Mandates and data access

A mandate records what a user authorized an agent to do, and AP2 is a payments protocol built on them.¹ On data access, the US personal financial data rights rule (CFPB Section 1033) went through a reconsideration notice in August 2025, and a November 2026 report says it could become a vehicle to regulate AI agents.²³

Mandates

• AP2 (Agent Payments Protocol): a protocol for agent-initiated payments built on mandates, designed to work with A2A and MCP.¹ A reference implementation and samples are on GitHub.⁴ Details: AP2.

Data access

• CFPB Section 1033 (personal financial data rights): the rule went through a reconsideration notice in August 2025.² A November 2026 report says the rule, then at OMB, could become a vehicle to regulate AI agents.³
• Aggregators: Plaid powers account connections for Meta’s Muse agent.⁵ Plaid’s own MCP servers are for dashboard diagnostics and a sandbox coding toolkit, not end-user account access.⁶ A September 27, 2026 CNBC article covers Muse as a personal agent, including consumers giving the AI access to banking and credit card statements.⁷ More in Personal money agents, including Meta Muse, Plaid MCP servers and Banks and outside agents.

Rules and risk are background here, not a focus. A January 27, 2026 FINRA blog, “Emerging Trend in GenAI: Observations on AI Agents,” discusses member firms’ use of AI agents.⁸ FINRA’s 2026 Annual Regulatory Oversight Report has a GenAI section on emerging agent trends, describing AI agents as systems that can autonomously perform and complete tasks on behalf of a user.⁹

Sources

---

Suggest a correction (opens a GitHub issue)

Footnotes

1. AP2 - Agent Payments Protocol Documentation. AP2 Protocol, official, retrieved 2026-11-12. ↩ ↩²

2. Federal Register. Federal Register, official, retrieved 2026-11-12. ↩ ↩²

3. AI agents scramble banks’ fight with fintechs. POLITICO, third-party, retrieved 2026-11-12. ↩ ↩²

4. GitHub - google-agentic-commerce/AP2: Building a Secure and Interoperable Future for AI-Driven Payments. · GitHub. Google (GitHub), official, retrieved 2026-11-12. ↩

5. Plaid powers Meta’s new AI agent, Muse - Plaid. Plaid, official, retrieved 2026-11-12. ↩

6. Resources - MCP Server - Plaid Docs. Plaid Docs, official, retrieved 2026-11-12. ↩

7. Meta’s Muse is attacking one of economy’s most profitable weak spots. CNBC, third-party, retrieved 2026-11-12. ↩

8. Emerging Trend in GenAI: Observations on AI Agents. FINRA, official, retrieved 2026-11-12. ↩

9. GenAI: Continuing and Emerging Trends (FINRA 2026 oversight report). FINRA, official, retrieved 2026-11-12. ↩