generated: '2026-07-15' method: generated source: openapi/bunq-openapi.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 28 by_action_class: acting: 11 connected: 17 by_consequence: write: 9 read: 17 physical: 2 human_in_the_loop_required: 0 operations: - path: /installation method: post operationId: createInstallation x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /device-server method: post operationId: createDeviceServer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /session-server method: post operationId: createSessionServer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /user method: get operationId: listUsers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID} method: get operationId: getUser x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID}/monetary-account method: get operationId: listMonetaryAccounts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID}/monetary-account/{monetaryAccountID} method: get operationId: getMonetaryAccount x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID}/monetary-account-bank method: get operationId: listMonetaryAccountBank x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID}/monetary-account-bank method: post operationId: createMonetaryAccountBank x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /user/{userID}/monetary-account/{monetaryAccountID}/payment method: get operationId: listPayments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID}/monetary-account/{monetaryAccountID}/payment method: post operationId: createPayment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /user/{userID}/monetary-account/{monetaryAccountID}/payment/{paymentID} method: get operationId: getPayment x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID}/monetary-account/{monetaryAccountID}/draft-payment method: get operationId: listDraftPayments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID}/monetary-account/{monetaryAccountID}/draft-payment method: post operationId: createDraftPayment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /user/{userID}/monetary-account/{monetaryAccountID}/request-inquiry method: get operationId: listRequestInquiries x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID}/monetary-account/{monetaryAccountID}/request-inquiry method: post operationId: createRequestInquiry x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /user/{userID}/monetary-account/{monetaryAccountID}/request-response method: get operationId: listRequestResponses x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID}/card method: get operationId: listCards x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID}/card/{cardID} method: get operationId: getCard x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID}/attachment-public method: post operationId: createAttachmentPublic x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /attachment-public/{attachmentPublicUUID}/content method: get operationId: getAttachmentPublicContent x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID}/monetary-account/{monetaryAccountID}/customer-statement method: get operationId: listCustomerStatements x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID}/monetary-account/{monetaryAccountID}/customer-statement method: post operationId: createCustomerStatement x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /user/{userID}/monetary-account/{monetaryAccountID}/customer-statement/{customerStatementID}/content method: get operationId: getCustomerStatementContent x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID}/notification-filter-url method: get operationId: listNotificationFilterUrl x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID}/notification-filter-url method: post operationId: createNotificationFilterUrl x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /user/{userID}/notification-filter-push method: get operationId: listNotificationFilterPush x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{userID}/notification-filter-push method: post operationId: createNotificationFilterPush x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required