generated: '2026-07-23' method: generated source: openapi/moneris-unified-api-openapi.json description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 54 by_action_class: acting: 33 connected: 21 by_consequence: write: 22 read: 21 physical: 11 human_in_the_loop_required: 0 operations: - path: /customers method: post operationId: createCustomers x-agentic-access: action-class: acting consequence: write subject: required scope: - customer.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /customers method: get operationId: getCustomers x-agentic-access: action-class: connected consequence: read subject: optional scope: - customer.read - customer.write token: max-ttl: 3600 audit: none - path: /customers/{customer-id} method: delete operationId: deleteCustomer x-agentic-access: action-class: acting consequence: write subject: required scope: - customer.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /customers/{customer-id} method: get operationId: getCustomer x-agentic-access: action-class: connected consequence: read subject: optional scope: - customer.read - customer.write token: max-ttl: 3600 audit: none - path: /customers/{customer-id} method: put operationId: updateCustomer x-agentic-access: action-class: acting consequence: write subject: required scope: - customer.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /disputes/{case-id}/{case-record-number} method: get operationId: getDisputeByCaseIdAndRecordNumber x-agentic-access: action-class: connected consequence: read subject: optional scope: - dispute.read - dispute.write token: max-ttl: 3600 audit: none - path: /disputes/{case-id}/{case-record-number}/accept method: post operationId: acceptDispute x-agentic-access: action-class: acting consequence: write subject: required scope: - dispute.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /disputes/{case-id}/{case-record-number}/uploads method: post operationId: uploadDisputeImage x-agentic-access: action-class: acting consequence: write subject: required scope: - dispute.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /disputes/{case-id}/{case-record-number}/uploads/{upload-reference-id} method: get operationId: getDisputeUploadStatus x-agentic-access: action-class: connected consequence: read subject: optional scope: - dispute.read - dispute.write token: max-ttl: 3600 audit: none - path: /installments/plans method: post operationId: installmentLookup x-agentic-access: action-class: acting consequence: write subject: required scope: - payment.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /kount-inquiries method: post operationId: createKountInquiry x-agentic-access: action-class: acting consequence: write subject: required scope: - kount.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /kount-inquiries method: get operationId: getKountInquiries x-agentic-access: action-class: connected consequence: read subject: optional scope: - kount.read token: max-ttl: 3600 audit: none - path: /kount-inquiries/{kount-inquiry-id} method: get operationId: getKountInquiryById x-agentic-access: action-class: connected consequence: read subject: optional scope: - kount.read token: max-ttl: 3600 audit: none - path: /kount-inquiries/{kount-inquiry-id}/assert method: post operationId: kountInquiryAssert x-agentic-access: action-class: acting consequence: write subject: required scope: - kount.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /multi-currency-pricing-rates method: post operationId: mcpRate x-agentic-access: action-class: acting consequence: write subject: required scope: - payment.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /multi-currency-pricing-rates/{multi-currency-pricing-rate-lookup-id} method: get operationId: getMultiCurrencyPricingRateById x-agentic-access: action-class: connected consequence: read subject: optional scope: - payment.read - payment.write token: max-ttl: 3600 audit: none - path: /onboarding/merchants method: post operationId: createMerchant x-agentic-access: action-class: acting consequence: write subject: required scope: - onboarding.merchant.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /onboarding/merchants/{merchant-id} method: get operationId: getMerchantDetailsByMerchantId x-agentic-access: action-class: connected consequence: read subject: optional scope: - onboarding.merchant.read - onboarding.merchant.write token: max-ttl: 3600 audit: none - path: /onboarding/merchants/{merchant-id} method: put operationId: updateMerchant x-agentic-access: action-class: acting consequence: write subject: required scope: - onboarding.merchant.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /onboarding/merchants/{merchant-id}/orders method: post operationId: createOrder x-agentic-access: action-class: acting consequence: physical subject: required scope: - onboarding.order.write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /onboarding/merchants/{merchant-id}/orders/{merchant-order-id} method: get operationId: getOrderDetailsByOrderId x-agentic-access: action-class: connected consequence: read subject: optional scope: - onboarding.order.read - onboarding.order.write token: max-ttl: 3600 audit: none - path: /onboarding/merchants/{merchant-id}/orders/{merchant-order-id} method: put operationId: updateOrder x-agentic-access: action-class: acting consequence: physical subject: required scope: - onboarding.order.write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /onboarding/merchants/{merchant-id}/supplies method: get operationId: listMerchantSupplies x-agentic-access: action-class: connected consequence: read subject: optional scope: - onboarding.merchant.read - onboarding.merchant.write token: max-ttl: 3600 audit: none - path: /onboarding/product-recommendations method: post operationId: getRecommenderProducts x-agentic-access: action-class: acting consequence: write subject: required scope: - onboarding.order.read - onboarding.order.