Try Professional
Turn Claude Code into a permanent AI company: one prompt builds a hierarchy of agents with roles, memory and vetted skills. Multi-agent orchestration via MCP.
Preview: proven on Claude only. v0.1.2. It works, and it has rough edges. What was tested.
You describe a business, and Claude Code designs a company for it: departments, roles, and skills from GitHub that are checked before they're used. You approve it, and then you give it commands. It works only when you give it a command, and it remembers between commands: every role, from the CEO down, keeps its own memory and knows what it's working on.
Who it's for
Anyone who wants a team of agents, organized like a professional company: you give the CEO a job, a department's manager hands it to a worker, the worker does it with real tools (the shell, git and gh, files, and the web), QA and the manager check it, and the CEO reports back to you. Each role remembers its own work, uses its own skills, and leaves an audit trail.
For an everyday one-off task, use a single agent. It's cheaper and faster. A hierarchy spends tokens on reviews, and that's only worth it when a mistake would reach someone outside.
Demo
A real run on 2026-11-08, on Sonnet through Claude Code. Waiting is cut, and each cut says how long it was. Long output is shortened, and marked. Claude Code ran non-interactively, and a script answered the real review screen, standing in for the person who approves. How it was recorded.
What a company makes
These are real, from the journey. This catering company was designed from one line, "a catering business that delivers office lunches", and approved:
Catering
├── Executive: CEO (head) · Chief of Staff
├── Operations: Ops Lead (head) · Support · Menu Planner · Delivery Scheduler
├── Finance: Finance Lead (head)
├── Marketing: Marketing Lead (head) · Content Writer
├── Sales: Sales Lead (head) · Proposal Writer
└── Legal: Counsel (head) · Compliance Reviewer
Asked for "a weekly lunch menu and a price list for a new office client with 30 people", its menu planner wrote this. The ops lead approved it for QA, and Counsel for Legal:
Mon - Lemon-herb grilled chicken, rice pilaf, green salad. Allergens: none of the 14 major allergens in the base
recipe (check stock cube/dressing). Halal: yes if halal-certified chicken is sourced. Not vegetarian.
Tue - Vegetable lasagna with side salad. Vegetarian. Allergens: gluten, milk, egg, celery.
Wed - Chickpea & spinach coconut curry with basmati rice. Vegan, vegetarian, halal, gluten-free.
...
PRICE LIST (USD, excl. tax and delivery)
Item | Per person | Total for 30
Mon Chicken pilaf | 11.50 | 345.00
...
WEEK TOTAL | 55.50 | 1,665.00
It says what it doesn't know: prices are placeholders, and the allergen notes are for a kitchen to confirm. The whole menu, and its index.
It works in the command's language. For a banana-chip business in Indonesia, asked about shipping to Surabaya, a reply that names no rate it doesn't have:
Halo Kak, terima kasih sudah menghubungi kami! Kami kirim ke Surabaya. Besar ongkir tergantung berat pesanan
dan kurir yang dipilih. ...
The whole reply, and a two-week Instagram plan in Indonesian.
Quickstart
For Claude Code. You need Python 3.10 or newer, and Claude Code signed in. It uses your own Claude plan, with no API key, and each role runs as its own subagent.
pip install "try-professional[mcp]"
mkdir my-company && cd my-company
trypro start "a weekly newsletter for my yoga studio's members"
Say what you want made, in your own words. trypro start checks your setup, has Claude Code design a company that can do it, and shows you that company to approve: type a, then approve. A person has to, and no model can. Then it opens Claude Code on your request. When Claude Code asks whether you trust this folder, say yes. Results are files, in deliverables/<run-id>/. Start with index.md.
After that, start Claude Code in this folder, and say what you want. You don't need /company: the folder's front desk hands every request to the company, and the company remembers its earlier work.
Step by step
The same, one step at a time.
1. Install it, and make a folder for your company.
pip install "try-professional[mcp]"
mkdir my-company && cd my-company
2. Set it up for Claude Code. This checks Python, Claude Code, and your GitHub token, says how to fix anything missing, and adds Try Professional to Claude Code for this folder.
trypro setup claude-code
If it says GITHUB_TOKEN isn't set, set it before you start Claude Code. Without one a company gets no skills. With the GitHub CLI, that's export GITHUB_TOKEN=$(gh auth token).
3. Describe your business. Claude Code designs a company and chooses skills, and then gives you a proposal id.
claude "Use the trypro tools to design a company for a catering business that delivers office lunches."
