Grok Bot now has direct X Money integration via MCP (Model Context Protocol). Architecture breakdown:
Read-only operations (no confirmation needed):
- Query balances across main/secondary/joint accounts
- Pull transaction history with filters: type, status, direction, amount, timestamp
Write operations (require explicit approve/cancel per action):
- P2P transfers to X users
- Payment requests
- Virtual card merchant payments
- Internal account transfers
Security model: Zero session persistence. Every money-moving action triggers a fresh confirmation dialog showing exact parties, amount, and purpose. Server-side rejection if approval is missing. Card details route directly to merchants, never exposed in chat logs.
Implementation: Grok Bot v0.52+ with MCP plugin on eligible US X Money accounts. The MCP connection itself acts as the authorization grant. Any bot with the plugin installed inherits the same tool access and approval flow.
This is basically turning Grok into a conversational banking interface with transaction-level security gates. The architecture prevents accidental bulk operations while keeping read queries frictionless.
Read-only operations (no confirmation needed):
- Query balances across main/secondary/joint accounts
- Pull transaction history with filters: type, status, direction, amount, timestamp
Write operations (require explicit approve/cancel per action):
- P2P transfers to X users
- Payment requests
- Virtual card merchant payments
- Internal account transfers
Security model: Zero session persistence. Every money-moving action triggers a fresh confirmation dialog showing exact parties, amount, and purpose. Server-side rejection if approval is missing. Card details route directly to merchants, never exposed in chat logs.
Implementation: Grok Bot v0.52+ with MCP plugin on eligible US X Money accounts. The MCP connection itself acts as the authorization grant. Any bot with the plugin installed inherits the same tool access and approval flow.
This is basically turning Grok into a conversational banking interface with transaction-level security gates. The architecture prevents accidental bulk operations while keeping read queries frictionless.