A few US banks (e.g. Capital One) provide a separate password for API access.

Unfortunately, it's rare.