Wise Agentic Access
Wise exposes 238 API operations that an AI agent could call, of which 147 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 91 read, 116 write, 25 physical, and 6 safety-critical.
6 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /twcard-data/v1/sensitive-card-data/preset-pin | safety-critical | required |
| POST | /v3/spend/applications/{clientId}/spend-controls/rules | safety-critical | required |
| POST | /v3/spend/applications/{clientId}/spend-controls/rules/apply | safety-critical | required |
| POST | /v3/spend/applications/{clientId}/spend-controls/rules/unapply | safety-critical | required |
| DELETE | /v3/spend/applications/{clientId}/spend-controls/rules/{ruleId} | safety-critical | required |
| POST | /v3/spend/profiles/{profileId}/cards/{cardToken}/reset-pin-count | safety-critical | required |
| POST | /twcard-data/v1/push-provisioning/encrypted-payload/apple-pay | physical | conditional |
| POST | /twcard-data/v1/push-provisioning/encrypted-payload/google-pay | physical | conditional |
| POST | /v1/borderless-accounts/{borderlessAccountId}/conversions | physical | conditional |
| POST | /v1/profiles/{profileId}/account-details-orders | physical | conditional |
| POST | /v1/profiles/{profileId}/account-details/payments/{paymentId}/returns | physical | conditional |
| POST | /v1/profiles/{profileId}/batch-groups/{batchGroupId}/payment-initiations | physical | conditional |
| POST | /v1/profiles/{profileId}/partner-licence-transfers | physical | conditional |
| POST | /v1/profiles/{profileId}/payin-sessions/{payinSessionId}/paynow | physical | conditional |
| POST | /v1/settlements | physical | conditional |
| POST | /v1/simulation/profiles/{profileId}/bank-transactions/import | physical | conditional |
| POST | /v1/simulation/profiles/{profileId}/swift-in | physical | conditional |
| POST | /v1/transfer-requirements | physical | conditional |
| POST | /v1/transfers | physical | conditional |
| PUT | /v1/transfers/{transferId}/cancel | physical | conditional |
| POST | /v2/profiles/{profileId}/third-party-transfers | physical | conditional |
| POST | /v3/profiles/{profileId}/batch-groups/{batchGroupId}/transfers | physical | conditional |
| POST | /v3/profiles/{profileId}/batch-payments/{batchGroupId}/payments | physical | conditional |
| POST | /v3/profiles/{profileId}/transfers/{transferId}/payments | physical | conditional |
| POST | /v3/profiles/{profileId}/verification-status/bank-transfer | physical | conditional |
Source
Agentic Access
generated: '2026-07-15'
method: generated
source: openapi/wise-platform-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 238
by_action_class:
acting: 147
connected: 91
by_consequence:
write: 116
read: 91
physical: 25
safety-critical: 6
human_in_the_loop_required: 6
operations:
- path: /v3/spend/profiles/{profileId}/3dsecure/challenge-result
method: post
operationId: 3dsChallengeResultPost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/profiles/{profileId}/activities
method: get
operationId: activityList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/profiles/{profileId}/additional-verification/upload-evidences
method: post
operationId: verificationUploadEvidencesV3
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v5/profiles/{profileId}/additional-verification/upload-evidences
method: post
operationId: verificationUploadEvidences
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/profiles/{profileId}/verification-status/upload-document
method: post
operationId: verificationUploadDocument
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/profiles/{profileId}/verification-status/required-evidences
method: get
operationId: verificationGetRequiredEvidences
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/addresses
method: post
operationId: addressCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/addresses
method: get
operationId: addressList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/addresses/{addressId}
method: get
operationId: addressGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/address-requirements
method: get
operationId: addressRequirementsGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/address-requirements
method: post
operationId: addressRequirementsPost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v4/profiles/{profileId}/balances
method: post
operationId: balanceCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v4/profiles/{profileId}/balances
method: get
operationId: balanceList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v4/profiles/{profileId}/balances/{balanceId}
method: get
operationId: balanceGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v4/profiles/{profileId}/balances/{balanceId}
method: delete
operationId: balanceDelete
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/profiles/{profileId}/balance-movements
method: post
operationId: balanceMovement
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/profiles/{profileId}/balance-capacity
method: get
operationId: balanceCapacity
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/profiles/{profileId}/excess-money-account
method: post
operationId: excessMoneyAccount
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/profiles/{profileId}/total-funds/{currency}
method: get
operationId: totalFunds
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/borderless-accounts
method: get
operationId: balanceGetV1
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/borderless-accounts/{borderlessAccountId}/conversions
method: post
operationId: balanceConvertV1
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/profiles/{profileId}/balances/hold-limit-breach
method: post
operationId: holdLimitBreachList
