Which banks block third-party AI agents, and which work with them?

Checked Nov 10, 2026 · 29 relations · 49 sources

Updated weekly · last sweep Nov 8, 2026 · next Sunday, Nov 15, 2026

As of November 10, 2026, 11 banks and fintechs block third-party AI agents, 4 banks restrict them, 3 banks have them under review and 11 banks and fintechs have partnered with them. Blocked by JPMorgan Chase, Citigroup, PNC, Morgan Stanley, Fifth Third, Happen Bank, BMO Financial Group, Royal Bank of Canada, TD Bank Group, CIBC and UBS; restricted by Bank of America, Wells Fargo, Charles Schwab and Scotiabank; under review at Wealthsimple, Commonwealth Bank of Australia and Caixa Econômica Federal; partnered with American Express, Block, Coinbase, Mercury, PayPal, Public, Ramp, Robinhood, HSBC, Danske Bank and eToro.

11
blocked
4
restricted
3
under review
11
partnered

Each of the 29 relations below carries a verbatim quote, the date of the earliest public evidence and its source: 49 distinct sources, 10 of them a bank's or a vendor's own statement and the rest press reports of a statement or a decision.

These rows cover statements about outside agents in general. A block or restriction that names a product also has a row under that product: ByteDance Doubao phone assistant (4), Meta Muse (3) and Spear Street Technology Instinct (1).

THE ROW TYPEUsed when a bank's statement covers outside AI agents and assistants in general rather than one product: most logged in with credentials the customer shared, or drove a browser on the customer's behalf.

What has each bank said about third-party AI agents?

