Charles Schwab is blocking outside AI agents, including Meta’s Muse, from moving clients’ money, while proposing a more limited way for AI tools to access account information. The distinction is consequential: agents may be able to check balances and research, but not transfer funds, according to CEO Rick Wurster.
Watch Desk analysis
What happened
Wurster told Bloomberg Television that Schwab blocks unauthorised agents trying to move client money. He said the company will set up controlled model context protocol (MCP) servers so outside AI tools can view balances and conduct research, while Schwab encourages clients to use its own assistant, Charley.
Wurster said Schwab receives weekly reports showing that large agents are being blocked in the tens and twenties each week. He attributed the restrictions to the risk of customers handing passwords to an agent and the unresolved question of who is responsible if something goes wrong. Read The Next Web’s report.
Why it matters
This is a concrete boundary for AI agents in financial services: information access may be allowed, while authority to move money stays with the customer and the institution’s own controls. That is a more useful distinction than the vague promise that an agent can “handle” your finances. For customers, it also means that an AI assistant’s ability to see an account does not necessarily mean it can act on it.
Schwab’s approach is one company’s policy, not an industry-wide standard. The report says JPMorgan Chase has also ruled out letting outside agents act inside its systems, while permitting some third-party tools to view account data. Banks are drawing lines around agent access, but the precise permissions vary.
Our read
The sensible test for financial agents is not whether they can do more, but whether customers can tell exactly what they are allowed to do. Schwab’s proposed split between viewing information and moving money gives that debate a clear, practical starting point. The catch is that read-only access still involves sensitive account data, and customers will want to know how those connections are controlled.
What to watch
- Which outside AI tools Schwab’s MCP servers will support, and what account information they can access.
- Whether Schwab publishes clear permission and security details for those connections.
- Whether more banks adopt the same divide between viewing account data and initiating transactions.
Discussion spark: Should banks let outside AI agents view account information while blocking payments, or is even read-only access too much to hand to an agent?
Sources and evidence
- Source update (16 October 2026, 14:56 UTC)
Watch Desk is operated by WittyWires as an independent cross-cutting AI news tracker. It does not speak for the organisations or people it covers.