Skip to content
_AI & MCP/

AI designs. The ledger decides.

Use AI to design your ledger in minutes, and give agents a governed gateway to act on it: deterministic guarantees underneath, whatever the model does above.

AI meets the ledger in two places. At design time, Studio turns a description of your business into a complete ledger schema. At run time, agents act against the ledger through the same enforcement as any other client: balance constraints, idempotency, and an immutable audit trail. Probabilistic systems above, deterministic truth below.

_01/

Design time

_Studio/

Describe your flows, attach your documents, and get a complete schema: chart of accounts, Numscript templates, and queries. Free at studio.formance.com.

_Schemas/

The output is a versioned schema object you review, edit, and deploy to your stack in one step. AI proposes; you approve; the ledger enforces.

_02/

Run time

_MCP gateway/

Agents connect to the ledger through MCP, so every agent action passes the same authentication, RBAC, and constraints as any API client.

_Ledger-enforced guardrails/

Agent budgets as funded accounts, spend limits as balance constraints, holds for mandate reservations. Enforced at posting time, not in the prompt.

_Exactly-once execution/

Deterministic idempotency keys collapse retried and duplicated tool calls into one transaction.

_Attributed audit trail/

Every agent posting carries actor, task, and authorizing context in an immutable, hash-chained log.

_SHOWCASE/
numscript
// An agent's spend is bounded by its account,
// not by its prompt
vars {
  account $agent
  account $vendor
  monetary $amount
}

send $amount (
  source = @agents:$agent:budget
  destination = $vendor
)

// Insufficient budget: the transaction fails
// atomically. Nothing to clean up.
_VOICES/

Trusted by builders

LiberisLiberis
Formance enabled us to ship new lending products faster by providing a customizable foundation that let us reliably express the complexities of our flow of funds.

Embedded finance · reconciliation across 14 countries

See customer story
DoctolibDoctolib
Formance is the foundation of our Financial OS, the open-source approach lets us retain control over this key component.

Healthcare · Financial OS

PayflipPayflip
Formance helped us kick off our move into fintech, with robust infrastructure and intuitive developer tooling.

Benefits · fintech infrastructure

_TRUST/

Built for regulated money.

Enterprise controls, the certifications auditors ask for, and an immutable record, out of the box.

See our trust center
THE COMPLIANCE STACK
IAM, RBAC & SSO
Non-repudiation
Audit logs
Observability & monitoring
Real-time events
Admin console
_AUDIT-LOG/ NON-REPUDIATION

09:41:07Z AUDIT gateway POST /api/ledger/v2/main/transactions 200 sub:ops@acme.io

09:41:09Z LOG id:4093 NEW_TRANSACTION ledger:main

09:41:12Z LOG id:4094 SET_METADATA ledger:main

09:41:15Z LOG id:4095 REVERTED_TRANSACTION ledger:main

09:41:18Z AUDIT gateway GET /api/ledger/v2/main/logs 200 sub:audit@acme.io

CERTIFICATIONS
AICPA SOC IICERTIFIED
ISO 27001CERTIFIED
DORACOMPLIANT
REGULATORY FRAMEWORKS
EMIFCAMTLNYDFS Trust CharterOCC CharterMiCAGENIUS
_ATTESTED/
_PREV/

Enterprise stack

FAQ

Questions, answered

01 / DOES AI TOUCH MY TRANSACTION DATA?

Studio works at design time on the descriptions and documents you give it. Transaction execution is fully deterministic: no model sits in the posting path.

02 / WHAT EXACTLY DOES STUDIO PRODUCE?

A complete, versioned ledger schema: the chart of accounts, parameterized Numscript templates per business event, and the queries you will run. You review and deploy it as one object.

03 / HOW DO AGENTS CONNECT?

Through the MCP gateway, with the same authentication and RBAC as any client. An agent is a principal with scoped permissions and a funded account, never a superuser.

04 / CAN AGENTS OVERSPEND OR DOUBLE-PAY?

Not structurally. Spend limits are ledger balance constraints checked at posting time, and idempotency keys make retries collapse into a single transaction.

GET STARTED

Give AI a ledger it cannot break

Design your schema in Studio, or talk to us about agentic flows.