Checked 2026-11-10 · 29 relations · 49 sources (10 bank or vendor statements)
BankRelationSinceQuote and detailSourceLast checked
JPMorgan Chaseits AI agents →BlockedOct 13, 2026“Protecting our customers is our top priority. Because it is not safe, we do not permit third parties to access accounts by obtaining customers' banking credentials and logging in on their behalf”Spokeswoman confirmed the bank blocks external AI agents from operating on behalf of retail customers: no credential login by third parties/agents, no sending money or paying bills; read-only data (e.g., balances) allowed via customer-authorized open-banking connectors such as Plaid; no timeline for direct agent access. Dimon on the Oct 13 Q3 call: 'we're not going to allow just any outside agent to come in inside the company'. The Chase Digital Services Agreement (last updated October 2026) prohibits 'External AI' from using login credentials and permits External AI only through approved APIs with customer authorization. · scope: log-in with the customer's credentials, transactions, paymentsCNBC ↗Oct 13, 2026JPMorgan Chase ↗Fortune ↗CBS News ↗2026-10-31
Citigroupits AI agents →BlockedOct 16, 2026“In a statement to Retail Banker International, Citi said: "To help safeguard customer accounts and information, we do not permit third-party AI agents or assistants to log into a customer's account or transact directly within our digital banking platforms."”Citi statement first given to the Financial Times on Oct 16, repeated to USA Today Oct 23: no third-party AI agent/assistant login or direct transactions in its digital banking platforms; customers may authorize limited read-only access via certain Citi-approved open-banking providers. Citi's Naveed Anwar (Money20/20, Oct 19-20): 'no one is connecting to Citi agentically'; a know-your-agent process is needed before opening up. · scope: log-in with the customer's credentials, transactionsRetail Banker International via Yahoo Finance ↗Oct 19, 2026USA Today ↗Banking Dive ↗2026-11-10
PNCits AI agents →BlockedOct 19, 2026“"No [bank] is going to let people transact inside of accounts without a human in the loop. It's just not going to happen - and if somebody does, they'll be defrauded," he said during an appearance at the Money20/20 conference in Las Vegas.”CEO Bill Demchak at Money20/20 (Oct 19): agent-only transactions inside accounts 'will never happen' at any bank including PNC; agents may 'organize it for you' or 'give you good ideas' but banks need more friction, not less; tech companies such as Meta (Muse) would have to take on liability. Stance statement; PNC has not published a technical block notice. · scope: transactionsBanking Dive via Yahoo Finance ↗Oct 21, 2026Banking Dive ↗Banking Dive ↗2026-10-31
Morgan StanleyBlockedOct 22, 2026“Morgan Stanley has begun blocking third-party agents from accessing its platforms, sources familiar with the decision said.”Axios and Reuters (Oct 22) report Morgan Stanley blocks third-party agents from its (wealth/retail) platforms; a spokesperson said it had not observed 'rogue AI agents accessing our platforms'. Separately, since June 2026 Morgan Stanley at Work has been opening its corporate stock-plan platforms (ShareWorks, Equity Edge) to corporate clients' own AI agents via MCP - a B2B channel, not retail account access. · scope: log-in with the customer's credentials, transactionsAxios ↗Oct 22, 2026Reuters via Mint ↗CNBC ↗2026-10-31
Fifth ThirdBlockedOct 19, 2026“Fifth Third doesn't currently allow AI agents to initiate transactions in customer accounts, and accountability questions need to be settled before agents carry out transactions on behalf of customers, Preston said.”CFO Bryan Preston on the Q3 call (Oct 19): no AI agents may initiate transactions in customer accounts until accountability is settled; CEO Tim Spence said the bank will build Muse-style services (subscription review, budgeting) into its own app. No statement on read-only access. · scope: transactionsBanking Dive ↗Oct 19, 2026Banking Dive ↗Banking Dive ↗2026-10-31
Happen BankBlockedNov 2, 2026“Where possible, we are blocking today until things like identity, authority, permission and liability are worked out.”CEO Scott Sanborn to American Banker (Nov 2, 2026): asked whether outside agents can act on Happen Bank once they find it, 'Right now, that answer is no'. The block is best-effort, 'where possible': agents that are easy to recognise are blocked, but one run on the customer's own machine 'looks just like you' and detection is 'not foolproof'. Framed as temporary, until identity, authority, permission and liability are worked out; Happen lets LLMs read its site content and is building controls for its own customer agent that could later be opened to external agents. On the Q3 call (Oct 28) Sanborn spoke of preparing for agents, not of blocking. · scope: transactionsAmerican Banker ↗Nov 2, 20262026-11-10
