Schwab blocks outside AI agents from moving money, but prepares controlled data access
CEO Rick Wurster says customers should not hand agents their passwords. Planned connections would let outside AI tools check balances and conduct research, without permission to transfer funds.
Schwab is preparing Model Context Protocol (MCP) connections that let customers’ chosen AI models read balances and support research, but that permission will not let the models move money. CEO Rick Wurster framed the line as a control and accountability issue: handing an agent account credentials would leave Schwab and the customer unable to adequately control its actions and unclear about responsibility if something went wrong. Permitted interactions are routed through Schwab’s authentication and software interfaces rather than shared passwords.
01
On October 16, Wurster told Bloomberg TV that Schwab is preparing controlled MCP access for outside AI models.
02
Wurster said Schwab receives weekly reports of detected and rejected agent activity, with blocks involving major agents in the “tens and twenties,” not hundreds.
03
Requests from clients trading through AI models must pass through Schwab’s APIs and MCP servers, where the firm can control and verify interactions.
Charles Schwab is blocking outside AI agents from moving client money while preparing a controlled way for AI tools to read account information. Speaking to Bloomberg TV on October 16, CEO Rick Wurster described a boundary between helping customers understand their finances and letting an outside agent act with their account credentials.
A controlled connection, not a customer’s password
The planned route uses Model Context Protocol, or MCP, servers: connections through which outside AI models would receive permitted account information under Schwab’s authentication controls. Wurster said customers would be able to use their chosen models to see account balances and conduct research. That access would not authorize the models to move money.
Wurster also described existing clients who trade through AI models and application programming interfaces, or APIs—software connections used to submit requests. In earnings-call remarks cited by Gizmodo, he said those requests must go through Schwab’s APIs and MCP servers, where the firm can control and verify interactions.
Who is responsible when an agent acts?
Wurster singled out Meta’s Muse when explaining the block. He said Schwab does not want customers handing over their passwords and letting the agent take actions for them. His objection combined two concerns: neither Schwab nor the customer could control the agent adequately, and responsibility would be unclear if something went wrong.
Weekly blocks, with limits inside Schwab too
The restriction is already being enforced. Wurster said he receives a weekly report on detected and rejected agent activity. He described the number of blocks involving major agents as being in the “tens and twenties” each week, not the hundreds.
Wurster interpreted that relatively small volume as a sign that customers like AI but are not yet ready to turn over their financial accounts.
Schwab’s own assistant also starts with limited authority. Wurster encouraged customers to use Charley, but its initial role covers administrative and informational tasks, not trading. In separate remarks to Yahoo Finance cited by Gizmodo, he said AI could help customers research stocks and set up trading processes, while calling decisions without human approval “a leap too far.”
Sources
gizmodo.comAfter Muse Launch, U.S. Banks Are Saying Hell No to AI Agents Moving Money
digitaltrends.comUS banks want to block AI agents from moving your money. Well, at least that’s one good move.
Reader comments
Newest comments first. Replies stay oldest first.