4. Read the proposal, and approve it. A person has to do this, in a terminal. No model can. Approving also creates the company's roles in Claude Code. The first approval downloads a local embedding model, about 0.22 GB. Your text is embedded on your machine and isn't sent anywhere.
trypro init --review <proposal-id>
5. Start Claude Code again in this folder, and give the company a command. When it asks whether you trust this folder, say yes. Otherwise each role's server can't start, and /company stops rather than do a role's work itself.
/company Write a weekly lunch menu and a price list for a new office client with 30 people
Your session only coordinates. Results are files, in deliverables/<run-id>/. Start with index.md.
Once a company exists
/company <a command> Give it more work. It remembers earlier work
trypro doctor Check your setup, and how to fix what's wrong
trypro status Memory size, and tokens by month and command
trypro audit <run-id> Verify a run's audit log
trypro decide <run-id> <request-id> resume Answer a command that stopped to ask you
/company continue <run-id> Then carry on with it
trypro cancel <run-id> Stop it. Its records stay
trypro agents claude-code Rewrite the roles for Claude Code, after the company changes
Build on Try Professional
A company can be a part of your own agent. The Python API is stable across 0.x minor versions; the MCP tools and the adapter interface are experimental. What's stable, the Claude Code path, custom roles, and extending it.
from try_professional import Company
company = Company.create("acme", name="Acme") # the default company: no model, no cost
company.add_role(
"marketing",
"newsletter-editor",
title="Newsletter Editor",
mission="Write the weekly customer newsletter.",
skill_needs=["write email newsletters"],
)
company.setup_claude_code() # then, in Claude Code: /company <goal>
examples/claude-code-agent has a delegate() tool your agent can call, to hand a goal to the company through Claude Code and read back what it made. Approving a company the AI designed, and answering a run's questions, stay with a person.
Multi-agent orchestration for Claude Code
Each piece of work has one owner, gets reviewed, and leaves an audit log you can verify. Each role runs as its own subagent, which sees only its own assignment, memory, and skills. The rules that matter are enforced by code, not by asking a model nicely.
- A company from one description, adapted from five industry templates, in any language. It proposes, and a person approves.
- Skills from GitHub, vetted first.
skill-customspins each one to a commit and checks its license and content, and a model judges which ones fit each role. It can also be used on its own. - A permanent company. Roles have their own memory, departments and the company have shared memory, and later commands get the finished work of earlier ones.
- Every role is a full agent. In Claude Code, each role works with the shell,
gitandgh, files, and the web, and Claude Code asks you before commands unless you allow them.trypro agents claude-code --sandboxedtakes those tools away, for a company that should only write documents. - Reviews that can't be skipped. QA reviews everything. A Legal department is optional, and off unless the business needs one: then its review is triggered by what the work is, whatever a model declares.
- Rules held by code. Work must report on every item of its brief. Reviews can't approve with blockers. Unmet criteria and unverified claims reach you even if a final report leaves them out. Every command stops at a token limit and asks you, by default 60,000 for a small one and 200,000 for a large one on the API runner, and 150,000 and 500,000 over MCP, where usage is an estimate. It also stops, and says why, when a role keeps spending with nothing moving. Tests play a misbehaving model against these.
- Real separation over MCP. Each role's server shows it only its own assignment, memory, and skills, and the session's server can't do a role's work.
How it works
/company <your command>
|
v
CEO: turns it into criteria someone can check
|
v
Department: does the work <-------- sent back, saying what's wrong
| ^
v |
QA reviews it, and then Legal, if the company has one and the work is public or touches licenses or personal data
|
v
CEO: the final report, in your language
|
v
deliverables/<run-id>/index.md, and an audit log
- Design. Claude Code calls the
tryprotools to adapt one of five industry templates to your business, and to match skills to roles.skill-customspins each skill to a commit, and checks its license and content. - Approve. You read the proposal and approve it in a terminal. No model can do this.
- Roles. Approving, in a folder
trypro setup claude-codeset up, writes one subagent per role. Each has Claude Code's own tools, and a server bound to that role, which gives it only its own assignment, memory, and skills.trypro agents claude-codewrites them again after a company changes. - Commands. Your session only coordinates. It can see who's next, and it can't read an assignment or submit anything. A small command goes straight to one role, and a large one is planned by department heads.
- Memory. Roles keep their own memory, and later commands get the finished work of earlier ones.
