Your AI Agent Can Call Every API — Except Your Bank. Here's Why.

AI agents can access most APIs using OAuth or tokens, but bank APIs remain inaccessible due to institutional authentication requirements. Accessing these requires eIDAS QWAC and eSEAL certificates from a QTSP, costing between €2,000 and €10,000 annually. Additionally, LLM-driven agents expose ambiguities in API specifications designed for humans. Unlike developers, agents may trigger runaway loops, such as repeatedly hitting DELETE endpoints, necessitating a shift in how API specs are written for machine callers.