Visa Agentic Access
Visa exposes 106 API operations that an AI agent could call, of which 92 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 14 read, 60 write, 21 physical, and 11 safety-critical.
11 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /vcms/v1/consents/{consentID}/revoke | safety-critical | required |
| POST | /vctc/customerrules/v1/consumertransactioncontrols | safety-critical | required |
| PUT | /vctc/customerrules/v1/consumertransactioncontrols | safety-critical | required |
| DELETE | /vctc/customerrules/v1/consumertransactioncontrols | safety-critical | required |
| POST | /vmss/v2/retroAlertTerminated | safety-critical | required |
| POST | /vmss/v2/searchTerminatedRequest | safety-critical | required |
| POST | /vpa/v1/accountManagement/ListPaymentControl | safety-critical | required |
| POST | /vpa/v1/accountManagement/ManagePaymentControls | safety-critical | required |
| POST | /vpa/v1/accountManagement/getPaymentControls | safety-critical | required |
| POST | /vpa/v1/supplier/DisableSupplier | safety-critical | required |
| POST | /vpa/v2/accountManagement/getPaymentControls | safety-critical | required |
| POST | /Any_Client_URL | physical | conditional |
| POST | /filedeliveryservice/v1/binFileTransfer | physical | conditional |
| POST | /pop/v1/recipes/Payment | physical | conditional |
| POST | /pop/v1/recipes/getPaymentDetails | physical | conditional |
| POST | /pop/v1/recipes/processPayment | physical | conditional |
| POST | /v1/paymentAccountLookup | physical | conditional |
| POST | /v2/paymentAccountLookup | physical | conditional |
| POST | /vba/v1/payments | physical | conditional |
| POST | /vba/v1/payments/{paymentId}/acknowledge | physical | conditional |
| POST | /vbass/v1/files/transfers | physical | conditional |
| POST | /visadirect/fundstransfer/v1/multipullfundstransactions | physical | conditional |
| POST | /visadirect/fundstransfer/v1/multipushfundstransactions | physical | conditional |
| POST | /visadirect/fundstransfer/v1/pullfundstransactions | physical | conditional |
| POST | /visadirect/fundstransfer/v1/pushfundstransactions | physical | conditional |
Source
Agentic Access
generated: '2026-07-15'
method: generated
source: openapi/b2b-virtual-account-payment-method.yml, openapi/card-on-file-data-inquiry.yml,
openapi/visa-b2b-connect.yml, openapi/visa-bin-attribute-sharing.yml, openapi/visa-business-data-solutions.yml,
openapi/visa-click-to-pay.yml, openapi/visa-consent-management-service.yml, openapi/visa-data-tokens.yml,
openapi/visa-direct.yml, openapi/visa-global-atm-locator.yml, openapi/visa-merchant-offers.yml,
openapi/visa-merchant-screening.yml, openapi/visa-merchant-search.yml, openapi/visa-supplier-matching-service.yml,
openapi/visa-transaction-controls.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 106
by_action_class:
acting: 92
connected: 14
by_consequence:
write: 60
safety-critical: 11
physical: 21
read: 14
human_in_the_loop_required: 11
operations:
- path: /vpa/v2/buyerManagement/buyerTemplate/get
method: post
operationId: Get Buyer Template V2
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/buyerManagement/buyer/get
method: post
operationId: Get Buyer Details
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/buyerManagement/buyerTemplate/create
method: post
operationId: Create Buyer Template
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/buyerManagement/buyerTemplate/update
method: patch
operationId: Update Buyer Template
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/buyerManagement/buyer/update
method: patch
operationId: Update Buyer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/buyerManagement/buyer/create
method: post
operationId: Create Buyer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v2/buyerManagement/buyer/get
method: post
operationId: Get Buyer Details v2
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/buyerManagement/buyerTemplate/get
method: post
operationId: Get Buyer Template
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/accountManagement/GetSecurityCode
method: post
operationId: Get Security Code
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/getRequisitionDetails
method: post
operationId: Get Requisition Details
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v2/accountManagement/getPaymentControls
method: post
operationId: Get Payment Controls
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /vpa/v1/accountManagement/ManagePaymentControls
method: post
operationId: Manage Payment Controls
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /vpa/v1/accountManagement/GetAccountStatus
method: post
operationId: Get Account Status
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/accountManagement/fundingAccount/get
method: post
operationId: Get Funding AccountDetails
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/requisitionService
method: post
operationId: Request Virtual Account
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/accountManagement/VirtualCardRequisition
method: post
operationId: Virtual Card Requisition
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/accountManagement/ListPaymentControl
method: post
operationId: List Payment Control
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /vpa/v1/accountManagement/fundingAccount/update
method: post
operationId: Update Funding Account
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/accountManagement/getPaymentControls
method: post
operationId: Get Payment Controls
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /vpa/v1/accountManagement/fundingAccount/create
method: post
operationId: Add Funding Account
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/supplier/DisableSupplier
method: post
operationId: Disable Supplier
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /vpa/v1/supplier/ManageSupplierAccount
method: post
operationId: ManageSupplierAccount
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v2/supplier/GetSupplierDetails
method: post
operationId: Get Supplier Details
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/supplier/GetSupplierDetails
method: post
operationId: Get Supplier Details
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/supplier/UpdateSupplier
method: post
operationId: Update Supplier
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/supplier/CreateSupplier
method: post
operationId: Create Supplier
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /pop/v1/hcs/healthCheckService
method: post
operationId: healthCheck
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /pop/v1/recipes/Payment
method: post
operationId: recipes-payments
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /pop/v1/recipes/getPaymentDetails
method: post
operationId: getPaymentDetails
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /pop/v1/register/client
method: post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /pop/v1/notification/generate
method: post
operationId: notification-generate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/proxy/UpdateProxyPool
method: post
operationId: Update Proxy Pool
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/proxy/GetProxyPool
