VoPay Agentic Access
VoPay exposes 404 API operations that an AI agent could call, of which 258 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 146 read, 185 write, and 73 physical.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /account/auto-balance-transfer | physical | conditional |
| POST | /account/auto-balance-transfer/cancel | physical | conditional |
| POST | /account/client-accounts/auto-balance-transfer | physical | conditional |
| POST | /account/client-accounts/auto-balance-transfer/cancel | physical | conditional |
| POST | /account/client-accounts/fund-transfer | physical | conditional |
| POST | /account/client-accounts/fund-transfer-withdraw | physical | conditional |
| POST | /account/client-accounts/fund-transfer-withdraw/schedule | physical | conditional |
| POST | /account/client-accounts/fund-transfer/schedule | physical | conditional |
| POST | /account/client-accounts/transfer | physical | conditional |
| POST | /account/client-accounts/transfer-withdraw | physical | conditional |
| POST | /account/client-accounts/transfer-withdraw/schedule | physical | conditional |
| POST | /account/client-accounts/transfer/schedule/cancel | physical | conditional |
| POST | /account/client-accounts/wallets/transfer | physical | conditional |
| POST | /account/set-default-payment-method | physical | conditional |
| POST | /account/subaccount/send-onboarding-application | physical | conditional |
| POST | /account/transactions/refund | physical | conditional |
| POST | /account/transfer-from | physical | conditional |
| POST | /account/transfer-to | physical | conditional |
| POST | /account/webhook/resend | physical | conditional |
| POST | /account/withdraw-my-account | physical | conditional |
| POST | /account/withdraw-my-account/schedule | physical | conditional |
| POST | /ach/withdraw | physical | conditional |
| POST | /ach/withdraw/schedule | physical | conditional |
| POST | /apple-pay/charge | physical | conditional |
| POST | /batch/ach/withdraw | physical | conditional |
Source
Agentic Access
generated: '2026-07-24'
method: generated
source: openapi/vopay-account-api-reference.json, openapi/vopay-account-onboarding.json, openapi/vopay-bill-pay-references.json,
openapi/vopay-blocked-accounts-api-reference.json, openapi/vopay-branding-api-reference.json,
openapi/vopay-client-accounts.json, openapi/vopay-contact.json, openapi/vopay-convenience-fee-api-reference.json,
openapi/vopay-dispute-management-api-reference.json, openapi/vopay-elinx.json, openapi/vopay-file-conversion-api-reference.json,
openapi/vopay-global-cash-management.json, openapi/vopay-integrations-and-support.json, openapi/vopay-iq11.json,
openapi/vopay-payment-api-reference.json, openapi/vopay-payment-method-api-reference.json,
openapi/vopay-payment-rails-api-reference.json, openapi/vopay-ping.json, openapi/vopay-remittance-api-reference.json,
openapi/vopay-scheduled-payments-api-reference.json, openapi/vopay-transaction-management.json,
openapi/vopay-verification.json, openapi/vopay-virtual-account-api-reference.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 404
by_action_class:
acting: 258
connected: 146
by_consequence:
write: 185
read: 146
physical: 73
human_in_the_loop_required: 0
operations:
- path: /partner/account
method: post
operationId: AccountPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /partner/account
method: get
operationId: AccountGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /partner/account/business-case
method: post
operationId: AccountBusinessCasePOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /partner/account/set-permissions
method: post
operationId: AccountSetPermissionsPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /partner/billing-packages
method: get
operationId: PartnerBillingPackagesGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /partner/invoice-details
method: get
operationId: PartnerInvoiceDetailsGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /partner/account/transactions
method: get
operationId: PartnerAccountTransactionsURLGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /partner/account/transfer
method: post
operationId: PartnerAccountTransferPost
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /partner/account/fund-transfer
method: post
operationId: PartnerAccountFundTransferPost
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /partner/account/transfer-withdraw
method: post
operationId: PartnerAccountTransferWithdrawPost
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /partner/account/fund-transfer-withdraw
method: post
operationId: PartnerAccountFundTransferWithdrawPost
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /partner/account/onboarding-url
method: get
operationId: PartnerAccountOnboardingURLGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/balance
method: get
operationId: AccountBalanceGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/balances
method: get
operationId: AccountBalancesGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/fund-my-account
method: post
operationId: AccountFundMyAccountPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/fund-my-account/schedule
method: post
operationId: AccountFundMyAccountSchedulePOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/withdraw-my-account
method: post
operationId: AccountWithdrawMyAccountPOST
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/withdraw-my-account/schedule
method: post
operationId: AccountWithdrawMyAccountSchedulePOST
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/transactions
method: get
operationId: AccountTransactionsGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/transactions/codes
method: get
operationId: AccountTransactionsCodesGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/transactions/gl-codes
method: get
operationId: AccountTransactionsGLCodesGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/remaining-limit
method: get
operationId: AccountRemainingLimitGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/transfer-to
method: post
operationId: AccountTransferToPost
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/transfer-from
method: post
operationId: AccountTransferFromPost
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/auto-balance-transfer
method: post
operationId: AccountAutoBalanceTransferPOST
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/auto-balance-transfer
method: get
operationId: AccountAutoBalanceTransferGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/transactions/recent
method: get
operationId: AccountTransactionsRecentGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/auto-balance-transfer-list
method: get
operationId: AccountAutoBalanceTransferListGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/auto-balance-transfer/cancel
method: post
operationId: AccountAutoBalanceTransferCancelPOST
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/auto-balance-transfer/report
method: get
operationId: AccountAutoBalanceTransferReportGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/authorized-ips
method: post
operationId: AccountAuthorizedIPsPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/authorized-ips
method: get
operationId: AccountAuthorizedIPsGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/set-default-payment-method
method: post
operationId: AccountSetDefaultPaymentMethodPOST
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/transaction/history
method: post
operationId: AccountTransactionHistoryPost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/subaccount
method: get
operationId: SubaccountGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/subaccount
method: post