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/profiles/{profileId}/balances/hold-limit-breach/{holdLimitBreachId}
method: post
operationId: holdLimitBreachClose
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/profiles/{profileId}/balance-statements/{balanceId}/statement.json
method: get
operationId: balanceStatementGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/profiles/{profileId}/account-details-orders
method: post
operationId: bankAccountDetailsOrderCreate
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/profiles/{profileId}/account-details-orders
method: get
operationId: bankAccountDetailsOrdersListV1
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/profiles/{profileId}/bank-details
method: post
operationId: bankAccountDetailsBankDetailsCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/profiles/{profileId}/account-details
method: get
operationId: bankAccountDetailsGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/profiles/{profileId}/account-details-orders
method: get
operationId: bankAccountDetailsOrdersList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/profiles/{profileId}/account-details/payments/{paymentId}/returns
method: post
operationId: bankAccountDetailsReturnsCreate
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/profiles/{profileId}/batch-groups
method: post
operationId: batchGroupCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/profiles/{profileId}/batch-groups/{batchGroupId}
method: get
operationId: batchGroupGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/profiles/{profileId}/batch-groups/{batchGroupId}
method: patch
operationId: batchGroupUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/profiles/{profileId}/batch-groups/{batchGroupId}/transfers
method: post
operationId: batchGroupTransferCreate
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/profiles/{profileId}/batch-payments/{batchGroupId}/payments
method: post
operationId: batchGroupFund
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/profiles/{profileId}/batch-groups/{batchGroupId}/payment-initiations
method: post
operationId: batchGroupPaymentInitiationCreate
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/profiles/{profileId}/batch-groups/{batchGroupId}/payment-initiations/{paymentInitiationId}
method: get
operationId: batchGroupPaymentInitiationGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/settlements
method: post
operationId: bulkSettlementJournalCreate
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/spend/profiles/{profileId}/cards
method: get
operationId: cardList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/spend/profiles/{profileId}/cards/{cardToken}
method: get
operationId: cardGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/spend/profiles/{profileId}/cards/{cardToken}/status
method: put
operationId: cardStatusUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/spend/profiles/{profileId}/cards/{cardToken}/reset-pin-count
method: post
operationId: cardPinCountReset
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v3/spend/profiles/{profileId}/cards/{cardToken}/spending-permissions
method: get
operationId: cardPermissionsGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/spend/profiles/{profileId}/cards/{cardToken}/spending-permissions
method: patch
operationId: cardPermissionsUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v4/spend/profiles/{profileId}/cards/{cardToken}/spending-permissions
method: patch
operationId: cardPermissionsBulkUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /twcard-data/v1/clientSideEncryption/fetchEncryptingKey
method: get
operationId: cardEncryptionKeyGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /twcard-data/v1/sensitive-card-data/details
method: post
operationId: cardSensitiveDetailsGet
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /twcard-data/v1/sensitive-card-data/pin
method: post
operationId: cardPinGet
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/spend/profiles/{profileId}/cards/{cardToken}/phone-number
method: put
operationId: cardPhoneNumberUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/spend/profiles/{profileId}/cards/{cardToken}/production
method: put
operationId: cardKioskCollectionProduce
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/spend/profiles/{profileId}/cards/{cardToken}/production
method: get
operationId: cardKioskCollectionProductionGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/spend/profiles/{profileId}/card-orders
method: post
operationId: cardOrderCreate
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/spend/profiles/{profileId}/card-orders
method: get
operationId: cardOrderList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/spend/profiles/{profileId}/card-orders/{cardOrderId}
method: get
operationId: cardOrderGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/spend/profiles/{profileId}/card-orders/availability
method: get
operationId: cardOrderProgramsGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/spend/profiles/{profileId}/card-orders/{cardOrderId}/requirements
method: get
operationId: cardOrderRequirementsGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/spend/profiles/{profileId}/card-orders/{cardOrderId}/status
method: put
operationId: cardOrderStatusUpdate
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/spend/address/validate
method: post
operationId: cardOrderValidateAddress
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /twcard-data/v1/sensitive-card-data/preset-pin
method: post
operationId: cardOrderPresetPin
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v3/spend/profiles/{profileId}/cards/transactions/{transactionId}
method: get
operationId: cardTransactionGetV3
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v4/spend/profiles/{profileId}/cards/transactions/{transactionId}
