Woolworths Group · OpenAPI Overlay 1.0.0

API Evangelist overlay for Wpay Cards Connect

4 actions 4 updates documentation extends ../openapi/_original/woolworths-group-wpay-cards-connect-openapi.yml

Derived by API Evangelist Built from the contracts Woolworths Group publishes. Woolworths Group did not publish this file.

View Overlay File View on GitHub Overlay Specification

What the actions change

securitySchemessecurityoperationIdx-apievangelist-agent-surfaces

Targets 4

$.components

$.paths['/api/v1/keys/credential/rotate-to/{keyId}'].put

$.info

OpenAPI Overlay

overlay: 1.0.0
info:
  title: API Evangelist overlay for Wpay Cards Connect
  version: 1.0.0
extends: ../openapi/_original/woolworths-group-wpay-cards-connect-openapi.yml
x-generated: '2026-10-22'
x-method: derived
x-source:
- openapi/woolworths-group-wpay-cards-connect-openapi.yml
- openapi/_original/wpay-developerhub/
x-rationale: Spec defines no securityScheme although the docs require HMAC signed headers; one operation lacks an operationId.
actions:
- target: $.components
  description: Add the documented HMAC header scheme.
  update:
    securitySchemes:
      HMACAuthorization:
        type: apiKey
        in: header
        name: X-Authorization
        description: Wpay HMAC request signing. The client sends X-Authorization (HMAC authorization metadata and signature) with X-Authorization-Timestamp and X-Authorization-Content-SHA256; responses carry X-Server-Authorization-HMAC-SHA256. See https://developerhub.wpay.com.au/cardsconnect/reference/overview-of-headers and generating-the-client-request-header-and-signature.
- target: $
  description: Apply HMAC auth globally.
  update:
    security:
    - HMACAuthorization: []
- target: $.paths['/api/v1/keys/credential/rotate-to/{keyId}'].put
  description: Add a missing operationId (derived from summary "Rotate the current credential").
  update:
    operationId: RotateCredentialAsync
- target: $.info
  description: Point agents at the Wpay docs MCP server and llms.txt.
  update:
    x-apievangelist-agent-surfaces:
      mcp: https://integration.wpay.com.au/mcp
      mcp_scope: documentation-only
      llms_txt: https://integration.wpay.com.au/llms.txt

Work with this as data

Every overlay here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for openapi overlays

4 MCP tools reach this

find_overlaysBrowse and filter every overlay in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This overlay

curl "https://apis.io/api/v1/overlays/woolworths-group-wpay-cards-connect-overlay"

All openapi overlays

curl "https://apis.io/api/v1/overlays?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.