BMO Financial GroupBlockedOct 27, 2026““To protect our clients, BMO does not permit AI agents to access our digital properties or execute transactions,” a BMO spokesperson said in a statement.”BMO told Global News on Tue 27 Oct 2026 it does not permit AI agents to access its digital properties or execute transactions; Globe and Mail reports the decision was taken the week of 19–23 Oct. Preceded by CEO Darryl White's 21 Oct warning ('Don't give your banking username and password... to any agent'). Clients told not to share passwords, PINs or verification codes 'through unauthorized channels, including AI agents'. · scope: log-in with the customer's credentials, browser automation, transactionsGlobal News ↗Oct 28, 2026The Globe and Mail ↗CBC News ↗Yahoo Finance ↗2026-10-31
Royal Bank of CanadaBlockedOct 27, 2026“Royal Bank of Canada is blocking third-party personal artificial intelligence agents from directly accessing the bank’s digital properties, including online banking, joining a growing number of banks restricting agents’ access to customer data.”Internal memo to all employees on Tue 27 Oct 2026 (heads of technology/operations and personal banking) after a 'full security review': third-party personal AI agents blocked from direct access to authenticated RBC digital properties incl. online banking; blocking work to begin immediately. CEO Dave McKay had said on 20 Oct he was 'thinking about' blocking Muse. Confirmed publicly by spokesperson Jeff Lanthier on 28 Oct. · scope: log-in with the customer's credentials, browser automation, transactionsThe Globe and Mail ↗Oct 27, 2026Global News ↗The Canadian Press via BNN Bloomberg ↗Yahoo Finance ↗2026-10-31
TD Bank GroupBlockedOct 28, 2026““TD has made the decision to block all third-party personal AI agents from direct access to banking information, where authentication is required, while we ensure the appropriate safeguards, authorization mechanisms and oversight are in place,” a spokesperson for TD said Wednesday in a statement.”Statement of Wed 28 Oct 2026: all third-party personal AI agents blocked from direct access to authenticated banking information pending safeguards/authorization mechanisms; clients told never to share TD log-in credentials, passwords, PINs or one-time passcodes with an AI agent. Framed as temporary ('while we ensure...'). · scope: log-in with the customer's credentials, browser automation, account dataGlobal News ↗Oct 28, 2026CBC News ↗The Globe and Mail ↗2026-10-31
CIBC · not profiledBlockedOct 28, 2026““We do not support personal AI agents directly opening or accessing accounts. Clients should not share their banking credentials with an AI agent and should carefully consider what personal or financial information they provide to any AI service.””CIBC statement of 28 Oct 2026: does not support personal AI agents directly opening or accessing accounts; clients should not share banking credentials with an AI agent. Wording is 'do not support' rather than an explicit technical block; CBC/CP headlines group CIBC with the blocking banks. CIBC says it supports innovation 'through secure, appropriately designed channels'. · scope: log-in with the customer's credentials, account dataGlobal News ↗Oct 28, 2026CBC News ↗2026-10-31
UBSBlockedOct 27, 2026“ZURICH, Oct 27 : Swiss bank UBS will not allow the use of external AI models to execute actions on behalf of clients, CEO Sergio Ermotti said on Tuesday.”CEO Sergio Ermotti at SCION Day 2026 (ETH Zurich), 27 Oct 2026: 'We are not allowing models to enter into the bank and do that' — referring to external AI agents managing client accounts and shifting/optimising deposits; no external AI models may execute actions on behalf of clients. · scope: log-in with the customer's credentials, transactionsReuters via CNA ↗Oct 27, 20262026-10-31
Bank of Americaits AI agents →RestrictedOct 14, 2026“"We strongly believe there should be a human in the loop to authorise money moving out of your account," Moynihan told CNBC.”Q3 call (Oct 14) and Bloomberg/CNBC interviews: BofA is limiting AI agents' access to consumer deposits and works with agent developers on protocols so a human approves money leaving an account; FT/PYMNTS characterised it as 'a condition rather than a ban'. Oct 27 customer email 'Protecting your finances in the AI World' tells customers never to share credentials with 'an AI-enabled tool or agent that offers to act on your behalf' and that they are responsible for resulting activity. Axios/American Banker count BofA among the five largest US banks blocking external agents. · scope: log-in with the customer's credentials, transactionsRetail Banker International via Yahoo Finance ↗Oct 19, 2026USA Today ↗TechCrunch ↗PYMNTS ↗2026-10-31