method: get
operationId: cardTransactionGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v4/spend/profiles/{profileId}/cards/{cardToken}/transactions
method: get
operationId: cardTransactionList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/user/claim-account
method: post
operationId: claimAccountCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/comparisons
method: get
operationId: comparisonGetV3
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v4/comparisons
method: get
operationId: comparisonGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/profiles/{profileId}/contacts
method: post
operationId: contactCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/currencies
method: get
operationId: currenciesGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/delivery-estimates/{transferId}
method: get
operationId: deliveryEstimateGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/profiles/{profileId}/direct-debit-accounts
method: post
operationId: directDebitAccountCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/profiles/{profileId}/direct-debit-accounts
method: get
operationId: directDebitAccountGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/spend/profiles/{profileId}/dispute-form/flows/step/{scheme}/{reason}
method: post
operationId: disputeDynamicFlowStep
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/spend/profiles/{profileId}/dispute-form/reasons
method: get
operationId: disputeReasonsGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/spend/profiles/{profileId}/dispute-form/flows/{scheme}/{reason}
method: post
operationId: disputeSubmit
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v4/spend/profiles/{profileId}/dispute-form/file
method: post
operationId: disputeFileUpload
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/spend/profiles/{profileId}/disputes
method: get
operationId: disputeList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/spend/profiles/{profileId}/disputes/{disputeId}
method: get
operationId: disputeGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v3/spend/profiles/{profileId}/disputes/{disputeId}/status
method: put
operationId: disputeWithdraw
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v3/spend/profiles/{profileId}/dispute-form/file
method: post
operationId: disputeFileUploadV3
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/facetec/public-key
method: get
operationId: facetecPublicKeyGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/auth/jose/response/public-keys
method: get
operationId: joseResponsePublicKeysGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/auth/jose/request/public-keys
method: post
operationId: joseRequestPublicKeysCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/auth/jose/playground/jws
method: post
operationId: josePlaygroundJws
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/auth/jose/playground/jwe
method: get
operationId: josePlaygroundJweGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/auth/jose/playground/jwe
method: post
operationId: josePlaygroundJwePost
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/auth/jose/playground/jwe-direct-encryption
method: post
operationId: josePlaygroundJweDirectEncryption
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/auth/jose/playground/jwsjwe
method: post
operationId: josePlaygroundJwsJwe
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/profiles/{profileId}/kyc-reviews
method: post
operationId: kycReviewCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/profiles/{profileId}/kyc-reviews
method: get
operationId: kycReviewList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/profiles/{profileId}/kyc-reviews/{kycReviewId}
method: get
operationId: kycReviewGetV1
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/profiles/{profileId}/kyc-reviews/{kycReviewId}
method: patch
operationId: kycReviewRedirectUrlUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/profiles/{profileId}/kyc-reviews/{kycReviewId}
method: get
operationId: kycReviewGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/profiles/{profileId}/kyc-requirements/{requirementKey}
method: post
operationId: kycReviewRequirementSubmit
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v2/borderless-accounts-configuration/profiles/{profileId}/available-currencies
method: get
operationId: mcaAvailableCurrenciesGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/borderless-accounts-configuration/profiles/{profileId}/payin-currencies
method: get
operationId: mcaPayinCurrenciesGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v4/profiles/{profileId}/multi-currency-account
method: get
operationId: mcaGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v4/multi-currency-account/eligibility
method: get
operationId: mcaEligibilityGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /oauth/token
method: post
operationId: oauthTokenCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/one-time-token/status
method: get
operationId: ottStatusGet
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/one-time-token/pin/verify
method: post
operationId: ottPinVerify
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/one-time-token/partner-device-fingerprint/verify
method: post
operationId: ottDeviceFingerprintVerify
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/one-time-token/facemap/verify
method: post
operationId: ottFacemapVerify
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/application/users/{userId}/phone-numbers
method: get
operationId: userSecurityPhoneNumberList
x-agentic-access:
action-class: connected
consequence: read
sub
# --- truncated at 32 KB (76 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/wise/refs/heads/main/agentic-access/wise-agentic-access.yml