Is FAPI 2.0 being used in Agentic AI flows (MCP?)

[gffletch]

I raised this question in a FAPI working group call a few weeks ago and had a reminder to add an issue once the baseline was migrated to github.

My question is around whether we've seen deployments use FAPI to protect access to MCP servers? Or if there is a need for a higher security API profile in the agentic space? If so, is there any guidance the FAPI working group would want to produce?

[dpostnikov]

Thanks, George. We are talking about a system-to-system API call without user involvement, right?

MCP Client <--> MCP Server

[dpostnikov]

Discussed on a call today: perhaps we need a blog post to explain how the FAPI client credential profile can be used? And that it comes with conformance testing already.

[sakimura]

@jogu pointed out that it would be worthwhile to involve Aaron and Pierter as there are payment use cases being considered.
@RalphBragg may have some implementations on it.
There is an active conversation in FDX. @lj-raidiam and Ray is following it closely.
https://financialdataexchange.org/fdxwebinar-agenticai/
https://financialdataexchange.org/wp-content/uploads/2026/07/Recap_Agentic-AI-and-Open-Finance_FDX-webinar_July-2026.pdf
Elcio may have agenting AI use-cases in Brazil as well.