Moneris · Agentic Access

Moneris Agentic Access

x-agentic-access generated

Moneris exposes 54 API operations that an AI agent could call, of which 33 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 21 read, 22 write, and 11 physical.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

Financial ServicesPaymentsPayment ProcessingCard PaymentsMerchant ServicesAcquiringCanadaFintechInfrastructure
Operations: 54 Acting: 33 Human-in-the-loop: 0 Method: generated

By consequence

read 21 write 22 physical 11

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
POST /onboarding/merchants/{merchant-id}/orders physical conditional
PUT /onboarding/merchants/{merchant-id}/orders/{merchant-order-id} physical conditional
POST /payment-methods physical conditional
DELETE /payment-methods/{payment-method-id} physical conditional
PUT /payment-methods/{payment-method-id} physical conditional
POST /payments physical conditional
POST /payments/{payment-id}/cancel physical conditional
POST /payments/{payment-id}/complete physical conditional
POST /payments/{payment-id}/increment physical conditional
POST /refunds physical conditional
POST /surcharge-lookups physical conditional

Source

Agentic Access

Raw ↑
generated: '2026-07-23'
method: generated
source: openapi/moneris-unified-api-openapi.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 54
  by_action_class:
    acting: 33
    connected: 21
  by_consequence:
    write: 22
    read: 21
    physical: 11
  human_in_the_loop_required: 0
operations:
- path: /customers
  method: post
  operationId: createCustomers
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /customers
  method: get
  operationId: getCustomers
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer.read
    - customer.write
    token:
      max-ttl: 3600
    audit: none
- path: /customers/{customer-id}
  method: delete
  operationId: deleteCustomer
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /customers/{customer-id}
  method: get
  operationId: getCustomer
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - customer.read
    - customer.write
    token:
      max-ttl: 3600
    audit: none
- path: /customers/{customer-id}
  method: put
  operationId: updateCustomer
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - customer.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /disputes/{case-id}/{case-record-number}
  method: get
  operationId: getDisputeByCaseIdAndRecordNumber
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - dispute.read
    - dispute.write
    token:
      max-ttl: 3600
    audit: none
- path: /disputes/{case-id}/{case-record-number}/accept
  method: post
  operationId: acceptDispute
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - dispute.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /disputes/{case-id}/{case-record-number}/uploads
  method: post
  operationId: uploadDisputeImage
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - dispute.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /disputes/{case-id}/{case-record-number}/uploads/{upload-reference-id}
  method: get
  operationId: getDisputeUploadStatus
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - dispute.read
    - dispute.write
    token:
      max-ttl: 3600
    audit: none
- path: /installments/plans
  method: post
  operationId: installmentLookup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /kount-inquiries
  method: post
  operationId: createKountInquiry
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - kount.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /kount-inquiries
  method: get
  operationId: getKountInquiries
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - kount.read
    token:
      max-ttl: 3600
    audit: none
- path: /kount-inquiries/{kount-inquiry-id}
  method: get
  operationId: getKountInquiryById
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - kount.read
    token:
      max-ttl: 3600
    audit: none
- path: /kount-inquiries/{kount-inquiry-id}/assert
  method: post
  operationId: kountInquiryAssert
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - kount.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /multi-currency-pricing-rates
  method: post
  operationId: mcpRate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /multi-currency-pricing-rates/{multi-currency-pricing-rate-lookup-id}
  method: get
  operationId: getMultiCurrencyPricingRateById
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - payment.read
    - payment.write
    token:
      max-ttl: 3600
    audit: none
- path: /onboarding/merchants
  method: post
  operationId: createMerchant
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - onboarding.merchant.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /onboarding/merchants/{merchant-id}
  method: get
  operationId: getMerchantDetailsByMerchantId
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - onboarding.merchant.read
    - onboarding.merchant.write
    token:
      max-ttl: 3600
    audit: none
- path: /onboarding/merchants/{merchant-id}
  method: put
  operationId: updateMerchant
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - onboarding.merchant.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /onboarding/merchants/{merchant-id}/orders
  method: post
  operationId: createOrder
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - onboarding.order.write
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /onboarding/merchants/{merchant-id}/orders/{merchant-order-id}
  method: get
  operationId: getOrderDetailsByOrderId
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - onboarding.order.read
    - onboarding.order.write
    token:
