Let the good agents in.Stop the rogue ones cold.

DEFS is an agent access gateway for credit unions and community banks. It sits between AI agents and a financial institution's online banking, verifies each agent's credentials, enforces the limits set by both the member and the institution, and allows, steps up or denies each request before money moves.

An AI agent access gateway is a checkpoint between automated AI agents and a bank's or credit union's systems. Instead of blocking all agents or letting them use a member's password, the gateway identifies each agent from its cryptographic credentials, checks what it is allowed to do, and records every decision.

With DEFS, members choose what each connected agent may do (for example, bill pay up to $500 and no external transfers), and the institution sets policy caps on top. Every request must fit both. The fraud team can limit, block or revoke any agent, or use a kill switch to stop all agent access at once.

DEFS is designed to accept credentials agents already carry. Its prototype verifies HTTP message signatures used by Cloudflare Web Bot Auth and Visa Trusted Agent Protocol (Ed25519, RFC 9421) and Google AP2 mandates in SD-JWT form. Mastercard Agent Pay, Prove and World ID are planned integrations and are stubbed in the prototype. DEFS never issues its own agent passport.

Each request is checked against member and institution scopes. Out-of-scope requests are denied, borderline ones are sent for step-up confirmation, and an agent that repeatedly exceeds its limits is blocked automatically. Blocks can be shared on a rogue-agent blocklist so other participating institutions see them.

It is a network-wide list of agents that a participating institution has blocked. When one institution blocks a rogue agent, others using DEFS see that block right away. It is being designed with governance and appeal paths.

No. Card networks already offer issuer-side tools for card transactions. DEFS focuses on non-card money movement that runs through online banking: bill pay, internal and external transfers, ACH and disputes.

Credit unions and community banks, primarily those with roughly $500 million to $5 billion in assets, that want to serve members' AI agents without building their own agent controls.

Not yet. DEFS is an early-stage product with a working prototype running on test data, and it is looking for a small number of pilot partners.

No. DEFS is early stage and has not completed third-party audits or certifications. It will work through each pilot partner's vendor due-diligence process.