Agentic Banking — Your Finances, One Conversation Away
See balances, move money, categorize transactions, pay bills. All through your agent. Passkey-protected. Keys never leave your device.
Why banking needs an agentic layer
The average household has accounts at 3–5 financial institutions: a checking account at one bank, savings at another, a credit card from a third, an investment brokerage, and a pension provider. Checking your net worth means opening six different apps, logging in six times, and doing mental arithmetic across six different interfaces.
That's before you try to act on any of it. Moving money between accounts requires navigating routing numbers, confirmation codes, and 3-step wizards. Spotting a suspicious charge means scrolling through hundreds of transactions across every institution. An agent that speaks to all your banks through UADP eliminates all of that friction.
What your agent can do
Unified balance view
Ask "what's my net worth right now?" and get a single answer aggregated across checking, savings, credit cards, and investments.
Detect recurring charges
The agent identifies subscriptions you've forgotten about, duplicate charges, and price increases on recurring bills.
Set savings rules
"Move 10% of every incoming paycheck to savings automatically." Rules are stored as UADP actions — auditable and revocable.
Compare rates
"Is my savings account rate competitive?" The agent pulls current rates across institutions and tells you if switching makes sense.
Pay bills on instruction
"Pay my electricity bill" — the agent locates the correct payee, proposes the amount from the latest invoice, and waits for your passkey confirmation.
Passkey per transaction
Every outgoing payment requires an explicit biometric or hardware key gesture. There is no way to move money without your active approval.
Security model
WebAuthn passkey per transaction
Every action that moves money triggers a WebAuthn ceremony. Your biometric (Face ID, fingerprint) or hardware key produces a cryptographic signature that authorizes the specific transaction amount and recipient.
Cryptographic confirmation
Transaction proposals are signed by the agent runtime before display. You are always approving a tamper-evident payload — what you see is exactly what gets executed.
Tokens scoped per action
UADP authentication tokens are scoped to a single action and expire immediately after use. A compromised token cannot be replayed or used to authorize a different transaction.
No seed phrases in prompts
Private keys live exclusively in your device's Secure Enclave, TPM, or StrongBox. They are never extracted, never pasted into a chat, and never transmitted across any network.
Example conversations
"What did I spend on food this month?"
You've spent $487 on food so far in April: $210 at restaurants, $195 at grocery stores, and $82 on delivery apps. That's 18% above your April average of $413. Want a breakdown by merchant?
"Move $500 to my savings account."
Transfer $500 from Chase Checking (...4821) to Marcus Savings (...7703). Your checking balance after transfer: $2,143. Confirm with your passkey to proceed.
"Show me anything suspicious from last week."
2 items flagged: (1) $34.99 charge from "CLDSTRG-PRO" on Apr 14 — you have no matching subscription in your records. (2) A duplicate $12.00 charge from Spotify on Apr 15 — you were already billed on Apr 1. Want me to dispute both?
Frequently asked questions
Is my bank supported?
Astral supports any bank that exposes a UADP manifest. For banks that don't yet support UADP natively, Astral uses scraping adapters that normalize account data into the same structured JSON schema. Major US, EU, and UK retail banks are covered in the adapter library.
Does Astral store my banking credentials?
No. Astral uses WebAuthn passkeys per service — your banking credentials are never typed into Astral or stored on any server. Authentication tokens are scoped per action and expire after use. Your private key never leaves your device's Secure Enclave or TPM.
Can the agent move money without my approval?
Never. Every outgoing transaction requires an explicit passkey confirmation from you. The agent proposes the transfer, shows you the exact amount, destination, and purpose — you approve with a biometric gesture or hardware key. There is no way to bypass this step.
What regulations apply to agentic banking?
Astral operates as a read-and-act client on top of your existing bank accounts — similar to how Open Banking PSD2 clients work in the EU. Astral does not hold funds, issue cards, or provide financial services. Regulatory compliance is the responsibility of the underlying bank. Astral adds a privacy-preserving agent layer on top.