generated: '2026-10-14' method: generated source: openapi/lemonway-account-onboarding-management-api-openapi.yml, openapi/lemonway-directkit-api-2-0-openapi.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 87 by_action_class: connected: 28 acting: 59 by_consequence: read: 28 safety-critical: 15 write: 19 physical: 25 human_in_the_loop_required: 15 operations: - path: /accounts method: get operationId: AccountsController_get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /accounts/individual method: post operationId: AccountsController_createIndividual x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /accounts/individual/{id}/profiles method: post operationId: AccountsController_createIndividualProfile x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /accounts/individual/{id}/profiles/{profileId}/wallets method: post operationId: AccountsController_createIndividualWallet x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /accounts/legal-entity method: post operationId: AccountsController_createLegalEntity x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /accounts/legal-entity/{id}/profiles method: post operationId: AccountsController_createLegalEntityProfile x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /accounts/legal-entity/{id}/profiles/{profileId}/wallets method: post operationId: AccountsController_createLegalEntityWallet x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /accounts/{accountId}/documents/{fileName} method: get operationId: AccountsController_getFile x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /accounts/{id} method: get operationId: AccountsController_find x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /legal-entity-onboarding/{onboardingId}/document method: post operationId: LegalEntityOnboardingsController_uploadOnboardingDocument x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /onboarding/{onboardingId}/document method: post operationId: IndividualOnboardingsController_uploadOnboardingDocument x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /onboardings/association method: post operationId: OnboardingsController_createAssociationOnboarding x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /onboardings/company method: post operationId: OnboardingsController_createCompanyOnboarding x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /onboardings/individual method: post operationId: OnboardingsController_createOnboarding x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /onboardings/sole-trader method: post operationId: OnboardingsController_createSoleTraderOnboarding x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /onboardings/{onboardingId}/resume method: get operationId: OnboardingsController_createUrl x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/accounts/balances method: get operationId: Accounts_BalancesGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/accounts/individual method: post operationId: Accounts_IndividualPost x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/accounts/individual/{accountid} method: put operationId: Accounts_IndividualPut x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/accounts/kycstatus method: get operationId: Accounts_KycStatusGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/accounts/kycstatus/{accountid} method: put operationId: Accounts_KycstatusPut x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/accounts/legal method: post operationId: Accounts_LegalPost x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/accounts/legal/{accountid} method: put operationId: Accounts_LegalSinglePut x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/accounts/retrieve method: post operationId: Accounts_RetrievePost x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/accounts/{accountId}/balances/history method: get operationId: Accounts_BalancesHistoryGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/accounts/{accountId}/transactions method: get operationId: Accounts_TransactionsGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/accounts/{accountId}/ultimateBeneficialOwner method: post operationId: Accounts_AddUltimateBeneficialOwner x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/accounts/{accountId}/ultimateBeneficialOwner/{UltimateBeneficialOwnerId} method: put operationId: Accounts_UpdateUltimateBeneficialOwner x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/accounts/{accountId}ultimateBeneficialOwner method: get operationId: Accounts_GetUltimateBeneficialOwner x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/accounts/{accountid} method: get operationId: Accounts_AccountSingleGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/accounts/{accountid}/blocked method: put operationId: Accounts_BlockedPut x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/accounts/{accountid}/documents method: get operationId: Accounts_DocumentGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/accounts/{accountid}/documents/upload method: post operationId: Accounts_DocumentsUploadPost x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/accounts/{accountid}/documents/{documentid}/signinit method: post operationId: Accounts_DocumentsSignInitPost x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/accounts/{accountid}/enrolment/init method: post operationId: Accounts_EnrolmentInit x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/disputes method: get operationId: Disputes_DisputesGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/moneyins method: get operationId: MoneyIns_MoneyInGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/moneyins/apm/init method: post operationId: MoneyIns_MoneyInApmInitAsync x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/bankwire method: get operationId: MoneyIns_BankwireGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/moneyins/bankwire/iban/count method: get operationId: