Mangopay Agentic Access
Mangopay exposes 215 API operations that an AI agent could call, of which 116 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 99 read, 67 write, and 49 physical.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| PUT | /bankingaliases/{bankingaliasid} | physical | conditional |
| POST | /cardregistrations | physical | conditional |
| PUT | /cardregistrations/{cardregistrationid} | physical | conditional |
| PUT | /cards/{cardchallengeflowid} | physical | conditional |
| POST | /cards/{cardchallengeflowid}/validation | physical | conditional |
| POST | /deposit-preauthorizations/card/direct | physical | conditional |
| PUT | /deposit-preauthorizations/{depositid} | physical | conditional |
| POST | /mandates/directdebit/web | physical | conditional |
| PUT | /mandates/{mandateId}/cancel | physical | conditional |
| POST | /payins/bankwire/direct | physical | conditional |
| POST | /payins/card/direct | physical | conditional |
| POST | /payins/card/web | physical | conditional |
| POST | /payins/deposit-preauthorized/direct/full-capture | physical | conditional |
| POST | /payins/directdebit/direct | physical | conditional |
| POST | /payins/payment-methods/bancontact | physical | conditional |
| POST | /payins/payment-methods/bizum | physical | conditional |
| POST | /payins/payment-methods/blik | physical | conditional |
| POST | /payins/payment-methods/ideal | physical | conditional |
| POST | /payins/payment-methods/klarna | physical | conditional |
| POST | /payins/payment-methods/mbway | physical | conditional |
| POST | /payins/payment-methods/multibanco | physical | conditional |
| POST | /payins/payment-methods/openbanking | physical | conditional |
| POST | /payins/payment-methods/payconiq | physical | conditional |
| POST | /payins/payment-methods/paypal | physical | conditional |
| POST | /payins/payment-methods/paypal/data-collection | physical | conditional |
Source
Agentic Access
generated: '2026-07-15'
method: generated
source: openapi/openapi.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 215
by_action_class:
acting: 116
connected: 99
by_consequence:
write: 67
read: 99
physical: 49
human_in_the_loop_required: 0
operations:
- path: /sca/users/natural
method: post
operationId: post_sca_users_natural
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /sca/users/natural/{userId}/category
method: put
operationId: put_sca_users_natural_userId_category
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /sca/users/natural/{userId}
method: put
operationId: put_sca_users_natural_userId
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /sca/users/legal
method: post
operationId: post_sca_users_legal
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /sca/users/legal/{userId}/category
method: put
operationId: put_sca_users_legal_userId_category
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /sca/users/legal/{userId}
method: put
operationId: put_sca_users_legal_userId
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /sca/users/{userId}/enrollment
method: post
operationId: post_sca_users_userId_enrollment
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /sca/users/{userId}/consent
method: post
operationId: post_sca_users_userId_consent
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /sca/users/{userId}/sca-status
method: get
operationId: get_sca_users_userId_sca_status
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /sca/users/{userId}
method: get
operationId: get_sca_users_userId
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /users/natural
method: post
operationId: post_users_natural
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /users/natural/{userId}
method: put
operationId: put_users_natural_userId
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /users/natural/{userId}
method: delete
operationId: delete_users_natural_userId
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /users/legal
method: post
operationId: post_users_legal
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /users/legal/{userId}
method: put
operationId: put_users_legal_userId
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /users/legal/{userId}
method: delete
operationId: delete_users_legal_userId
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /users/{userId}
method: get
operationId: get_users_userId
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /users
method: get
operationId: get_users
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /wallets
method: post
operationId: post_wallets
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /wallets/{walletId}
method: put
operationId: put_wallets_walletId
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /wallets/{walletId}
method: get
operationId: get_wallets_walletId
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /wallets/{usernaturalpayerwalletid}
method: put
operationId: put_wallets_usernaturalpayerwalletid
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /wallets/{usernaturalpayerwalletid}
method: get
operationId: get_wallets_usernaturalpayerwalletid
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /wallets/{usernaturalownerwalletid}
method: put
operationId: put_wallets_usernaturalownerwalletid
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /wallets/{usernaturalownerwalletid}
method: get
operationId: get_wallets_usernaturalownerwalletid
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /wallets/{userlegalownerwalletid}
