Woolworths Group · OpenAPI Overlay 1.0.0

API Evangelist overlay for Wpay Payment API

3 actions 3 updates security extends ../openapi/_original/woolworths-group-wpay-payment-openapi.yml

Derived by API Evangelist Built from the contracts Woolworths Group publishes. Woolworths Group did not publish this file.

View Overlay File View on GitHub Overlay Specification

What the actions change

securitySchemessecurityx-apievangelist-agent-surfaces

Targets 3

$.components

$.info

OpenAPI Overlay

overlay: 1.0.0
info:
  title: API Evangelist overlay for Wpay Payment API
  version: 1.0.0
extends: ../openapi/_original/woolworths-group-wpay-payment-openapi.yml
x-generated: '2026-10-22'
x-method: derived
x-source:
- openapi/woolworths-group-wpay-payment-openapi.yml
- openapi/_original/wpay-developerhub/
x-rationale: Every operation takes X-Authorization HMAC header parameters but no securityScheme is declared.
actions:
- target: $.components
  description: Declare the HMAC header scheme the operations already require as parameters.
  update:
    securitySchemes:
      HMACAuthorization:
        type: apiKey
        in: header
        name: X-Authorization
        description: Wpay HMAC request signing. The client sends X-Authorization (HMAC authorization metadata and signature) with X-Authorization-Timestamp and X-Authorization-Content-SHA256; responses carry X-Server-Authorization-HMAC-SHA256. See https://developerhub.wpay.com.au/cardsconnect/reference/overview-of-headers and generating-the-client-request-header-and-signature.
- target: $
  description: Apply HMAC auth globally.
  update:
    security:
    - HMACAuthorization: []
- target: $.info
  description: Point agents at the Wpay docs MCP server and llms.txt.
  update:
    x-apievangelist-agent-surfaces:
      mcp: https://integration.wpay.com.au/mcp
      mcp_scope: documentation-only
      llms_txt: https://integration.wpay.com.au/llms.txt

Work with this as data

Every overlay here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for openapi overlays

4 MCP tools reach this

find_overlaysBrowse and filter every overlay in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This overlay

curl "https://apis.io/api/v1/overlays/woolworths-group-wpay-payment-overlay"

All openapi overlays

curl "https://apis.io/api/v1/overlays?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.