# Banks Race Into AI Faster Than Security Can Follow > Source: > Published: 2026-07-07 23:12:11+00:00 **Microsoft Incident Response** warned on **June 30, 2026** that poisoned `MCP` tool descriptions can steer enterprise AI agents into unsafe actions, and PYMNTS applied the risk to banks accelerating AI deployments. The issue is not that a model becomes sentient; it is that an agent trusts tool metadata before taking action inside finance workflows. For banking teams, the practical control point is agent-tool governance: inventory every MCP server, review tool descriptions as executable trust material, restrict permissions, and log actions before agents touch invoices, customer data, or payment operations. The **NSA** has separately warned that MCP adoption has outpaced security-model maturity, so financial institutions should treat agent integration like a supply-chain and identity-risk program.