Wells FargoRestrictedSep 23, 2026“All transactions that an Authorized Representative or Delegate (including the transactions of their AI Agents) performs on an Eligible Account or Online Financial Service, including those you did not want or intend, are transactions authorized by you. Unless prohibited by applicable law, you are solely responsible for those transactions.”Wells Fargo has not announced a blanket ban: its spokeswoman says it has 'taken steps to block unauthorized agents' while the Online Access Agreement effective Nov 24, 2026 (announced to customers by Sept 23, 2026) adds Section 15 'AI Agents': any agent given credentials or authority is deemed to act as the customer ('deemed to have been initiated and authorized directly by you, without further verification'); customers must supervise, retain evidence of revocation and bear the risk; the bank reserves the right to require agent registration, change/limit API access methods and block or restrict any AI Agent. Note: the verifier's fetch truncates this page at 50k chars, so Section 15 itself is quoted via USA Today/American Banker. · scope: log-in with the customer's credentials, transactionsWells Fargo ↗Sep 23, 2026 · primaryWells Fargo ↗USA Today ↗American Banker ↗2026-10-31
Charles SchwabRestrictedOct 15, 2026“And there's one way we think is not safe, and that's just an agent coming to our site and trying to log in on behalf of a client. We are not going to allow that.”CEO Rick Wurster (Q3 call Oct 15; Bloomberg TV Oct 16; IMPACT keynote Oct 28): Schwab blocks agents that use client login credentials or browser automation (blocks reported 'in the tens and 20s' a week, later '30, 40, 50 times' weekly), but allows certain LLMs/APIs to connect under Schwab-controlled authentication for trading and research; no money movement by outside agents; MCP servers planned so a client's chosen model can check balances and run research; clients steered to Schwab's own assistant Charley. · scope: log-in with the customer's credentials, browser automation, transactionsAmerican Banker ↗Oct 15, 2026InvestmentNews ↗PYMNTS ↗2026-10-31
ScotiabankRestrictedOct 28, 2026““To protect our clients and their financial information, Scotiabank will limit third-party AI agents from accessing its banking platforms as we closely monitor evolving concerns,” a spokesperson for Scotiabank said in a statement.”Scotiabank chose 'limit' rather than 'block': will restrict third-party AI agents' access to its banking platforms while monitoring concerns; scope of the limits not specified. · scope: log-in with the customer's credentials, account dataGlobal News ↗Oct 28, 2026CBC News ↗2026-10-31
Wealthsimple · not profiledUnder reviewOct 28, 2026““We’re taking a different approach and figuring out how clients can securely use agents for their finances,” Wealthsimple spokesperson Sheryl So wrote in an e-mail.”Canadian fintech that positions itself against the big-bank blocks; no block announced. On 5 Nov 2026 it announced connections for ChatGPT and Claude that open in early 2027 (see those rows); the Globe and Mail reports they are the only third-party agents approved so far. Other agents are still being assessed against its security requirements, with Meta's Muse and Instinct named as under consideration. Wealthsimple tells clients not to give an agent their ID and password.The Globe and Mail ↗Oct 28, 2026The Globe and Mail ↗2026-11-10
Commonwealth Bank of AustraliaUnder reviewDec 1, 2025“While we may not be responsible for these external agents or systems, where we identify material risk, we may seek to implement limitations or controls to help protect our customers, channels and platforms.”CBA's AI approach document (dated December 2025) anticipates customers interacting through 'external agents or systems outside our control' and reserves the right to impose 'limitations or controls' where it identifies material risk — a stated option, not an announced block.Commonwealth Bank of Australia ↗Dec 1, 2025 · primary2026-10-31
Caixa Econômica Federal · not profiledUnder reviewAug 25, 2026“Darlan Lins, executive director of IT solutions at Caixa, said the bank is currently deciding how to allow AI agents to execute transactions for its 160 million customers.”At Febraban Tech (25 Aug 2026) Caixa said it is deciding how to allow AI agents to execute transactions for its 160M customers ('That is our dilemma'); Banco do Brasil raised agent authentication as the open problem.Valor International ↗Aug 27, 20262026-10-31
American Expressits AI agents →PartneredApr 14, 2026“Today, American Express is introducing an agentic commerce developer kit and announcing Amex Agent Purchase ProtectionTM, an industry-first commitment to extend its backing to Card Member purchases made by registered AI agents across its network.”Amex's ACE Developer Kit lets registered/verified third-party AI agents transact with tokenized Amex credentials (Agent Registration, Account Enablement, Intent Intelligence, Payment Credentials, Cart Context), with Amex Agent Purchase Protection covering Card Members for registered-agent errors; Oct 13, 2026 added the Intent Intelligence Framework (Create Intent API, Proof of Intent Token). Agents that are not registered are outside the program. · scope: card details, paymentsAmerican Express (Business Wire) ↗Apr 14, 2026 · primaryTechCrunch ↗2026-10-31