method: put
operationId: put_wallets_userlegalownerwalletid
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /wallets/{userlegalownerwalletid}
method: get
operationId: get_wallets_userlegalownerwalletid
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /users/{userId}/wallets
method: get
operationId: get_users_userId_wallets
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /wallets/{usernaturalpayerwalletid}/transactions
method: get
operationId: get_wallets_usernaturalpayerwalletid_transactions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /wallets/{usernaturalownerwalletid}/transactions
method: get
operationId: get_wallets_usernaturalownerwalletid_transactions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /wallets/{userlegalownerwalletid}/transactions
method: get
operationId: get_wallets_userlegalownerwalletid_transactions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /cardregistrations
method: post
operationId: post_cardregistrations
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: '{cardregistrationurl}'
method: post
operationId: post_cardregistrationurl
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /cardregistrations/{cardregistrationid}
method: put
operationId: put_cardregistrations_cardregistrationid
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /cardregistrations/{cardregistrationid}
method: get
operationId: get_cardregistrations_cardregistrationid
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /cards/{cardchallengeflowid}
method: put
operationId: put_cards_cardchallengeflowid
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /cards/{cardchallengeflowid}
method: get
operationId: get_cards_cardchallengeflowid
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /users/{userId}/cards
method: get
operationId: get_users_userId_cards
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /cards/fingerprints/{cardfingerprint}
method: get
operationId: get_cards_fingerprints_cardfingerprint
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /cards/fingerprints/{cardfingerprint}/transactions
method: get
operationId: get_cards_fingerprints_cardfingerprint_transactions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /cards/{cardchallengeflowid}/validation
method: post
operationId: post_cards_cardchallengeflowid_validation
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /cards/{cardchallengeflowid}/validation/{cardvalidationid}
method: get
operationId: get_cards_cardchallengeflowid_validation_cardvalidationid
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /payins/card/direct
method: post
operationId: post_payins_card_direct
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /payins/{payinId}
method: get
operationId: get_payins_payinId
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /recurringpayinregistrations
method: post
operationId: post_recurringpayinregistrations
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /recurringpayinregistrations/{recurringpayinregistrationid}
method: put
operationId: put_recurringpayinregistrations_recurringpayinregistrationid
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /recurringpayinregistrations/{recurringpayinregistrationid}
method: get
operationId: get_recurringpayinregistrations_recurringpayinregistrationid
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /payins/recurring/card/direct
method: post
operationId: post_payins_recurring_card_direct
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /preauthorizations/card/direct
method: post
operationId: post_preauthorizations_card_direct
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /preauthorizations/{preauthorizationid}
method: put
operationId: put_preauthorizations_preauthorizationid
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /preauthorizations/{preauthorizationid}
method: get
operationId: get_preauthorizations_preauthorizationid
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /cards/{cardchallengeflowid}/preauthorizations
method: get
operationId: get_cards_cardchallengeflowid_preauthorizations
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /users/{userId}/preauthorizations
method: get
operationId: get_users_userId_preauthorizations
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /payins/preauthorized/direct
method: post
operationId: post_payins_preauthorized_direct
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /deposit-preauthorizations/card/direct
method: post
operationId: post_deposit_preauthorizations_card_direct
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /deposit-preauthorizations/{depositid}
method: put
operationId: put_deposit_preauthorizations_depositid
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /deposit-preauthorizations/{depositid}
method: get
operationId: get_deposit_preauthorizations_depositid
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /cards/{cardchallengeflowid}/deposit-preauthorizations
method: get
operationId: get_cards_cardchallengeflowid_deposit_preauthorizations
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /users/{userId}/deposit-preauthorizations
method: get
operationId: get_users_userId_deposit_preauthorizations
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /payins/deposit-preauthorized/direct/full-capture
method: post
operationId: post_payins_deposit_preauthorized_direct_full_capture
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /payins/card/web
method: post
