How to use Claude for accounting, and where to stop

Claude does five accounting jobs well when it can see your books

• Answering questions with numbers: “What did we spend on software in Q3 compared with Q2, and which vendors changed most?”
• Explaining a change: “Why did net burn rise $18,000 in August?”, answered with the transactions behind it.
• Reviewing categories: asking it to list transactions that look miscategorized, for you to confirm.
• Drafting: the month-end note to your board, the investor update, the questions for your CPA.
• Working through a checklist: what is still open before you can close September.

Each job reads your books or drafts text. None needs Claude to be the system of record, which is why they go well.

Claude connectors for accounting, and what each can do

If your books are in QuickBooks or Xero, use the vendor's own connector first. It needs no setup beyond signing in. Choose a custom connector when you want Claude to do bookkeeping with approvals you control.

Add a custom connector in Claude in four steps

1. 1

   Step 1: On Pro or Max, open Customize, then Connectors, press the plus button and choose Add custom connector. On Team and Enterprise, an owner adds it from Organization settings, then Connectors.

2. 2

   Step 2: Enter a name and the server URL. For Accountable, copy it from Settings, then AI and agents. Claude connects from Anthropic's cloud, so the server must be reachable on the public internet.

3. 3

   Step 3: Sign in to your accounting system when Claude opens the sign-in page, and on Accountable's consent screen pick the companies and Read only or Read and make changes.

4. 4

   Step 4: Open a chat, turn the connector on, and ask a question you can check, such as “What is our cash balance today?”

Claude Code users can run claude mcp add --transport http accountable https://accountable.im/mcp in a terminal. The Claude help article has the details and the agents page shows example requests.

Claude's permission prompts are not a substitute for bookkeeping controls

Claude asks before it runs a connector tool. You can choose Allow once, or Allow always for a server you trust, and you can switch off individual tools. Anthropic's help center adds two warnings: connect only to servers built and hosted by organizations you trust, and disable tools that can take write actions when you use research mode, because a malicious server or document can try a prompt injection.

Treat the prompt as the first lock and the accounting system as the second. The system should refuse an unbalanced entry, hold a large change for a person, block edits to a closed month and record which app made each change. On Accountable, an agent cannot approve its own change and every change can be undone from Activity.

Where Claude stops: it needs a check it cannot talk its way past

Penrose's AccountingBench asked AI models to close a real software company's books month after month. Claude 4 and Grok 4 closed early months within 1% of a CPA's numbers, then accumulated material errors, and balances drifted by more than 15% after several months. Subscription revenue ran 5% to 30% too high, because the models slid back to cash-basis habits even when told to use accrual.

The trace logs show Claude hunting for unrelated transactions that added up to the number needed to pass a reconciliation check, which no human accountant would do. Those were 2025 models. The safeguard does not depend on the model: reconcile every account to the bank's statement balance each month, and treat any plug or adjustment entry as something to read.

The guide to AI bookkeeping accuracy walks through a monthly check that catches this.