Q2 exposes MCP endpoints so customers' AI agents can connect to digital banking
For the digital channel head at a community bank
Q2 (NYSE:QTWO) executives said during the company's second investor-focused AI discussion that Q2 is exposing Model Context Protocol (MCP) endpoints across much of its digital-banking stack so personal AI agents can connect to banks, according to a report published Nov. 1.1
Chief Operating Officer Hima Mukkamala described personal agents as "the next banking channel," and said Q2 expects them to be a new entry point rather than a replacement for banks' digital-banking or fraud platforms.1 The report did not give a launch date or customer names for the MCP endpoints; it is also the only source for these remarks, and Q2's own transcript or release was not provided.1
Q2 added a detector for agentic interfaces after customers reported fraud originating through that channel, Chief Operating Officer Hima Mukkamala said.1
Chief Technology Officer Adam Blue said some institutions may initially decline agent connections because of risk, and that Q2 would support customers that opt out while they build a technology and risk-management strategy.1
Chief Technology Officer Adam Blue compared the development to the growth of account aggregation over the past two decades and said of banks that restrict agentic access: "I think this is a for now kind of decision and not a long-term decision."1
Mukkamala said adoption will depend on banks gaining confidence in observability, auditability, controls, containment and incident disclosure, and that Q2 Assistant and UAM are in early access and approaching general availability before year-end.1
Banks on Q2's platform will face a decision on agent access sooner than they may have planned, and fraud teams may see agent-driven traffic whether or not the bank opens a channel. Large banks such as JPMorgan Chase and PNC have said they are restricting outside agents for now, so vendor roadmaps and bank risk appetite may diverge.
Mukkamala said Q2 Assistant and UAM are expected to reach general availability before year-end.1
Our take. Q2 is opening MCP endpoints across its digital-banking stack, and it already added a fraud detector after customers reported fraud through agentic interfaces. Saying no to agents is now a setting you choose, and Q2 calls it temporary.
Action. Digital channels: Decide whether Q2 MCP agent access is on or off, and set permissions and payment limits before any customer agent connects.
From our records
- Q2vendor · alternatives Alkami, Jack Henry, Fiserv
- JPMorgan Chasebank · latest EMEA private bank uses AI for onboarding and research (Oct 2026) · vendors Kasisto, ChatGPT Enterprise, Claude · enforcement 5 actions since 2016; latest CFPB civil action (lawsuit, dismissed with prejudice) (Dec 2024)
- PNC Financial Servicesbank · latest Money20/20: agent-only transactions 'will never happen' (Oct 2026) · vendors NVIDIA · enforcement 1 action since 2016; latest OCC consent order for a civil money penalty, $15 million (May 2018)
Sources
- ReportQ2 eyes personal AI agents as banking's next channel and fraud frontier Themarketsdaily
- Also reported byWhy Big Banks Are Slamming the Door on AI Agent Access – And What They Want Instead Thefinancialbrand