JPMorgan, Citi, BofA block AI agents from accounts — approval gates are the architecture
ur_piyo_a_hoe · reddit · 2026-10-19
JPMorgan, Citi, and Bank of America all moved this week to block outside AI agents from logging into customer accounts or moving money. Read-only access via official connectors still works, and Schwab is following suit with read-only MCP servers. BofA's CEO put it plainly: a human must be in the loop before money leaves an account.
The author, a professional agent builder, argues this is the part most demos skip: the permission model is the product. Every tool an agent can call needs a scope, and scopes split into two buckets — read tools that look at data, and action tools that change the world. The second bucket needs an approval gate every time; that's architecture, not a later feature.
Takeaway: banks just enforced at institution level what your framework should enforce in code. Build the approval gate first; everything else is details.
Related event: Amazon, Delta and Wall Street Banks Are Blocking AI Agents(10 posts)→
More from coding & agent
- BELIEFWEAVER: belief updates and world modeling for long-horizon agent failure recovery — IntelligenceLab · 2026-10-19
- DeepMind's XYEval: one bad user hint drops agent success from 67.4% to 36% — i_dg23 · 2026-10-19
- Pure three.js + Claude/Codex Yields Fully Procedural Game Characters — TinfoilTricorn · 2026-10-19
- Open-source Kapitsa: a Metal Engine for Apple Silicon Pushing Qwen 27B to 63 tok/s on M4 Pro — DotaMate · 2026-10-19
- One CLI Beats One MCP Tool per API: an Agent Tooling Workflow and a 7-Day OAuth Trap — tariqosmani · 2026-10-19
- vLLM's agentic-api: stateful continuation ends 200K-token resends for agent harnesses — AccBalanced · 2026-10-19