Morgan Stanley is blocking AI agents — a 6-point playbook for retailers before their checkout is next
sanjaykalra · x · 2026-10-23
Per Axios (Oct 22, 2026), Morgan Stanley has started blocking third-party AI agents, with JPMorgan, Bank of America and Citi restricting them — executives say agents are entering customer accounts, acting without clear user intent, and are hard to distinguish from unauthorized ones. Author Sanjay Kalra argues commerce platforms face the same problem within a year, and banks' read-only fallback won't work for retailers (browse-only agents will just check out elsewhere). His six recommendations: give agents their own delegated scoped tokens instead of customer passwords; support emerging standards like Agentic Commerce Protocol, AP2, Visa Intelligent Commerce or Mastercard Agent Pay; tier agent permissions with spend ceilings and customer confirmation; log the customer's mandate and check every order; treat support channels as agent channels; and be able to revoke one agent and reverse its orders without locking out the customer. He argues against blanket bot blocking, which treats highest-intent shoppers as attackers and weakens monthly.
Related event: Morgan Stanley and Major US Banks Block AI Agents(2 posts)→
More from coding & agent
- 27B open-source model beats GPT-5.5 at computer tasks via evolved interfaces, at 1.5% the cost — alex_verem · 2026-10-23
- Interactive 3D AI server explainer built in one prompt with Claude and the open-source colorfigures skill — Promptmethus · 2026-10-23
- poem turns Codex sessions into chats — approve agent tasks from your iPhone — patrickreza · 2026-10-23
- Watching AI test your app like a real, picky customer — randal_olson · 2026-10-23
- Oxford paper draws TCP/IP lessons for securing and governing MCP and A2A agent protocols — sethlazar · 2026-10-23
- Dev praises App Store Connect CLI for tweaking app pricing right from the terminal — rudrank · 2026-10-23