method: post
operationId: Get Proxy Pool
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/proxy/ManageProxy
method: post
operationId: Manage Proxy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/proxy/GetAccountStatus
method: post
operationId: SUA Get Account Status
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/proxy/DeleteProxyPool
method: delete
operationId: Delete Proxy Pool
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/proxy/CreateProxyPool
method: post
operationId: Create Proxy Pool
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/payment/GetPaymentDetailURL
method: post
operationId: Get Payment Detail URL
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/payment/GetPaymentDetails
method: post
operationId: Get Payment Details
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/payment/ResendPayment
method: post
operationId: Resend Payment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /pop/v1/recipes/processPayment
method: post
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/payment/CancelPayment
method: post
operationId: Cancel Payment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpa/v1/payment/ProcessPayments
method: post
operationId: Process Payments
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /cofds/v1/dataInquiry
method: post
operationId: inquireCardOnFileData
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vba/v1/payments
method: post
operationId: initiatePayment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vba/v1/payments/{paymentId}
method: get
operationId: getPaymentStatus
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /vba/v1/payments/{paymentId}/acknowledge
method: post
operationId: acknowledgePayment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /filedeliveryservice/v1/binFilesMetadata
method: post
operationId: BinFiles metadata lookup using POST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vbass/v1/files/metadata
method: post
operationId: VBASS Files metadata lookup using POST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vbass/v1/files/transfers
method: post
operationId: VBASS File Transfer - POST
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/paymentAccountLookup
method: post
operationId: PAN TOKEN Lookup Using POST V1
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/paymentAccountLookup
method: post
operationId: PAN TOKEN Lookup Using POST V2
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/binRangeDetails
method: post
operationId: Bin Range Details Using POST V2
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/binRangeDetails
method: post
operationId: Bin Range Details Using POST V1
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /filedeliveryservice/v1/binFileTransfer
method: post
operationId: Bin File Transfer - POST
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /Any_Client_URL
method: post
operationId: sendAuthDataUsingPOST
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: cdsapi/commercial/v1/ob/starterdata
method: post
operationId: Get starter data
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /CPRAPI/v1/registeredUserDetails
method: post
operationId: RegisteredUserDetails
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vbs/dapi/v1/transactions/auth
method: post
operationId: getAuthDataUsingPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /cdsapi/commercial/v1/ob/trxndata
method: post
operationId: getTransactionDataDetail
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vbs/dapi/v1/transaction_enhanced
method: post
operationId: fetchTransactionData
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vocs/v1/register
method: put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vocs/v1/register
method: post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /CPRWeb/getUserStatus
method: get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /visasrci/v1/checkout
method: post
operationId: initiateCheckout
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /visasrci/v1/checkout/{checkoutId}
method: get
operationId: getCheckoutStatus
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /visasrci/v1/consumers
method: post
operationId: enrollConsumer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /visasrci/v1/consumers/{consumerId}/credentials
method: post
operationId: addConsumerCredential
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vcms/v1/consents/{consentID}/revoke
method: post
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /vcms/v1/consents/{consentID}/constraints/remainingNumberUses
method: put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vcms/v1/consents
method: post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vcms/v1/consents/{consentID}
method: get
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /vcms/v1/consents/{consentID}
method: patch
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vcms/v1/consents/{consentID}/validate
method: post
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vcms/v1/consents/{consentID}/status
method: put
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vdt/v1/tokens
method: post
operationId: requestDataToken
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vdt/v1/tokens/{tokenId}
method: get
operationId: getDataToken
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /visadirect/fundstransfer/v1/pushfundstransactions
method: post
operationId: pushFunds
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /visadirect/fundstransfer/v1/pullfundstransactions
method: post
operationId: pullFunds
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /visadirect/fundstransfer/v1/multipushfundstransactions
method: post
operationId: multiPushFunds
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /visadirect/fundstransfer/v1/multipullfundstransactions
method: post
operationId: multiPullFunds
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /visadirect/fundstransfer/v1/reversefundstransactions
method: post
operationId: reverseFunds
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /atmlocator/v1/findnearbytotals
method: post
operationId: findNearbyAtmTotals
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /atmlocator/v1/findnearbyatms
method: post
operationId: findNearbyAtms
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /atmlocator/v1/findgeocodes
method: post
operationId: findGeocodes
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vmorc/offers/v1/all
method: get
operationId: getAllOffers
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /vmorc/offers/v1/byofferid
method: get
operationId: getOfferById
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /vmorc/offers/v1/byfilter
method: get
operationId: getOffersByFilter
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /vmorc/referencedata/v1/categories
method: get
operationId: getCategories
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /vmorc/referencedata/v1/countries
method: get
operationId: getCountries
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /vmorc/referencedata/v1
# --- truncated at 32 KB (37 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/visa/refs/heads/main/agentic-access/visa-agentic-access.yml