BlockPartneredApr 25, 2025“You can configure your AI agent to use the Square MCP server hosted by Block as a remote server or you can set up and run the server locally for your AI agent's use.”Official Square MCP server hosted by Block (mcp.squareup.com, OAuth) giving AI agents access to the Square seller API platform; beta. · scope: account dataSquare Developer (Block) ↗Apr 25, 2025 · primary2026-10-31
CoinbasePartneredJun 11, 2026“Coinbase for Agents connects your AI apps to your Coinbase account for crypto, equities, and derivatives trading, portfolio management, and x402 payments.”Coinbase for Agents: official remote MCP server (agents.coinbase.com/mcp, OAuth, allowlisted clients incl. ChatGPT, Claude, Grok, Muse, Perplexity Computer, Codex) for trading, portfolio and x402 payments from the user's Coinbase account. · scope: transactions, payments, account dataCoinbase Developer Platform ↗Oct 9, 2026 · primaryTechCrunch ↗Fortune ↗2026-10-31
MercuryPartneredOct 8, 2026“Mercury MCP connects your AI tools to Mercury's public API through OAuth. Supported write actions require explicit permissions; payment and transfer requests require approval in Mercury.”Official hosted Mercury MCP server (mcp.mercury.com, OAuth): read accounts/transactions/cards; write tools (payment requests, internal transfers) require explicit scopes and approval in Mercury. Beta. · scope: account data, paymentsMercury ↗Oct 8, 2026 · primary2026-10-31
PayPalPartneredJun 12, 2025“Leveraging this technology, PayPal developed an MCP server that enables merchants to interact with their preferred MCP clients using natural language.”Official PayPal MCP server (local and remote at mcp.paypal.com) for merchants to run invoices, orders, transactions from any MCP client (Claude, Cursor, etc.). · scope: account data, paymentsPayPal Developer ↗Jun 12, 2025 · primary2026-10-31
PublicPartneredSep 29, 2026“While Robinhood is for now the only brokerage to offer nontechnical agents at scale, other fintech and crypto firms-including eToro, Public, and Coinbase-currently let their users connect their agents via MCP tools.”Fortune reports Public lets users connect their own AI agents via MCP tools (as of Sep 2026). · scope: transactions, account dataFortune ↗Sep 29, 20262026-10-31
RampPartneredMar 25, 2025“We built a `Ramp MCP` server that lets you interact with your business data using natural language-by turning our developer API into a SQL interface that an LLM can query.”Official Ramp MCP server (open source, later hosted at mcp.ramp.com with OAuth) exposing spend data, transactions, cards, approvals to any MCP client. · scope: account dataRamp Engineering ↗Mar 25, 2025 · primary2026-10-31
RobinhoodPartneredMay 27, 2026“Users can bring AI agents from any platform and plug them into Robinhood via its Model Context Protocol (MCP) servers.”Robinhood launched Agentic Trading and an Agentic Credit Card (May 27, 2026): customers connect any third-party agent via Robinhood MCP servers to trade stocks in a dedicated agentic account and spend on a dedicated virtual Robinhood Gold card with a user-set spending limit, optional manual approvals and no access to the primary card number; 'bring your own agent' model cited by American Banker as the counter-example to bank blocks. · scope: transactions, payments, card detailsAxios ↗May 27, 2026Fortune ↗PYMNTS ↗2026-10-31
HSBCits AI agents →PartneredOct 20, 2026“AI access is supported through HSBC's Model Context Protocol, which enables clients' own AI tools to query authorized account and transaction information, helping human workers find and interpret banking data.”HSBCnio (corporate/institutional digital banking): HSBC-run MCP server lets business clients' own AI agents query authorised account and transaction data (read access); an advanced digital assistant for corporate clients planned. Corporate-only — not retail online banking. · scope: account dataAmerican Banker ↗Oct 20, 20262026-10-31
Danske Bank · not profiledPartneredSep 16, 2026“Now, the bank announces the pilot launch of its Model Context Protocol (MCP) Server, giving corporate customers the control to connect their AI agents directly to the bank's Premium APIs, so they can access and act on their own financial data within whatever agentic AI tool they already use.”Pilot MCP server letting selected corporate customers connect their own AI agents (e.g. ChatGPT, Claude) to Danske's Premium APIs to read and act on their financial data. · scope: account dataBanking 4.0 ↗Sep 16, 20262026-10-31
eToroPartneredSep 29, 2026“While Robinhood is for now the only brokerage to offer nontechnical agents at scale, other fintech and crypto firms-including eToro, Public, and Coinbase-currently let their users connect their agents via MCP tools.”Fortune reports eToro lets users connect their own AI agents via MCP tools (as of Sep 2026). · scope: transactions, account dataFortune ↗Sep 29, 20262026-10-31

