generated: '2026-07-15' method: generated source: openapi/hosted-payment-page-api-openapi.yml, openapi/klarna-settlements-api-openapi.yml, openapi/merchant-card-service-api-openapi.yml, openapi/order-management-api-openapi.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 37 by_action_class: acting: 19 connected: 18 by_consequence: write: 4 read: 18 safety-critical: 1 physical: 14 human_in_the_loop_required: 1 operations: - path: /hpp/v1/sessions method: post operationId: createHppSession x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /hpp/v1/sessions/{session_id} method: get operationId: getSessionById x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /hpp/v1/sessions/{session_id} method: delete operationId: disableHppSession x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /hpp/v1/sessions/{session_id}/distribution method: post operationId: distributeHppSession x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /payouts/summary method: get operationId: getPayoutSummary x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /payouts/{payment_reference} method: get operationId: getPayout x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /payouts method: get operationId: getPayouts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /reports/payout-with-transactions method: get operationId: getPayoutReportWithTransactions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /reports/payout method: get operationId: payout x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /transactions method: get operationId: getTransactions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /reports/payouts-summary-with-transactions method: get operationId: getPayoutsSummaryReportWithTransactions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /reports/payouts-summary method: get operationId: payoutsSummary x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /merchantcard/v3/promises method: post operationId: createPromise x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /merchantcard/v3/promises/{promise_id} method: get operationId: readPromise x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /merchantcard/v3/settlements method: post operationId: settlePromise x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /merchantcard/v3/settlements/{settlement_id} method: get operationId: readSettlement x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /merchantcard/v3/settlements/order/{order_id} method: get operationId: readSettlementByOrderId x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /merchantcard/v3/orders/{order_id}/cancel-request method: post operationId: postcancelorder x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /merchantcard/v3/orders/{order_id}/cancel-request method: get operationId: getcancelorder x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ordermanagement/v1/orders/{order_id} method: get operationId: getOrder x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ordermanagement/v1/orders/{order_id}/acknowledge method: post operationId: acknowledgeOrder x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ordermanagement/v1/orders/{order_id}/authorization method: patch operationId: updateAuthorization x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ordermanagement/v1/orders/{order_id}/captures method: post operationId: captureOrder x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ordermanagement/v1/orders/{order_id}/captures method: get operationId: getCaptures x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ordermanagement/v1/orders/{order_id}/captures/{capture_id} method: get operationId: getCapture x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ordermanagement/v1/orders/{order_id}/captures/{capture_id}/extend-due-date method: patch operationId: extendDueDate x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ordermanagement/v1/orders/{order_id}/captures/{capture_id}/extend-due-date-options method: get operationId: getOptionsForExtendDueDate x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ordermanagement/v1/orders/{order_id}/captures/{capture_id}/shipping-info method: post operationId: appendShippingInfo x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ordermanagement/v1/orders/{order_id}/captures/{capture_id}/trigger-send-out method: post operationId: triggerSendOut x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ordermanagement/v1/orders/{order_id}/customer-details method: patch operationId: updateConsumerDetails x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ordermanagement/v1/orders/{order_id}/extend-authorization-time method: post operationId: extendAuthorizationTime x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ordermanagement/v1/orders/{order_id}/merchant-references method: patch operationId: updateMerchantReferences x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ordermanagement/v1/orders/{order_id}/refunds method: post operationId: refundOrder x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ordermanagement/v1/orders/{order_id}/refunds/{refund_id} method: get operationId: get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ordermanagement/v1/orders/{order_id}/release-remaining-authorization method: post operationId: releaseRemainingAuthorization x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ordermanagement/v1/orders/{order_id}/shipping-info method: post operationId: appendOrderShippingInfo x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ordermanagement/v1/orders/{order_id}/cancel method: post operationId: cancelOrder x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required