MoneyIns_BankwireIbanCountGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/moneyins/bankwire/iban/create method: post operationId: MoneyIns_BankwireIbanCreatePost x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/bankwire/iban/{ibanid}/disable method: post operationId: MoneyIns_BankwireIbanDisablePost x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v2/moneyins/buynowpaylater/init method: post operationId: MoneyIns_CreateBnplPayment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/buynowpaylater/plans method: get operationId: MoneyIns_GetBnplPaymentPlans x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/moneyins/card/create method: post operationId: MoneyIns_CardCreatePost x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/card/direct/{transactionid}/3dconfirm method: put operationId: MoneyIns_CardDirect3DConfirmPut x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/card/paymentform method: post operationId: MoneyIns_CardPaymentFormPost x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/card/webinit method: post operationId: MoneyIns_CardWebInitPost x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/card/{cardId} method: get operationId: MoneyIns_CardGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/moneyins/card/{cardid}/rebill method: post operationId: MoneyIns_CardRebill x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/card/{cardid}/subscription method: post operationId: MoneyIns_CardSubscriptionPost x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/card/{cardid}/unregister method: put operationId: MoneyIns_CardUnregisterPut x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/cheque method: get operationId: MoneyIns_ChequeGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/moneyins/cheque/init method: post operationId: MoneyIns_ChequeInitPost x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/mbway/init method: post operationId: MoneyIns_MbwayInitPost x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/mobilePay/init method: post operationId: MoneyIns_MobilePayInitPost x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/multibanco/init method: post operationId: MoneyIns_MultibancoInitPost x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/paybybank/transfer/banks method: get operationId: MoneyIns_GetMoneyInBanks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/moneyins/paybybank/transfer/init method: post operationId: MoneyIns_MoneyInTransferInit x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/paymentform/{formid}/completed method: get operationId: MoneyIns_PaymentFormCompletedGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/moneyins/paymentform/{formid}/disable method: put operationId: MoneyIns_PaymentFormDisablePut x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v2/moneyins/paypal/init method: post operationId: MoneyIns_MoneyInPayPalInit x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/paypal/{transactionId}/resume method: post operationId: MoneyIns_PayPalTransactionResume x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/payshop/init method: post operationId: MoneyIns_PayshopInitPost x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/paytrail/init method: post operationId: MoneyIns_PayTrailInitPost x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/sdd method: get operationId: MoneyIns_SddGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/moneyins/sdd/init method: post operationId: MoneyIns_SddInitPost x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/sdd/mandate method: post operationId: MoneyIns_SddMandatePost x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/sdd/mandate/{mandatid}/unregister method: put operationId: MoneyIns_SddMandateUnregisterPut x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/sofort/init method: post operationId: MoneyIns_SofortInitPost x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/trustly/init method: post operationId: MoneyIns_TrustlyInitPost x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/{accountid}/card method: get operationId: MoneyIns_AccountCardGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/moneyins/{accountid}/mandate method: get operationId: MoneyIns_MandateGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/moneyins/{accountid}/mandate/{mandateid}/document method: get operationId: MoneyIns_MandateGetDocument x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/moneyins/{transactionid}/cancel method: put operationId: MoneyIns_CancelPut x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyins/{transactionid}/validate method: put operationId: MoneyIns_ValidatePut x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyouts method: post operationId: MoneyOuts_MoneyOutPostAsync x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyouts method: get operationId: MoneyOuts_MoneyOutGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/moneyouts/iban method: post operationId: MoneyOuts_IbanPost x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyouts/iban/extended method: post operationId: MoneyOuts_IbanExtendedPost x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/moneyouts/iban/{IbanId}/unregister method: put operationId: MoneyOuts_IbanUnregisterPut x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v2/moneyouts/{accountid}/iban method: get operationId: MoneyOuts_IbanGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/moneyouts/{transactionid}/cancel method: put operationId: MoneyOuts_CancelPut x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/p2p method: post operationId: P2Ps_P2pPost x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/p2p method: get operationId: P2Ps_P2pGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v2/refund/{transactionid} method: put operationId: Refunds_RefundPut x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2/refundcreate/{transactionId} method: put operationId: Refunds_RefundCreatePut x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required