Daily roundup

AI agent news for small business: 24 October 2026

Big banks block AI agents that log in with your password, Gusto lets Claude and ChatGPT prep payroll with your OK, and Cursor agents can now drive your desktop.

1. Citi, Wells Fargo, Bank of America and JPMorgan Chase move to block third-party AI agents from logging in to customer accounts

   Banks are keeping read-only connections through approved open-banking providers but stopping agents that log in with a customer's password, and Wells Fargo's updated terms, effective Nov. 24, treat transactions by an agent you let in as authorized, even ones you didn't intend. Never hand an agent your bank login; if it needs your numbers, give it read-only access through an approved connection and keep payments in your own hands.

   Source: USA Today. Related guide: Connect only what you need.

2. Gusto lets owners connect payroll to Claude, ChatGPT and other AI tools, with every change approved before it's final

   Owners can ask payroll and team questions, prep payroll and pull reports from chat, and Gusto can now read an uploaded contractor invoice and fill in the payment for review. It's a good pattern to copy: let the agent do the prep and send you a short list of decisions, and keep the final OK on anything that pays people.

   Source: Gusto. Related guide: Which AI agent actions need a human OK? A simple approval rule.

3. Cursor's coding agents can now click and type in any desktop app on your computer, not just the browser

   The agent can open an app it built, such as an iPhone app in Apple's iOS Simulator, and test it itself, and it may use the feature on its own when a task needs it. If you let an agent control your mouse and keyboard, close the apps and accounts it doesn't need for that job first, especially email and banking.

   Source: Cursor on X. Related guide: How to keep an AI agent secure: a 9-step checklist.

4. Qashier launches QashierGM, a free AI general manager for its point-of-sale merchants that changes nothing until the owner taps confirm

   It answers questions from a shop's own sales and payouts, like why a payout is lower than the day's sales, and staff can tag it in team chat, where it acts only within that person's role. It's Singapore-only for now, but it's a useful checklist for any agent in your register: it should show exactly what will change, wait for your OK, and give each staff member only their own permissions.

   Source: Qashier (press release). Related guide: Best AI agent for small business: how to choose by job, not by hype.

5. Anthropic hands its Agent Skills format to the Agentic AI Foundation, alongside projects from OpenAI, Hugging Face and Alibaba

   Skills are folders of instructions and scripts an agent loads when it needs them, and the format now sits under neutral governance with the Model Context Protocol (MCP), the common way agents connect to apps. That makes it more likely a skill you write once, such as how you quote a job, keeps working if you switch agent tools later.

   Source: Agentic AI Foundation. Related guide: AI agent tools vs skills vs MCP: what each one is and which to turn on.

6. Material Security launches a Google Drive agent that finds over-shared sensitive files and can pull back access automatically

   It reads each sensitive file, judges whether who can see it fits what the file is for, and can revoke access, for example a customer list shared with hundreds of outside free-email addresses. It's built for security teams, but the free version of the habit is simple: before you connect an AI assistant to Google Drive, check which files are shared with anyone who has the link.

   Source: Material Security.

Latest roundup and archive