AI Agent for Personal Finance: Read-Only Bank Access

Checked November 3, 2026 against the pricing page, the security page, and the household page.

Short answer

An AI agent for personal finance should not get your bank password. Link each bank once in FYN. After that, the agent connects to FYN, never to the bank. The connection is read-only. The agent can look at balances, transactions, budgets, and receipts. It cannot move money. Agent Activity is the audit of what each connected app asked for. You can disconnect it anytime.

FYN is on the web, on iOS, and on Android. The same account answers over MCP, the connector ChatGPT, Claude, and other assistants already use. The server is https://mcp.fyn.fyi. You allow an app once. You can name it, watch it, and turn it off without calling the bank.

That is the arrangement. The rest of this page is how read-only bank access works, the steps to connect an agent, a checklist, and how to give an accountant the same kind of look.

Can you have read-only bank access?

Yes. Read-only bank access means a connection that can see transactions and balances and cannot transfer, pay a bill, or change the account at the bank.

FYN's bank link works that way. On Pro you sign in at the bank inside FYN, once per account. FYN never sees or stores the bank password. What comes back is the record: transactions, balances, and the history those accounts sync. The security page states the limit in one line. FYN can read your transactions. It cannot move money, make payments, or modify the accounts. View-only by design.

A password is a different object. Whoever types it is you, as far as the bank is concerned. A read-only connection is a grant with a boundary. You can see that boundary, and you can take it back. Changing the bank password is what you do when the secret itself has leaked. Disconnecting an app is what you do when you simply do not want that app to look anymore.

People also use "read-only" for a person, not an app. An accountant, a bookkeeper, or a partner who should look and not edit needs their own login with a view-only role. That login still does not include the bank password. The invite is further down.

Pro is $9.99 a month. It includes live bank sync for up to 15 accounts. Free is $0. It does not expire, it does not ask for a card, and it does not link a bank. Receipts, email, and taps are on Free. Bank transactions start when you link accounts on Pro. The plan table is on the pricing page.

Why the agent should not get the password

An agent that offers to "just sign in" is asking for the secret the bank uses to recognize you. Paste that secret into a chat, a browser agent, or a tool that logs in on your behalf, and the session belongs to your identity. If the agent does something you did not ask for, the bank is looking at your login. Some banks are already blocking third-party agents that show up that way. What held up in the October 22, 2026 reporting is in Banks are finding AI agents in customer accounts.

The useful version of an agent is narrower. It should be able to answer "what did I spend on groceries" and "can I afford this." It should not be able to move the money those answers are about. That split is why the agent talks to FYN, and FYN talks to the bank. Two doors. The bank door opens once, for you. The agent door opens when you allow an app, and it only reads.

ChatGPT, Claude, and other MCP clients can use that second door. Monarch also publishes a connector, and Copilot Money's is a beta on a waitlist, as of the October 23, 2026 check in that banks post. This page is not a claim that one product invented the idea of an assistant reading a budget. The claim is the boundary we build: the model does not receive the bank password, the tools are read-only, and you can see the calls.

ChatGPT also has its own finance feature inside ChatGPT. That is a different connection. The click path, and how it differs from FYN, is in Connect your money to ChatGPT, Claude, or any AI agent. This page is the FYN path. One bank link. Then any agent reads FYN.

How to connect an agent, step by step

1. Create a FYN account on the web, on iPhone, or on Android. One account covers all three. Start at register. Free is enough to see the app. Linking a bank is the Pro step.
2. Link each bank once, on Pro. You sign in at the bank inside FYN. FYN does not receive the password. The sync is read-only: transactions come in, and nothing can be sent back out as a payment or a transfer. Up to 15 accounts.
3. Add FYN in the assistant. The server URL is https://mcp.fyn.fyi. Sign in to FYN when the assistant asks, and allow the connection. ChatGPT and Claude use that sign-in. A desktop tool that cannot sign in uses a key you create under Settings, then Agent access. That key is not your bank password. Keep it out of the prompt. The clicks for ChatGPT and Claude are in the connect guide. The tool list is in the MCP reference.
4. Ask a question you already know the answer to. "What did I spend on groceries this month" is enough. The answer should name your merchants and that month. A generic tip about tracking groceries means the assistant is not reading your FYN account yet.
5. Open Agent Activity. On the home screen it is the recent calls. In Settings, Agent access is the list of connected apps. You should see the app you just allowed, and the kind of question it asked: spending, balances, budgets, receipts, or another area FYN records.
6. Disconnect when you want the app gone. From Agent Activity, or from Settings, then Agent access, disconnect the app. That ends its tokens. Later calls fail. Reconnect from the assistant if you want it back. You do not reset the bank password to do this.