What was tested, and how
| Model | How | Result |
|---|---|---|
claude-sonnet-5-5 for every role, and claude-haiku-5-5 for matching skills |
Claude Code 2.1.319 on Windows 11, through MCP, each role as its own process with only that role's server | 9 of 9 commands finished, on 3 businesses. All 108 artifacts were recorded as coming from the right role's own server. Details |
claude-sonnet-5-5 for every role |
/company in one Claude Code session, each role as a subagent, on a business kept out of all training |
One prompt to a company, a command, and a later related command that followed the first. All 23 artifacts came from the right role's own server. It passed on its sixth run, and the fifth stopped at the token limit. Every run |
claude-haiku-5-5 for every role, and for the session |
/company in Claude Code, on the acceptance journey, twice |
0 of 6 commands finished. Each stopped for a person after its rework limit, or because earlier work wasn't approved. Isolation held: 90 artifacts, none claimed. Its reviewers caught 22 of 22 seeded flaws, and sent back 2 of 4 clean documents. Details |
deepseek-v4.1-flash-1017 |
API runner | check-model: usable with caveats. The same small command finished once in three runs, and the other two blocked. Why |
Those are the only models tested. The test suite runs on a scripted model, on Linux, macOS, and Windows.
This doesn't show that a cheap model does good work. Quality on a cheap model is for v0.2.
Do reviews catch flawed work?
We put flawed documents into real runs over MCP, and counted how many reviewers rejected for that flaw. How it ran, and every verdict.
| Flaw | Caught, on the current review rules |
|---|---|
| A wrong number | 6 of 6 |
| A claim with no source | 6 of 6 |
| The wrong language | 6 of 6 |
| A requirement missed from the brief | 6 of 6 |
| A clean document wrongly sent back | 1 of 6 |
This is a small test, and it only shows so much. One run of each document, on claude-sonnet-5-5 only. The documents are short, with one flaw each, and every fact could be checked against the command. Long documents, wrong facts about the world, Legal on its own, and cheap models weren't tested.
The rules are stricter because of this test. On the earlier rules, a reviewer noted an invented claim as minor, and 3 of 4 were caught. The stricter rules also cost something: reviewers now send back some work that didn't need it.
What it costs
Tokens per command on Claude, measured. It's run through Claude Code, so each role's process also carries Claude Code's own instructions, which is most of the cached input. An API model's numbers will differ. The price is what Claude Code reports at API list prices. On a Claude plan, this comes out of your plan's usage instead.
| Business | Command | Input | Cache write | Cache read | Output | List price |
|---|---|---|---|---|---|---|
| Catering | Weekly menu and price list | 36 | 26,552 | 88,837 | 6,360 | $0.18 |
| Catering | Two-sentence customer reply | 40 | 24,500 | 102,816 | 4,254 | $0.15 |
| Catering | Next week's menu, with no repeats | 28 | 22,852 | 78,370 | 5,774 | $0.16 |
| Shorts | 5 Shorts | 134 | 172,426 | 454,803 | 55,696 | $1.29 |
| Shorts | One title | 36 | 21,510 | 86,108 | 3,665 | $0.13 |
| Shorts | 3 more, building on last week | 140 | 251,760 | 573,295 | 60,220 | $1.67 |
| Indonesian snacks | Two-week promotion plan | 40 | 34,659 | 109,538 | 11,300 | $0.26 |
| Indonesian snacks | One customer reply | 36 | 22,775 | 86,890 | 4,230 | $0.14 |
| Indonesian snacks | The next two weeks | 44 | 39,627 | 138,566 | 13,481 | $0.31 |
Those ran before reviews got stricter, which adds rework. The acceptance run on the current rules shows that, with a /company session and its subagents together:
| Business | Command | Input | Cache write | Cache read | Output | List price |
|---|---|---|---|---|---|---|
| Web design agency | Design the company, from one prompt | 36 | 46,635 | 471,088 | 6,075 | $0.29 |
| Web design agency | One-page proposal, 1 round of rework | 90 | 77,480 | 743,298 | 15,794 | $0.46 |
| Web design agency | Homepage copy, 2 rounds of rework | 130 | 106,645 | 1,063,112 | 25,436 | $0.66 |
Small commands cost about half as much since 0.1.2. A small command that one role does no longer gets a final report from the CEO, or a legal review of that report. In 2 of the 3 measured below, Legal had sent that summary back twice, after approving the work itself. QA, and Legal on the work, still run. The same 3 commands, on fresh copies of the same companies, measured the same way as the first table:
| Command | Version | Model calls | Input | Cache write | Cache read | Output | List price |
|---|---|---|---|---|---|---|---|
| Catering: two-sentence customer reply | 0.1.1 | 10 | 68 | 52,362 | 178,415 | 10,986 | $0.34 |
| 0.1.2 | 4 | 30 | 20,017 | 83,794 | 3,779 | $0.13 | |
| Shorts: one title | 0.1.1 | 10 | 62 | 42,381 | 156,052 | 8,005 | $0.27 |
| 0.1.2 | 4 | 26 | 17,033 | 67,547 | 2,811 | $0.10 | |
| Indonesian snacks: one customer reply | 0.1.1 | 6 | 38 | 26,900 | 98,229 | 5,209 | $0.17 |
| 0.1.2 | 6 | 36 | 25,166 | 88,716 | 4,624 | $0.16 |
The last one has a real round of rework on its work in 0.1.2, so it saved little. One run of each, so expect some spread. Details.