Strictest relation first, then by region and size, as on the tracker's bank table. Since = the earliest public evidence of the relation. A bank absent from the table has made no public statement we could find.

What do these relations mean for a customer?

  • Blocked · 11The bank says it does not let the agent log in, act or transact in customer accounts, or is reported to block it. Scope named in these rows: transactions (9), log-in with the customer's credentials (8), browser automation (3), account data (2), payments (1).
  • Restricted · 4Partial: no log-in or transactions, but a narrower path stays open (read-only data through an approved open-banking provider, human approval for payments). Scope named in these rows: log-in with the customer's credentials (4), transactions (3), browser automation (1), account data (1).
  • Under review · 3The bank says it is considering blocking or limiting the agent; no decision is on the record.
  • Partnered · 11An official integration: the bank is a named issuer or partner in the agent's or programme's launch, or offers a sanctioned connection for it. Scope named in these rows: account data (9), payments (5), transactions (4), card details (2).

A bank that is not in the table has made no public statement about third-party AI agents that this tracker could find. That is not the same as allowing them, and it is not the same as blocking them.

The page records statements and reports, each quoted with its source. It does not test what works at a bank, and it is not advice.

Which banks block or restrict third-party AI agents?

As of November 10, 2026: 11 banks and fintechs block third-party AI agents (JPMorgan Chase, Citigroup, PNC, Morgan Stanley, Fifth Third, Happen Bank, BMO Financial Group, Royal Bank of Canada, TD Bank Group, CIBC and UBS); 4 banks restrict them (Bank of America, Wells Fargo, Charles Schwab and Scotiabank); 3 banks have them under review (Wealthsimple, Commonwealth Bank of Australia and Caixa Econômica Federal). Each row in the table quotes the statement or report it rests on.

Which banks work with third-party AI agents?

As of November 10, 2026: 11 banks and fintechs have partnered with third-party AI agents (American Express, Block, Coinbase, Mercury, PayPal, Public, Ramp, Robinhood, HSBC, Danske Bank and eToro). In this tracker "partnered" means: An official integration: the bank is a named issuer or partner in the agent's or programme's launch, or offers a sanctioned connection for it.

Bank by bank: what is on the record?

Does JPMorgan Chase allow third-party AI agents?

JPMorgan Chase blocks third-party AI agents, on the record since October 13, 2026. CNBC (October 13, 2026): “Protecting our customers is our top priority. Because it is not safe, we do not permit third parties to access accounts by obtaining customers' banking credentials and logging in on their behalf”. Scope named: log-in with the customer's credentials, transactions, payments.

Does Citigroup allow third-party AI agents?

Citigroup blocks third-party AI agents, on the record since October 16, 2026. Retail Banker International via Yahoo Finance (October 19, 2026): “In a statement to Retail Banker International, Citi said: "To help safeguard customer accounts and information, we do not permit third-party AI agents or assistants to log into a customer's account or transact directly within our digital banking platforms."” Scope named: log-in with the customer's credentials, transactions.

Does PNC allow third-party AI agents?

PNC blocks third-party AI agents, on the record since October 19, 2026. Banking Dive via Yahoo Finance (October 21, 2026): “"No [bank] is going to let people transact inside of accounts without a human in the loop. It's just not going to happen - and if somebody does, they'll be defrauded," he said during an appearance at the Money20/20 conference in Las Vegas.” Scope named: transactions.

Does Morgan Stanley allow third-party AI agents?

Morgan Stanley blocks third-party AI agents, on the record since October 22, 2026. Axios (October 22, 2026): “Morgan Stanley has begun blocking third-party agents from accessing its platforms, sources familiar with the decision said.” Scope named: log-in with the customer's credentials, transactions.

Does Fifth Third allow third-party AI agents?

Fifth Third blocks third-party AI agents, on the record since October 19, 2026. Banking Dive (October 19, 2026): “Fifth Third doesn't currently allow AI agents to initiate transactions in customer accounts, and accountability questions need to be settled before agents carry out transactions on behalf of customers, Preston said.” Scope named: transactions.

Does Happen Bank allow third-party AI agents?

Happen Bank blocks third-party AI agents, on the record since November 2, 2026. American Banker (November 2, 2026): “Where possible, we are blocking today until things like identity, authority, permission and liability are worked out.” Scope named: transactions.

Does BMO Financial Group allow third-party AI agents?

BMO Financial Group blocks third-party AI agents, on the record since October 27, 2026. Global News (October 28, 2026): ““To protect our clients, BMO does not permit AI agents to access our digital properties or execute transactions,” a BMO spokesperson said in a statement.” Scope named: log-in with the customer's credentials, browser automation, transactions.

Does Royal Bank of Canada allow third-party AI agents?

Royal Bank of Canada blocks third-party AI agents, on the record since October 27, 2026. The Globe and Mail (October 27, 2026): “Royal Bank of Canada is blocking third-party personal artificial intelligence agents from directly accessing the bank’s digital properties, including online banking, joining a growing number of banks restricting agents’ access to customer data.” Scope named: log-in with the customer's credentials, browser automation, transactions.

Does TD Bank Group allow third-party AI agents?

