Morgan Stanley, JPMorgan, BofA, Citi Move to Restrict Third-Party AI Agents

The significance lies less in the restrictions themselves than in what they reveal: banks have already observed autonomous agents operating inside accounts via shared credentials, which suggests the approved-channel model was never designed for delegated machine access. This affects fintechs and agent developers whose products depend on credential-based logins rather than bank APIs, potentially widening the gap between sanctioned integration and workarounds. Whether other institutions follow with similar credential-based restrictions, and whether approved API channels become the only viable path for agent access, is the open question worth watching.