A hierarchy spends more than one agent would. On the first table's small commands, reviews alone took 39% to 46% of the output tokens. No comparison with a flat setup has been measured yet. The benchmark is designed, reviewed for bias, and frozen, and it will be run in a later version.
On DeepSeek through the API runner, the one small command that finished took 25,020 tokens: details.
What it needs
- Python 3.10 or newer.
- Memory: about 750 MB for a typical command with 22 roles, because the company shares one embedding process. The most measured in a real command was 829 MB. Having every role's server open at once takes about 2.7 GB. Measured on Windows 11. It waits until 1.8 GB is free before starting, and that includes a 1 GB safety margin. Change it with
TRYPRO_MEMORY_MARGIN_MB.
Known limits
- It's only been proven on Claude. On a cheap model, expect blocked commands and wasted tokens.
- Skill coverage is thin. In real generations, 14% to 29% of what roles need had a matching skill, and the review screen says so. Roles without a skill rely on their instructions. Judged on a labelled set, skill matching found 33 of 44 right skills, and 19 of its 52 suggestions were wrong, so read what you approve.
- Cost per command is high for small jobs. See above. Since 0.1.2, a small command that one role does goes through intake, the work, QA, and Legal if its triggers apply, and no longer a final report and its review.
- Real tools need care. In Claude Code, roles can run commands and use the web, so a role can see the folder it runs in. Claude Code asks you before commands unless you allow them. The experimental API runner still gives roles only the company's own tools, with no shell.
- It can't check facts without sources. With no web access, it marks claims as unverified, and leaves placeholders such as
[Bakery name]or[ISI PROMO]for you to fill in. - Reviews aren't proof. The test above is small, and a weak reviewer can still approve weak work. They can also be too strict, and send back good work.
- A command can stop at its token limit. Rework costs tokens. In one acceptance run a small command stopped at the old 40,000 limit just short of finishing, and in the run that finished, the same command used about 37,800. That's why the default is now 60,000. Until it finishes, its work isn't exported as files. It tells you what happened and the exact lines to run:
trypro decide, and then/company continue <run-id>, and it did finish when we tried it. - Over MCP, token limits run on an estimate. The server counts what passes through it, and multiplies by 3.3, because that's how much more Claude Code really used across 17 measured commands, from 2.3 to 4.6 times. How it was measured. So the limits over MCP are 150,000 and 500,000, and the API runner, which counts real tokens, keeps 60,000 and 200,000.
trypro statusshows both. Your client's own limits matter more over MCP. - Keep Claude Code's permission prompts on. Your own session only coordinates through its server, but with every permission on it also has a shell. Approving a company and answering a run's questions refuse anything but a real terminal, and a session with a shell could still change your files, including the company's records. In testing, one with every permission on tried to answer a budget question for its person, which is why those checks exist.
- Operator mode over MCP has one model play every role, so separation there is only procedural.
trypro agents claude-codedoesn't use it. - Indonesian output was read by the owner, a native speaker, and that's one reader. Other languages haven't been tried on full commands. Retrieval queries in other languages haven't been natively reviewed either.
- The journey ran on one Windows machine, and on Claude Code 2.1.319. Linux and macOS have only run the test suite.
Getting help
- Something isn't working: run
trypro doctor. It says what's wrong and how to fix it. - To report a bug: open one, and paste the output of
trypro doctor --report. It holds versions and check results, and no keys, paths, or names. - Skills for your industry: ask here.
- Questions, and companies you've built: Discussions.
- To help: your first pull request.
FAQ
How is this different from using one agent? One agent is cheaper and faster, and for a small one-off job it's probably the better choice. Here, reviews alone took 39% to 46% of the output tokens on small commands. What that buys is a reviewer who didn't do the work, memory for each role across commands, and an audit log. No comparison of results has been measured yet.
