmergentFinancial/iso-20022Moov Fed and Wire validate routing data and Fedwire messages.
github.com/moov-ioFRED API gives programmatic access to rates, spreads, inflation, and macro series that drive cash and funding decisions.
fred.stlouisfed.orgCircle, Fireblocks, and Coinbase Developer Platform are the digital-asset treasury layer for USDC payments, vaults, wallets, and programmable payouts.
developers.circle.com,developers.fireblocks.com,docs.cdp.coinbase.comBlnk again, for internal cash accounting.
Guardrail. Autonomous execution stays off until policy, approvals, limits, sanctions checks, and rollback are solved.
Build this. A Liquidity Control Tower. Ingest CAMT.053 statements, pull FRED rates, forecast 7, 14, and 30-day liquidity, compare T-Bills, money market funds, insured deposits, tokenized deposits, and stablecoins, recommend sweeps, require four-eyes approval.
5. Investment Banking
Banking is not short on data. It is short on clean, traceable workflows. The useful agent finds the right filing, extracts the right number, and cites the source.
SEC EDGAR APIs expose company submissions and XBRL company facts. This is the foundation of public-company analysis.
sec.govSEC EDGAR MCP puts filing-backed research and comps in front of an agent.
github.com/stefanoamorelli/sec-edgar-mcpFINOS Legend is the open data governance platform Goldman Sachs contributed for governed models and lineage.
github.com/finos/legendFINOS Perspective is the analytics and visualization engine J.P. Morgan contributed, built for large and streaming data.
github.com/finos/perspectiveOpenFIGI normalizes entities and securities across the comp set.
openfigi.com
Build this. A Deal Diligence Agent. Pull filings through EDGAR, normalize entities through OpenFIGI, extract financials, draft diligence questions, cite every source, push into a controlled analyst workspace. Never publish client-facing work without review.
6. Capital Markets and Trading
The open-source stack here is stronger than most people realize.
QuickFIX is a core open-source implementation of the FIX protocol, versions 4.0 through 5.0 SP2. FIX is the standard for order messaging and connectivity, and QuickFIX is how many teams run it.
github.com/quickfix/quickfixFINOS Common Domain Model is a machine-executable model for how products trade and settle across the lifecycle, covering derivatives, repo, and securities lending.
github.com/finos/common-domain-modelFINOS FDC3 is the open standard for financial desktop interoperability, letting trader and banker apps share context and launch workflows.
github.com/finos/FDC3QuantLib belongs here too for pricing and risk.
github.com/lballabio/QuantLibBacktrader and Zipline Reloaded handle strategy research and backtesting.
github.com/mementum/backtrader,github.com/stefan-jansen/zipline-reloaded
Do not confuse a backtester with production trading infrastructure.
7. Risk, Compliance, and Financial Crime
This is where most financial AI products either earn trust or get killed. An agent without controls is a liability.
OpenSanctions is an open database of sanctions, PEPs, and related entities, with bulk data and a screening API.
github.com/opensanctions/opensanctionsOFAC Sanctions List Service provides the primary-source datasets and a fuzzy-matching search tool.
ofac.treasury.govMoov Watchman runs AML, KYC, and OFAC search through an HTTP server, a Go library, and an MCP server.
github.com/moov-io/watchmanFINOS Morphir captures business logic as data so policy and regulatory rules stay explainable and portable.
finos.org/morphirFINOS Waltz maps the technology landscape, including application ownership, dependencies, and lineage, for resilience and regulatory response.
github.com/finos/waltz
8. Insurance
Insurance is an ideal agentic environment. The work is document-heavy, rules-heavy, and approval-heavy, which is exactly where controlled agents earn their place.