operationId: SubaccountPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/subaccount/edit
method: post
operationId: SubaccountEditPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/subaccount/transactions
method: get
operationId: SubaccountTransactionGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/subaccount/set-permissions
method: post
operationId: SubaccountSetPermissionsPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/subaccount/send-onboarding-application
method: post
operationId: SubaccountSendOnboardingApplicationPOST
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /partner/create-partner
method: post
operationId: PartnerCreatePartnerPost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /partner/account/edit
method: post
operationId: PartnerAccountEditPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /partner/account/deactivate
method: post
operationId: PartnerAccountDeactivatePOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/subaccount/deactivate
method: post
operationId: SubaccountDeactivatePOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/submit-extended-info/shareholder-info
method: get
operationId: AccountShareHolderInfoGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/submit-extended-info/shareholder-info/add
method: post
operationId: AccountShareHolderPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/submit-extended-info/shareholder-info/edit
method: post
operationId: AccountShareHolderEditPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/submit-extended-info/signing-authority-info
method: get
operationId: AccountSigningAuthorityInfoGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/submit-extended-info/signing-authority-info/add
method: post
operationId: AccountSigningAuthorityAddPost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/submit-extended-info/signing-authority-info/edit
method: post
operationId: AccountSigningAuthorityEditPost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/business-types
method: get
operationId: AccountBusinessTypesGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /document
method: post
operationId: DocumentPost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /document/[:DocumentID]
method: get
operationId: DocumentURLGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /bill-pay/create
method: post
operationId: BillPayCreatePost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /bill-pay/cancel
method: post
operationId: BillPayCancelPost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /bill-pay/transaction
method: get
operationId: BillPayTransactionGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /bill-pay/merchants
method: get
operationId: BillPayMerchantsGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /bill-pay/account/merchants/add
method: post
operationId: BillPayAccountMerchantsAddPost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /bill-pay/account/merchants/edit
method: post
operationId: BillPayAccountMerchantsEditPost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /bill-pay/account/merchants
method: get
operationId: BillPayAccountMerchantsGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /bill-pay/generate-embed-url
method: post
operationId: BillPayGenerateEmbedUrlPost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/blocked-account/block
method: post
operationId: BlockedAccountBlockPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/blocked-account/unblock
method: post
operationId: BlockedAccountUnblockPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/blocked-account/set-autounblock-threshold
method: post
operationId: BlockedAccountSetAutoUnblockThresholdPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/branding
method: post
operationId: BrandingPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/branding-details
method: get
operationId: BrandingDetailsGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/branding/delete
method: post
operationId: BrandingDeletePost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /partner/branding
method: post
operationId: PartnerBrandingPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /partner/branding-details
method: get
operationId: PartnerBrandingDetailsGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /partner/branding/delete
method: post
operationId: PartnerBrandingDeletePost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/individual
method: post
operationId: ClientAccountIndividualPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/business
method: post
operationId: ClientAccountBusinessPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/receive-only
method: post
operationId: ClientAccountReceiveOnlyPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/standard
method: post
operationId: ClientAccountStandardPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts
method: get
operationId: ClientAccountGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/client-accounts/balance
method: get
operationId: ClientAccountBalanceGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/client-accounts/label
method: get
operationId: ClientAccountLabelGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/client-accounts/label/add
method: post
operationId: ClientAccountLabelAddPost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/label/delete
method: post
operationId: ClientAccountLabelDeletePost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/edit
method: post
operationId: ClientAccountEditPost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/delete
method: post
operationId: ClientAccountDeletePOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/deactivate
method: post
operationId: ClientAccountDeactivatePOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/activate
method: post
operationId: ClientAccountActivatePOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/generate-embed-url
method: post
operationId: ClientAccountGenerateEmbedURLPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/payment-methods
method: get
operationId: ClientAccountPaymentMethodsGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/client-accounts/notes/add
method: post
operationId: ClientAccountNotesAddPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/notes/edit
method: post
operationId: ClientAccountNotesEditPOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/notes/delete
method: post
operationId: ClientAccountNotesDeletePOST
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/notes
method: get
operationId: ClientAccountNotesGET
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/client-accounts/transfer
method: post
operationId: ClientAccountTransferPOST
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/fund-transfer
method: post
operationId: ClientAccountFundTransferPOST
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/transfer-withdraw
method: post
operationId: ClientAccountTransferWithdrawPOST
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/fund-transfer-withdraw
method: post
operationId: ClientAccountFundTransferWithdrawPOST
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/transactions
method: get
operationId: AccountClientAccountTransactionsGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /account/client-accounts/fund-transfer/schedule
method: post
operationId: ClientAccountFundTransferSchedulePOST
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /account/client-accounts/transfer-withdraw/schedule
method: post
operationId: ClientAccountTransferWithdrawSchedulePOST
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
hum
# --- truncated at 32 KB (126 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/vopay/refs/heads/main/agentic-access/vopay-agentic-access.yml