How is it different from a flat swarm? In a swarm, agents work side by side. Here work flows through a hierarchy, each piece has one owner, and a role can't see another role's memory or assignments, because its server won't show them. We haven't measured whether that gives better results. That benchmark is on the roadmap.
What does a command cost? On a Claude plan, it comes out of your plan's usage. At API list prices, the small commands we measured came to about $0.13 to $0.66, and the largest to $1.67. Rework makes it cost more. See the tables. A command stops and asks you at 150,000 tokens if small, or 500,000 if large, over MCP, and at 60,000 and 200,000 on the API runner.
Which models work? It has been proven on claude-sonnet-5-5 through Claude Code, with claude-haiku-5-5 matching skills. With every role on Haiku, it finished none of 6 commands. Its rules held, and its reviewers caught every seeded flaw, but its writers couldn't get work past those reviewers. Details. On deepseek-v4.1-flash-1017, the same small command finished in one run of three. No other model has been tried. See what was tested.
Experimental
Available, not promised. These exist and have tests, and they aren't what this release stands behind.
The API runner, for any OpenAI-compatible model: deepseek-v4.1-flash-1017 is the only one tried, and the table above shows how that went. Grok and others should work the same way, and haven't been tried. Copy .env.example to .env, set TRYPRO_LLM_BASE_URL, TRYPRO_LLM_API_KEY, TRYPRO_LLM_MODEL, and GITHUB_TOKEN, and check the model first:
trypro check-model
trypro init "a YouTube Shorts content company"
trypro run "Make 5 Shorts about AI tools for this week"
trypro run --queue "<a command>" # Then: trypro next
trypro resume <run-id> # Continue unfinished work
check-model tests tool calling, strict structures, following a brief, replying in the command's language, and treating data as data. Then it has the model finish one small real command, through every review, within 40,000 tokens. It reports suitable, usable with caveats, or not recommended, and it can spend up to about 45,000 tokens. It's one run, so a different run can go differently.
A look with no model at all. A scripted model stands in, so this shows how the company works, not what a model would write:
trypro init
trypro run --dry-run "Build a health check endpoint"
trypro check-model --dry-run
Other MCP clients, such as Cursor and Codex: the server should work with them, and none has been tried. Setting one up, and what it can't guarantee.
Roadmap
In a rough order, which your feedback can change:
- Finishing the three-way benchmark against a flat swarm and a single agent. Its design is frozen.
- Mixed models per role, such as Haiku for reviewers and Sonnet for the work, measured against all Sonnet and all Haiku. Its design is written.
- Quality on cheap models, through self-refinement.
- A Claude Code plugin, if it can keep roles separate, to make setup shorter.
- More runtimes. Hermes and others. There's no Hermes adapter yet, and
skill-customs' guide for it hasn't been tried on a real install. "Add support for " issues are open to anyone. - Dreaming, where a company consolidates what it learned.
Learn more
- Architecture
- The MCP adapter, and what it can and can't guarantee
- Example: a YouTube Shorts studio, on the experimental API runner
- Changelog, contributing, and security
MIT licensed. No telemetry. Keys come from environment variables, and are never logged.
Metadata
Release files for try-professional 0.4.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| try_professional-0.4.0.tar.gz | 337.5 kB | With provenance | Details for try_professional-0.4.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| try_professional-0.4.0-py3-none-any.whl | Python 3 | none | any | Details for try_professional-0.4.0-py3-none-any.whl |
Total release size: 622.2 kB
Release files / try_professional-0.4.0.tar.gz
| Download URL | try_professional-0.4.0.tar.gz |
|---|---|
| Size | 337.5 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
4ee59c661a2f91435f591bd7d23efc824a71989b7fae9b5c98bd7c80bb29b8c3
|
|
BLAKE2b-256 checksum How to use checksums |
d7e47f36e86c1d2d5725d128651c54d2b2e5e5f138cdfa7b60d50f6cbe85fb0d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 8, 2026.
Transparency logRelease files / try_professional-0.4.0-py3-none-any.whl
| Download URL | try_professional-0.4.0-py3-none-any.whl |
|---|---|
| Size | 284.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
1f8e3019bc5b37678095ad11e95703f7c4fe6cf00dd725e542d79ed4d467216d
|
|
BLAKE2b-256 checksum How to use checksums |
adaeebf93f49831d1f1441434e21f50a8005a48d806be4c1af5a3e5c4fc5af8b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 8, 2026.
Transparency logSecurity for try-professional 0.4.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
Both files in this release have been uploaded with provenance metadata.
Attestation for try_professional-0.4.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 8, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.