OpenSanctions screens insureds, vendors, claimants, and counterparties.
github.com/opensanctions/opensanctionsFINOS FDC3 carries context across claims, underwriting, billing, CRM, and policy systems on the desktop.
github.com/finos/FDC3FINOS Waltz maps application ownership and dependencies for operational resilience.
github.com/finos/waltzBlnk holds premium, commission, claim payment, and receivable state in a real ledger.
github.com/blnkfinance/blnkMoov ACH and Wire validate payment files and claim payment workflows.
github.com/moov-ioSEC EDGAR APIs surface public-company insureds, broker research, and carrier intelligence.
sec.gov
Build this. A Claims Payment Control Agent. Read claim payment instructions, validate routing details, screen payees, check policy limits, flag exceptions, prepare the payment memo, and require human approval before release.
9. Digital Assets and Stablecoins
No longer a separate category. This is becoming another settlement and treasury layer.
Circle supports USDC payments, payouts, wallets, and cross-chain transfers.
developers.circle.comFireblocks provides vault accounts, transactions, wallet infrastructure, and webhooks.
developers.fireblocks.comCoinbase Developer Platform covers wallets, payments, onchain data, stablecoins, and agentic wallet workflows.
docs.cdp.coinbase.comChainalysis sanctions oracle lets a smart contract check whether a wallet address is sanctioned.
go.chainalysis.com
Do not pretend every treasury problem needs a blockchain. Most do not.
The killer stack by vertical
Wealth. Plaid Investments, OpenBB, OpenFIGI, PyPortfolioOpt, QuantLib, FRED, SEC EDGAR MCP, OpenSanctions.
Payments. Stripe, PayPal MCP, Square MCP, Plaid Auth, moov-io (ACH, Wire, Fed, Watchman), Blnk.
Treasury. ISO 20022 parsers, Moov Fed and Wire, FRED, Blnk, Circle, Fireblocks, Coinbase, Chainalysis, OpenSanctions.
Investment Banking. SEC EDGAR APIs and MCP, OpenFIGI, OpenBB, FINOS Legend, FINOS Perspective, FINOS CDM, QuantLib.
Capital Markets. QuickFIX, FINOS CDM, FDC3, Perspective, QuantLib, Backtrader, Zipline Reloaded, OpenFIGI.
Risk and Compliance. OpenSanctions, OFAC, Moov Watchman, FINOS Morphir, FINOS Waltz, Blnk.
Insurance. OpenSanctions, FINOS FDC3, FINOS Waltz, Blnk, Moov ACH and Wire, SEC EDGAR.
The hard truth
Most financial AI demos stop at text. Financial services does not run on text. It runs on balances, ledgers, messages, filings, identifiers, approvals, settlement, and audit trails.
That is why these repos, APIs, and MCPs matter. They are the bridge between AI and real finance.
The next wave will not be “chat with your bank.” It will be agents that read filings, reconcile payments, screen counterparties, monitor liquidity, draft memos, and never move money without controls.
The advantage goes to the teams that build the tool layer. That work starts today.
Sources
Linux Foundation, x402 Foundation launch:
linuxfoundation.org/pressStripe MCP and Treasury tools:
docs.stripe.com/mcpPayPal MCP:
developer.paypal.commoov-io open-source payments:
github.com/moov-ioPlaid developer docs:
plaid.com/docsOpenBB:
github.com/OpenBB-finance/OpenBBFINOS projects (Legend, Perspective, CDM, FDC3, Morphir, Waltz):
finos.orgQuickFIX and the FIX protocol:
github.com/quickfix/quickfixOpenSanctions:
opensanctions.orgOFAC Sanctions List Service:
ofac.treasury.govSEC EDGAR APIs:
sec.govCircle, Fireblocks, Coinbase Developer Platform:
developers.circle.com,developers.fireblocks.com,docs.cdp.coinbase.com
If this was useful, send it to one person on your team who builds. That is how these lists reach the people who need them.
The views here are my own and do not represent my employer. This article is for informational purposes only and is not legal, compliance, investment, or professional advice. I have no financial relationship with the tools mentioned. Tools and their capabilities change quickly, so verify current documentation before you build.