The agent never opens the bank. It never types the password. If a tool asks you to paste the bank username and password into a chat, stop. That is the path this page is here to replace.

Checklist

Three ways to let someone, or something, see your money. Only one of them hands over the bank password. Use the other two.

Before you allow an app, run this list:

• The bank password stays out of the chat, the prompt, and any "sign in for me" tool.
• The bank is linked in FYN, on Pro, and FYN is the thing holding that link.
• The server URL is https://mcp.fyn.fyi, and you signed in to FYN to allow it.
• The first answer matches a number you recognize, for a month you recognize.
• You know where Disconnect is: Agent Activity, and Settings, then Agent access.

How to give an accountant read-only access

Give the accountant a FYN login, not your bank login. A view-only member can see household spending and budgets and cannot make changes or connect accounts. They never receive the bank password. Household sharing is available. A shared member can be an owner, a member, or view-only. In Settings the view-only role is labeled Viewer.

1. Use Pro if you need a second person. Free includes 1 household member. Pro includes unlimited household members, and everyone shares the plan's limits. Linking the bank is Pro as well, up to 15 accounts, at $9.99 a month.
2. Open Settings, then General. Members is on that page.
3. Select Invite. Enter the accountant's email.
4. Set the role to Viewer. A Viewer can see shared spending and budgets. They cannot edit them, and they cannot connect a bank. Owners manage members and billing. Pick Viewer when the person should look and not change anything.
5. Select Send. They accept with their own FYN account. When the work is done, remove them, or change the role, from the same Members list. You do not have to change the password at the bank to end their access.

That is read-only access for a person. It is the same idea as the agent: a named grant, a limit on what it can do, and a way to take it back. The household page is the role list. If your bank also offers its own guest or accountant login, that is a separate door at the bank. Use the bank's own screen for it, and do not share the password you use to sign in.

What the agent can see, and the audit

The MCP tools are read-only. An assistant can ask for recent transactions, a spending total, a category or a merchant, budgets, subscriptions, upcoming bills, balances, net worth, and receipt line items. It can ask whether a purchase fits. It cannot transfer money, pay a bill, or change a budget through that connection. Edits you make yourself stay in the FYN app.

Agent Activity is the audit. It records which app called and what it asked for: balances, transactions, spending, budgets, subscriptions, receipts, net worth, and investments. FYN keeps that activity for 90 days. If a call looks wrong, you can name the app and disconnect it. The log is there so "something has been looking at my money" has a name attached, and a button next to the name.

Daily agent calls are 500 a day on Free and 10,000 a day on Pro. Ask FYN, the in-app chat, is separate: 20 questions a month on Free and 500 on Pro. A household with no linked bank can still answer from receipts. Bank transactions start on Pro, when the accounts are linked. The developer detail, including the read-only scope, is in the Agent API post and the MCP reference.

Web, iOS, Android, and MCP

The same FYN account is the website, the iPhone app, and the Android app. Link a bank on one of them and the records are there on the others. Download links are on the download page. The agent does not need the phone. It needs the MCP server, which is the same account, at https://mcp.fyn.fyi. You allow it once. You can watch Agent Activity from the phone or the web, and you can disconnect from either one.

Link the bank once

Link the bank once. Let the agent read FYN. Watch Agent Activity. Disconnect when you are done with the app. Your bank password stays yours.

That is how an AI agent for personal finance should work, and it is what FYN is built to do. Read-only bank access for the sync. A read-only connection for every agent. A Viewer role when a person needs the same look. Eyes on the money. No hands on the account.

Start free. Move to Pro at $9.99 a month when you want the bank link, and when you want a Viewer for your accountant.

FAQ

Sources

• FYN pricing: Free, Pro at $9.99 a month, bank sync, household members, agent calls
• FYN security: read-only bank access, FYN never stores the bank password
• FYN household: owner, member, and view-only
• Connect an agent at mcp.fyn.fyi
• MCP reference: read-only tools
• FYN on iPhone and Android
• Connect your money to ChatGPT, Claude, or any AI agent
• Banks are finding AI agents in customer accounts
• FYN MCP server and Agent API