ReadingResearchRadarInvestment framework
Sign in / Sign up
← Back to reading
NewsTopic in Chinese · MCP金融接入规范2 min read·2026-10-20DisconfirmAI Editorial

US Banks Block Third-Party AI Agents, Open Read-Only Access via Model Context Protocol

Major US financial institutions like Charles Schwab and JPMorgan have blocked direct access for third-party AI agents such as Meta Muse due to liability concerns. However, they are not cutting ties entirely; instead, they are using the Model Context Protocol (MCP) to provide read-only access to account balances and research data, establishing a new compliance paradigm that isolates write operations while allowing controlled data retrieval.

ImportanceMaterialEvidenceE3 inspectableWrite-upStandard

Original publication time 2026-10-19 15:40 GMT+8

As autonomous AI agents become more capable, US financial infrastructure is redrawing the boundaries of interaction with external models. According to reports from IT Home, leading institutions including Charles Schwab, JPMorgan Chase, and Bank of America have recently tightened restrictions on third-party AI agents. Rick Wurster, CEO of Charles Schwab, told Bloomberg that they block various AI agents weekly and receive regular reports on these attempts. Jamie Dimon, CEO of JPMorgan, stated during an earnings call that no third-party agent is allowed unrestricted access to their systems, with a spokesperson adding that any agent attempting to log in with bank credentials would be rejected.

This blockade stems not from a rejection of AI technology, but from ambiguous liability. Wurster noted that neither banks nor customers can control these third-party agents, leaving no clear answer on who bears responsibility if something goes wrong. Consequently, financial institutions have adopted a more nuanced strategy: completely prohibiting agents from executing "write operations" like fund transfers or placing orders, while allowing information queries through dedicated interfaces.

Sign in / Sign up
ReadingResearchRadarInvestment framework

In this context, the Model Context Protocol (MCP) has emerged as a key compromise. MCP is an open protocol designed to standardize connections between AI models and external data sources. Charles Schwab indicated that external models can query account balances and research materials via dedicated MCP servers but cannot execute any asset-moving operations. This architecture limits AI capabilities to a "read-only" scope, preserving the ability of agents to assist with analysis and information organization while severing the risk path of direct financial transaction intervention.

This trend extends beyond finance. Delta Air Lines has stopped allowing users to book flights via agents, Yelp restricts access to paid agent service providers, and Amazon previously accused Meta Muse of violating site rules. This suggests that in high-value, heavily regulated industries, companies are increasingly managing AI agent access permissions through protocol layers like MCP rather than simple API keys, aiming to establish clear security boundaries and chains of responsibility.

Sources

  • Source materialithome.com↗
Topic in Chinese

MCP金融接入规范

【背景】随着Meta Muse等自主式AI智能体试图直接访问金融系统,美国多家大型金融机构近期确立了新的合规范式:禁止第三方AI执行资金转移等写操作,但通过模型上下文协议(MCP)服务器开放账户余额和研究资料的只读查询权限。

3 steps1 piecesUpdated 2026-10-20 19:49

How it got here

  1. 2026-10-20美国银行、嘉信理财等金融机构明确禁止Meta Muse等第三方AI智能体直接访问核心交易系统,理由是责任归属不清。ithome.com ↗
  2. 2026-10-20上述机构并未完全切断连接,而是通过Model Context Protocol(MCP)服务器向外部模型开放账户余额和研究资料的只读查询权限。ithome.com ↗
  3. 2026-10-19IT之家报道确认,嘉信理财CEO表示每周拦截多种AI智能体,但允许通过专用MCP服务器进行不可执行资金转移的查询。ithome.com ↗

What is still unsettled

  • 监管机构是否会针对“MCP只读访问”制定具体的合规标准或审计要求?
  • 其他非美国主要市场的金融机构是否会采纳类似的“隔离写、受控读”策略?
  • AI智能体提供商如何适应这种受限的数据访问模式,其商业模式将受到何种影响?
Read the full topic →
Continue researching →