Dateline: Ninth Wave, product launch, 21 October 2026

Ninth Wave, the New York open finance platform, introduced the Ninth Wave Agentic Control Layer on 21 October 2026, a framework for governing how AI agents reach customer-permissioned bank data, with an early-access MCP server and a read-only pilot for banks and credit unions. The release, Fintechbits notes, names no bank or credit union in the Agentic Control Layer pilot, no AI operator that has registered, no pricing and no date for the money movement features Ninth Wave puts on its roadmap. The design is careful, but the release gives no evidence that any institution has signed up to use it.

Deal: Pilot features and timing to be confirmed with participants and may change

How the Agentic Control Layer works

The Agentic Control Layer applies the rules banks already use for fintech apps to AI agents, according to the Ninth Wave release on BusinessWire. Every agent must be tied to a registered, accountable operator before it can connect. Customers choose which accounts and data an agent may use, for what purpose and for how long, and that consent is checked on every call rather than once per session. Revoking it takes effect on the next request.

Each task is limited to the consented accounts, data scopes, date ranges and task limits. Only the fields a task needs are returned, and account numbers are masked before any data reaches the AI model. The institution or Ninth Wave can pause an agent, an operator or a single capability, and every approved and denied request is logged in Ninth Wave’s Open Finance Console.

The first release of the Agentic Control Layer is read-only: account lists and balances, transaction history within set date ranges, and account-holder verification. Money movement is on the roadmap. Institutions keep their own authentication and policies, and the release says the layer “can narrow access but never widen it.”

George Anderson, founder and chief executive of Ninth Wave, set out the three checks the product is built around: “Who does the agent represent? What is it allowed to see? Does that permission still apply?”

Fintechbits analysis

Why Ninth Wave can build the Agentic Control Layer on existing plumbing

Ninth Wave already manages third-party access for the institutions it serves, so the Agentic Control Layer reuses existing connections, consent records and its financial data model rather than needing a new core integration. It supports two kinds of agent: customer-authorised agents, where a person signs in and consents through the bank’s own identity provider, and unattended business agents working under a mandate the institution defines.

Ninth Wave’s sales pitch rests on that reuse. Banks have spent years moving fintech apps off screen scraping and onto permissioned APIs, the shift Fintechbits described in its open banking explainer. Ninth Wave is betting that AI assistants will follow the same path, and that banks would rather extend controls they already run than build a separate gate for agents.

Fintechbits analysis

Why a read-only Agentic Control Layer is the sensible first step

Starting read-only is the right call. Reading balances and transactions is where AI assistants are already useful, for spending summaries and cash flow forecasts, and it carries far less risk than letting an agent move money. A bank can test operator registration, per-call consent and audit logs on low-stakes data before anything leaves an account.

The per-call consent check is the strongest design choice. If consent is only checked when a session opens, an agent can keep reading data for the rest of that session after the customer has withdrawn permission, whereas a check on every request stops it at the next call.

The weakness is that the release names nobody. A governance layer only matters if banks switch it on and AI operators agree to register. Interactive Brokers showed one path when it opened its MCP connector to outside AI tools with a human approving every order, as Fintechbits reported in July. Ninth Wave is offering banks a similar framework, and the release does not show a single committed institution. Fintechbits would want to see a named pilot bank and a named agent operator before treating the Agentic Control Layer as more than a proposal.

Frequently asked questions

What is the Ninth Wave Agentic Control Layer?

It is a framework from open finance provider Ninth Wave that governs how AI agents access customer-permissioned bank data. Agents must belong to a registered operator, consent is checked on every request, and every approved or denied call is logged.

Can AI agents move money through the Agentic Control Layer?

No. The first release is read-only, covering account lists, balances, transaction history within set date ranges and account-holder verification. Ninth Wave lists money movement as a roadmap item without a date.

What does the Ninth Wave release leave out?

Fintechbits found no named bank or credit union in the pilot, no registered AI operator, no pricing and no date for money movement. The design is detailed, but the release offers no evidence of adoption.

What to Watch Next

The first proof point is a named institution. If a bank or credit union confirms it is running the Agentic Control Layer pilot, and an AI assistant provider confirms it has registered as an operator, the framework moves from proposal to working channel. The second is any date for money movement, which would test whether the per-call consent model holds up when agents can pay.

Why this matters

The Ninth Wave release, Fintechbits notes, names no pilot bank, no registered AI operator, no pricing and no date for money movement. The Agentic Control Layer checks consent on every request, masks account numbers before data reaches a model and logs every call, which is a careful answer to how banks should let AI agents in. It reuses controls banks already run for fintech apps. The risk is adoption, since a governance layer only matters once banks switch it on and agent operators register.

Primary sources

businesswire.com | PRESS RELEASE | https://www.businesswire.com/news/home/20261021603767/en/

ninth-wave.com | COMPANY WEBSITE | https://ninth-wave.com/