      max-ttl: 3600
    audit: none
- path: /onboarding/merchants/{merchant-id}/orders/{merchant-order-id}
  method: put
  operationId: updateOrder
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - onboarding.order.write
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /onboarding/merchants/{merchant-id}/supplies
  method: get
  operationId: listMerchantSupplies
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - onboarding.merchant.read
    - onboarding.merchant.write
    token:
      max-ttl: 3600
    audit: none
- path: /onboarding/product-recommendations
  method: post
  operationId: getRecommenderProducts
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - onboarding.order.read
    - onboarding.order.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /payment-methods
  method: post
  operationId: createPaymentMethod
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /payment-methods
  method: get
  operationId: getPaymentMethods
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - payment.read
    - payment.write
    token:
      max-ttl: 3600
    audit: none
- path: /payment-methods/{payment-method-id}
  method: delete
  operationId: deletePaymentMethod
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /payment-methods/{payment-method-id}
  method: get
  operationId: getPaymentMethod
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - payment.read
    - payment.write
    token:
      max-ttl: 3600
    audit: none
- path: /payment-methods/{payment-method-id}
  method: put
  operationId: updatePaymentMethod
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /payments
  method: post
  operationId: createPayments
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /payments
  method: get
  operationId: getPayments
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - payment.read
    - payment.write
    token:
      max-ttl: 3600
    audit: none
- path: /payments/{payment-id}
  method: get
  operationId: getPayment
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - payment.read
    - payment.write
    token:
      max-ttl: 3600
    audit: none
- path: /payments/{payment-id}/cancel
  method: post
  operationId: cancelPayment
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /payments/{payment-id}/complete
  method: post
  operationId: completePayment
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /payments/{payment-id}/increment
  method: post
  operationId: incrementPayment
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /refunds
  method: post
  operationId: createRefund
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - refund.write
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /refunds
  method: get
  operationId: getRefunds
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - refund.read
    - refund.write
    token:
      max-ttl: 3600
    audit: none
- path: /refunds/{refund-id}
  method: get
  operationId: getRefundById
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - refund.read
    - refund.write
    token:
      max-ttl: 3600
    audit: none
- path: /subscriptions
  method: post
  operationId: createSubscriptions
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /subscriptions
  method: get
  operationId: getSubscriptions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - payment.read
    - payment.write
    token:
      max-ttl: 3600
    audit: none
- path: /subscriptions/{subscription-id}
  method: get
  operationId: getSubscription
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - payment.read
    - payment.write
    token:
      max-ttl: 3600
    audit: none
- path: /subscriptions/{subscription-id}
  method: patch
  operationId: updateSubscription
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /subscriptions/{subscription-id}/cancel
  method: post
  operationId: cancelSubscription
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /subscriptions/{subscription-id}/extend
  method: post
  operationId: extendSubscription
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /subscriptions/{subscription-id}/pause
  method: post
  operationId: pauseSubscription
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /subscriptions/{subscription-id}/resume
  method: post
  operationId: resumeSubscription
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /surcharge-lookups
  method: post
  operationId: surchargeLookUp
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /three-d-secure/authentications
  method: post
  operationId: createAuthentication
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /three-d-secure/authentications/{authentication-id}
  method: get
  operationId: getAuthentication
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - payment.read
    - payment.write
    token:
      max-ttl: 3600
    audit: none
- path: /three-d-secure/authentications/{authentication-id}/lookup
  method: post
  operationId: authenticationValueLookup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /three-d-secure/card-lookups
  method: post
  operationId: cardLookup
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /validations
  method: post
  operationId: createValidation
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - payment.write
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /validations
  method: get
  operationId: getValidations
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - payment.read
    - payment.write
    token:
      max-ttl: 3600
    audit: none
- path: /validations/{validation-id}
  method: get
  operationId: getValidation
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - payment.read
    - payment.write
    token:
      max-ttl: 3600
    audit: none