TD Bank Group blocks third-party AI agents, on the record since October 28, 2026. Global News (October 28, 2026): ““TD has made the decision to block all third-party personal AI agents from direct access to banking information, where authentication is required, while we ensure the appropriate safeguards, authorization mechanisms and oversight are in place,” a spokesperson for TD said Wednesday in a statement.” Scope named: log-in with the customer's credentials, browser automation, account data.

Does CIBC allow third-party AI agents?

CIBC blocks third-party AI agents, on the record since October 28, 2026. Global News (October 28, 2026): ““We do not support personal AI agents directly opening or accessing accounts. Clients should not share their banking credentials with an AI agent and should carefully consider what personal or financial information they provide to any AI service.”” Scope named: log-in with the customer's credentials, account data.

Does UBS allow third-party AI agents?

UBS blocks third-party AI agents, on the record since October 27, 2026. Reuters via CNA (October 27, 2026): “ZURICH, Oct 27 : Swiss bank UBS will not allow the use of external AI models to execute actions on behalf of clients, CEO Sergio Ermotti said on Tuesday.” Scope named: log-in with the customer's credentials, transactions.

Does Bank of America allow third-party AI agents?

Bank of America restricts third-party AI agents, on the record since October 14, 2026. Retail Banker International via Yahoo Finance (October 19, 2026): “"We strongly believe there should be a human in the loop to authorise money moving out of your account," Moynihan told CNBC.” Scope named: log-in with the customer's credentials, transactions.

Does Wells Fargo allow third-party AI agents?

Wells Fargo restricts third-party AI agents, on the record since September 23, 2026. The quote from Wells Fargo (September 23, 2026) is in the table on this page. Scope named: log-in with the customer's credentials, transactions.

Does Charles Schwab allow third-party AI agents?

Charles Schwab restricts third-party AI agents, on the record since October 15, 2026. American Banker (October 15, 2026): “And there's one way we think is not safe, and that's just an agent coming to our site and trying to log in on behalf of a client. We are not going to allow that.” Scope named: log-in with the customer's credentials, browser automation, transactions.

Does Scotiabank allow third-party AI agents?

Scotiabank restricts third-party AI agents, on the record since October 28, 2026. Global News (October 28, 2026): ““To protect our clients and their financial information, Scotiabank will limit third-party AI agents from accessing its banking platforms as we closely monitor evolving concerns,” a spokesperson for Scotiabank said in a statement.” Scope named: log-in with the customer's credentials, account data.

Does Wealthsimple allow third-party AI agents?

Wealthsimple has third-party AI agents under review, on the record since October 28, 2026. The Globe and Mail (October 28, 2026): ““We’re taking a different approach and figuring out how clients can securely use agents for their finances,” Wealthsimple spokesperson Sheryl So wrote in an e-mail.”

Does Commonwealth Bank of Australia allow third-party AI agents?

Commonwealth Bank of Australia has third-party AI agents under review, on the record since December 1, 2025. Commonwealth Bank of Australia (December 1, 2025): “While we may not be responsible for these external agents or systems, where we identify material risk, we may seek to implement limitations or controls to help protect our customers, channels and platforms.”

Does Caixa Econômica Federal allow third-party AI agents?

Caixa Econômica Federal has third-party AI agents under review, on the record since August 25, 2026. Valor International (August 27, 2026): “Darlan Lins, executive director of IT solutions at Caixa, said the bank is currently deciding how to allow AI agents to execute transactions for its 160 million customers.”

Does American Express work with third-party AI agents?

American Express has partnered with third-party AI agents, on the record since April 14, 2026. American Express (Business Wire) (April 14, 2026): “Today, American Express is introducing an agentic commerce developer kit and announcing Amex Agent Purchase ProtectionTM, an industry-first commitment to extend its backing to Card Member purchases made by registered AI agents across its network.” Scope named: card details, payments.

Does Block work with third-party AI agents?

Block has partnered with third-party AI agents, on the record since April 25, 2025. Square Developer (Block) (April 25, 2025): “You can configure your AI agent to use the Square MCP server hosted by Block as a remote server or you can set up and run the server locally for your AI agent's use.” Scope named: account data.

Does Coinbase work with third-party AI agents?

