PayU · Agentic Access

PayU Agentic Access

x-agentic-access generated

PayU exposes 47 API operations that an AI agent could call, of which 30 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 17 read, 18 write, and 12 physical.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

PaymentsPayment ProcessingFintechFinancial ServicesSubscriptionsFraud DetectionCheckoutMarketplaceTokenizationEmerging Markets
Operations: 47 Acting: 30 Human-in-the-loop: 0 Method: generated

By consequence

read 17 write 18 physical 12

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
POST /api/aml-verification/v1/dataloading/payouts/bankAccountData physical conditional
POST /api/aml-verification/v1/dataloading/payouts/payoneer physical conditional
POST /api/aml-verification/v1/dataloading/payouts/worldfirst physical conditional
POST /api/aml-verification/v1/verification-transfers/manual physical conditional
POST /api/v2_1/customers/ext/{extCustomerId}/feeCreditTransfer physical conditional
POST /api/v2_1/customers/ext/{extCustomerId}/feeDebitTransfer physical conditional
POST /api/v2_1/orders physical conditional
DELETE /api/v2_1/orders/{orderId} physical conditional
POST /api/v2_1/orders/{orderId}/captures physical conditional
POST /api/v2_1/orders/{orderId}/refunds physical conditional
PUT /api/v2_1/orders/{orderId}/status physical conditional
POST /api/v2_1/payouts physical conditional

Source

Agentic Access

Raw ↑ 
generated: '2026-07-15'
method: generated
source: openapi/payu-europe-rest-api.yaml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 47
  by_action_class:
    acting: 30
    connected: 17
  by_consequence:
    write: 18
    read: 17
    physical: 12
  human_in_the_loop_required: 0
operations:
- path: /pl/standard/user/oauth/authorize
  method: post
  operationId: oauth
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/v2_1/paymethods
  method: get
  operationId: retrieve-payment-methods
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - client_credentials
    - trusted_merchant
    token:
      max-ttl: 3600
    audit: none
- path: /api/v2_1/orders
  method: post
  operationId: create-an-order
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    scope:
    - client_credentials
    - trusted_merchant
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v2_1/orders/{orderId}
  method: get
  operationId: retrieve-an-order
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
    scope:
    - client_credentials
- path: /api/v2_1/orders/{orderId}
  method: delete
  operationId: cancel-an-order
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/v2_1/orders/{orderId}/captures
  method: post
  operationId: capture-authorized-order
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/v2_1/orders/{orderId}/status
  method: put
  operationId: capture-authorized-order-deprecated
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/v2_1/orders/{orderId}/transactions
  method: get
  operationId: retrieve-a-transaction
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - oAuth token
    token:
      max-ttl: 3600
    audit: none
- path: /api/v2_1/shops/{shopId}
  method: get
  operationId: retrieve-shop-data
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
    scope:
    - client_credentials
- path: /api/v2_1/orders/{orderId}/refunds
  method: post
  operationId: create-a-refund
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/v2_1/orders/{orderId}/refunds
  method: get
  operationId: retrieve-all-refunds-for-the-specified-order
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
    scope:
    - client_credentials
- path: /api/v2_1/orders/{orderId}/refunds/{refundId}
  method: get
  operationId: retrieve-specific-refund
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
    scope:
    - client_credentials
- path: /api/v2_1/payouts
  method: post
  operationId: create-a-payout
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/v2_1/payouts/{payoutId}
  method: get
  operationId: retrieve-a-payout
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
    scope:
    - client_credentials
- path: /api/v2_1/tokens/{token}
  method: delete
  operationId: delete-a-token
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - trusted_merchant
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v2_1/mcp-partners/{mcpPartnerId}/fx-table
  method: get
  operationId: retrieve-rate-table
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
    scope:
    - client_credentials
- path: /api/v2_1/fx-providers/ecb/fx-rates
  method: get
  operationId: retrieve-reference-rates
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
    scope:
    - client_credentials
- path: /api/v2_1/customers/ext/{extCustomerId}/status
  method: get
  operationId: retrieve-seller-status
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
    scope:
    - client_credentials
- path: /api/v2_1/customers/ext/{extCustomerId}/balances
  method: get
  operationId: retrieve-seller-balance
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
    scope:
    - client_credentials
- path: /api/v2_1/customers/ext/{extCustomerId}/operations
  method: get
  operationId: retrieve-seller-operation-history
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
    scope:
    - client_credentials
- path: /api/v2_1/customers/ext/{extCustomerId}/feeDebitTransfer
  method: post
  operationId: transfer-funds-from-seller-to-marketplace-balance
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/v2_1/customers/ext/{extCustomerId}/feeCreditTransfer
  method: post
  operationId: transfer-funds-from-marketplace-to-seller-balance
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/aml-verification/v1/verification-advice
  method: get
  operationId: retrieve-marketplace-verification-advice
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
    scope:
    - client_credentials
- path: /api/aml-verification/v1/verification
  method: get
  operationId: retrieve-marketplace-verification-status
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
    scope:
    - client_credentials
- path: /api/aml-verification/v1/verification
  method: post
  operationId: create-marketplace-verification
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/aml-verification/v1/dataloading/seller
  method: post
  operationId: add-sellers-data
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/aml-verification/v1/dataloading/associates
  method: post
  operationId: add-associates-data
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/aml-verification/v1/dataloading/files
  method: post
  operationId: add-files
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/aml-verification/v1/dataloading/seller/documents
  method: post
  operationId: add-sellers-documents
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/aml-verification/v1/dataloading/associates/documents
  method: post
  operationId: add-associates-documents
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/aml-verification/v1/verification-transfers/manual
  method: post
  operationId: create-order-for-verification-transfer
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/aml-verification/v1/dataloading/payouts/bankAccountData
  method: post
  operationId: add-bank-account-for-payouts
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/aml-verification/v1/dataloading/payouts/payoneer
  method: post
  operationId: add-payoneer-account-for-payouts
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/aml-verification/v1/dataloading/payouts/worldfirst
  method: post
  operationId: add-worldfirst-account-for-payouts
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/aml-verification/v1/verification/complete
  method: post
  operationId: complete-marketplace-verification
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/aml-verification/v1/verification/cancel
  method: post
  operationId: cancel-marketplace-verification
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/front/card-installments-options
  method: post
  operationId: retrieve-card-installments
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/v2_1/reports/{reportId}
  method: get
  operationId: retrieve-statement
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v2_1/firms
  method: post
  operationId: create-a-firm
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - client_credentials
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v2_1/firms/{firmId}/urls
  method: post
  operationId: create-a-url-for-the-partners-firm
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - partner
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v2_1/firms{firmId}/shops
  method: post
  operationId: create-a-shop-for-the-partner
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - partner
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v2_1/shops/{shopId}/poses
  method: post
  operationId: create-pos-for-partner
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - partner
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v2_1/poses/{posId}
  method: get
  operationId: retrieve-partners-pos-data
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - partner
    token:
      max-ttl: 3600
    audit: none
- path: /api/v2_1/firms/{posId}/users
  method: post
  operationId: create-a-user
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - partner
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v2_1/firms/{firmPublicId}/submerchants
  method: post
  operationId: create-a-submerchant
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/v2_1/firms/{firmPublicId}/submerchants/{submerchantId}
  method: put
  operationId: update-submerchants-data
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
    scope:
    - client_credentials
- path: /api/v2_1/firms/{firmPublicId}/submerchants/{submerchantId}
  method: get
  operationId: retrieve-submerchant-data
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
    scope:
    - client_credentials