US banks are blocking third-party AI agents from customer accounts, including tools given login details by users, while exploring controlled access.