Coinbase has partnered with third-party AI agents, on the record since June 11, 2026. Coinbase Developer Platform (October 9, 2026): “Coinbase for Agents connects your AI apps to your Coinbase account for crypto, equities, and derivatives trading, portfolio management, and x402 payments.” Scope named: transactions, payments, account data.

Does Mercury work with third-party AI agents?

Mercury has partnered with third-party AI agents, on the record since October 8, 2026. Mercury (October 8, 2026): “Mercury MCP connects your AI tools to Mercury's public API through OAuth. Supported write actions require explicit permissions; payment and transfer requests require approval in Mercury.” Scope named: account data, payments.

Does PayPal work with third-party AI agents?

PayPal has partnered with third-party AI agents, on the record since June 12, 2025. PayPal Developer (June 12, 2025): “Leveraging this technology, PayPal developed an MCP server that enables merchants to interact with their preferred MCP clients using natural language.” Scope named: account data, payments.

Does Public work with third-party AI agents?

Public has partnered with third-party AI agents, on the record since September 29, 2026. Fortune (September 29, 2026): “While Robinhood is for now the only brokerage to offer nontechnical agents at scale, other fintech and crypto firms-including eToro, Public, and Coinbase-currently let their users connect their agents via MCP tools.” Scope named: transactions, account data.

Does Ramp work with third-party AI agents?

Ramp has partnered with third-party AI agents, on the record since March 25, 2025. Ramp Engineering (March 25, 2025): “We built a `Ramp MCP` server that lets you interact with your business data using natural language-by turning our developer API into a SQL interface that an LLM can query.” Scope named: account data.

Does Robinhood work with third-party AI agents?

Robinhood has partnered with third-party AI agents, on the record since May 27, 2026. Axios (May 27, 2026): “Users can bring AI agents from any platform and plug them into Robinhood via its Model Context Protocol (MCP) servers.” Scope named: transactions, payments, card details.

Does HSBC work with third-party AI agents?

HSBC has partnered with third-party AI agents, on the record since October 20, 2026. American Banker (October 20, 2026): “AI access is supported through HSBC's Model Context Protocol, which enables clients' own AI tools to query authorized account and transaction information, helping human workers find and interpret banking data.” Scope named: account data.

Does Danske Bank work with third-party AI agents?

Danske Bank has partnered with third-party AI agents, on the record since September 16, 2026. Banking 4.0 (September 16, 2026): “Now, the bank announces the pilot launch of its Model Context Protocol (MCP) Server, giving corporate customers the control to connect their AI agents directly to the bank's Premium APIs, so they can access and act on their own financial data within whatever agentic AI tool they already use.” Scope named: account data.

Does eToro work with third-party AI agents?

eToro has partnered with third-party AI agents, on the record since September 29, 2026. Fortune (September 29, 2026): “While Robinhood is for now the only brokerage to offer nontechnical agents at scale, other fintech and crypto firms-including eToro, Public, and Coinbase-currently let their users connect their agents via MCP tools.” Scope named: transactions, account data.

How current is this list, and where does it come from?

The 29 rows were last compared with their sources on November 10, 2026; each row shows its own check date. They come from public statements only: bank newsrooms, terms and FAQs, executives on the record, vendor launch releases and reputable reporting. A weekly sweep searches the news for every agent and bank pair and proposes new rows for review; it last ran on November 8, 2026.

How is this page built?

Unit: one relation between third-party AI agents and one bank or fintech, with the date of the earliest public evidence, a verbatim quote of at most two sentences and its source. One active row per bank: when a position changes, the newer row replaces the older one, which stays in the dataset.

This page exists because third-party AI agents have 29 active relations; an agent gets a page from 4. Checked November 10, 2026: the latest day one of these rows was compared with its source. The weekly news sweep last ran on November 8, 2026; the next is due November 15, 2026.

The counts of banks include 4 institutions this site does not profile, marked "not profiled" in the table; fintechs are counted as fintechs.

Full method and caveats: the agent access tracker. Data: /agentic-banking/agent-access/data.json (JSON, CC BY 4.0) · Markdown version. An agent gets a page from 4 active relations.

When a bank blocks or lets in an AI agent, you'll read it the next morning.

agent deployments, regulator positions and the day's six stories · in your inbox by 7 am PT · free

plus every regulation, bank and agent page update, the morning after · leave any morning