operationId: post_payins_card_web
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /payins/card/web/{webpayinid}/extended
method: get
operationId: get_payins_card_web_webpayinid_extended
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /payment-methods/metadata
method: post
operationId: post_payment_methods_metadata
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /virtual-accounts/availability
method: get
operationId: get_virtual_accounts_availability
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /wallets/{walletId}/virtual-accounts
method: post
operationId: post_wallets_walletId_virtual_accounts
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /wallets/{usernaturalpayerwalletid}/virtual-accounts/{virtualaccountid}
method: put
operationId: put_wallets_usernaturalpayerwalletid_virtual_accounts_virtualaccountid
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /wallets/{walletId}/virtual-accounts/{virtualaccountid}
method: get
operationId: get_wallets_walletId_virtual_accounts_virtualaccountid
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /wallets/{usernaturalpayerwalletid}/virtual-accounts
method: get
operationId: get_wallets_usernaturalpayerwalletid_virtual_accounts
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /wallets/{userlegalownerwalletid}/bankingaliases/iban
method: post
operationId: post_wallets_userlegalownerwalletid_bankingaliases_iban
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /bankingaliases/{bankingaliasid}
method: put
operationId: put_bankingaliases_bankingaliasid
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /bankingaliases/{bankingaliasid}
method: get
operationId: get_bankingaliases_bankingaliasid
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /wallets/{userlegalownerwalletid}/bankingaliases
method: get
operationId: get_wallets_userlegalownerwalletid_bankingaliases
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /payins/bankwire/direct
method: post
operationId: post_payins_bankwire_direct
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /payment-methods/openbanking/metadata/supported-banks
method: get
operationId: get_payment_methods_openbanking_metadata_supported_banks
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /payins/payment-methods/openbanking
method: post
operationId: post_payins_payment_methods_openbanking
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /mandates/directdebit/web
method: post
operationId: post_mandates_directdebit_web
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /mandates/{mandateId}
method: get
operationId: get_mandates_mandateId
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /mandates/{mandateId}/cancel
method: put
operationId: put_mandates_mandateId_cancel
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /mandates
method: get
operationId: get_mandates
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /users/{legaluserbankaccountid}/mandates
method: get
operationId: get_users_legaluserbankaccountid_mandates
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /users/{userId}/mandates
method: get
operationId: get_users_userId_mandates
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /payins/directdebit/direct
method: post
operationId: post_payins_directdebit_direct
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /payins/payment-methods/bancontact
method: post
operationId: post_payins_payment_methods_bancontact
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /payins/payment-methods/bizum
method: post
operationId: post_payins_payment_methods_bizum
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /payins/payment-methods/blik
method: post
operationId: post_payins_payment_methods_blik
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /payins/payment-methods/ideal
method: post
operationId: post_payins_payment_methods_ideal
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /payins/payment-methods/klarna
method: post
operationId: post_payins_payment_methods_klarna
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /payins/payment-methods/mbway
method: post
operationId: post_payins_payment_methods_mbway
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /payins/payment-methods/multibanco
method: post
operationId: post_payins_payment_methods_multibanco
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /payins/payment-methods/payconiq
method: post
operationId: post_payins_payment_methods_payconiq
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /payins/payment-methods/paypal/data-collection
method: post
operationId: post_payins_payment_methods_paypal_data_collection
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /payins/payment-methods/paypal/data-collection/{datacollectionid}
method: get
operationId: get_payins_payment_methods_paypal_data_collection_datacollectionid
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /payins/payment-methods/paypal/recurring
method: post
operationId: post_payins_payment_methods_paypal_recurring
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /payins/payment-methods/paypal
method: post
operationId: post_payins_payment_methods_paypal
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /payins/{paypalpayinid}/trackings
method: put
operationId: put_payins_paypalpayinid_trackings
x-agentic-access:
action-class: acting
consequence:
# --- truncated at 32 KB (69 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mangopay/refs/heads/main/agentic-access/mangopay-agentic-access.yml