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /payment-methods method: post operationId: createPaymentMethod x-agentic-access: action-class: acting consequence: physical subject: required scope: - payment.write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /payment-methods method: get operationId: getPaymentMethods x-agentic-access: action-class: connected consequence: read subject: optional scope: - payment.read - payment.write token: max-ttl: 3600 audit: none - path: /payment-methods/{payment-method-id} method: delete operationId: deletePaymentMethod x-agentic-access: action-class: acting consequence: physical subject: required scope: - payment.write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /payment-methods/{payment-method-id} method: get operationId: getPaymentMethod x-agentic-access: action-class: connected consequence: read subject: optional scope: - payment.read - payment.write token: max-ttl: 3600 audit: none - path: /payment-methods/{payment-method-id} method: put operationId: updatePaymentMethod x-agentic-access: action-class: acting consequence: physical subject: required scope: - payment.write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /payments method: post operationId: createPayments x-agentic-access: action-class: acting consequence: physical subject: required scope: - payment.write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /payments method: get operationId: getPayments x-agentic-access: action-class: connected consequence: read subject: optional scope: - payment.read - payment.write token: max-ttl: 3600 audit: none - path: /payments/{payment-id} method: get operationId: getPayment x-agentic-access: action-class: connected consequence: read subject: optional scope: - payment.read - payment.write token: max-ttl: 3600 audit: none - path: /payments/{payment-id}/cancel method: post operationId: cancelPayment x-agentic-access: action-class: acting consequence: physical subject: required scope: - payment.write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /payments/{payment-id}/complete method: post operationId: completePayment x-agentic-access: action-class: acting consequence: physical subject: required scope: - payment.write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /payments/{payment-id}/increment method: post operationId: incrementPayment x-agentic-access: action-class: acting consequence: physical subject: required scope: - payment.write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /refunds method: post operationId: createRefund x-agentic-access: action-class: acting consequence: physical subject: required scope: - refund.write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /refunds method: get operationId: getRefunds x-agentic-access: action-class: connected consequence: read subject: optional scope: - refund.read - refund.write token: max-ttl: 3600 audit: none - path: /refunds/{refund-id} method: get operationId: getRefundById x-agentic-access: action-class: connected consequence: read subject: optional scope: - refund.read - refund.write token: max-ttl: 3600 audit: none - path: /subscriptions method: post operationId: createSubscriptions x-agentic-access: action-class: acting consequence: write subject: required scope: - payment.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /subscriptions method: get operationId: getSubscriptions x-agentic-access: action-class: connected consequence: read subject: optional scope: - payment.read - payment.write token: max-ttl: 3600 audit: none - path: /subscriptions/{subscription-id} method: get operationId: getSubscription x-agentic-access: action-class: connected consequence: read subject: optional scope: - payment.read - payment.write token: max-ttl: 3600 audit: none - path: /subscriptions/{subscription-id} method: patch operationId: updateSubscription x-agentic-access: action-class: acting consequence: write subject: required scope: - payment.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /subscriptions/{subscription-id}/cancel method: post operationId: cancelSubscription x-agentic-access: action-class: acting consequence: write subject: required scope: - payment.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /subscriptions/{subscription-id}/extend method: post operationId: extendSubscription x-agentic-access: action-class: acting consequence: write subject: required scope: - payment.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /subscriptions/{subscription-id}/pause method: post operationId: pauseSubscription x-agentic-access: action-class: acting consequence: write subject: required scope: - payment.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /subscriptions/{subscription-id}/resume method: post operationId: resumeSubscription x-agentic-access: action-class: acting consequence: write subject: required scope: - payment.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /surcharge-lookups method: post operationId: surchargeLookUp x-agentic-access: action-class: acting consequence: physical subject: required scope: - payment.write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /three-d-secure/authentications method: post operationId: createAuthentication x-agentic-access: action-class: acting consequence: write subject: required scope: - payment.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /three-d-secure/authentications/{authentication-id} method: get operationId: getAuthentication x-agentic-access: action-class: connected consequence: read subject: optional scope: - payment.read - payment.write token: max-ttl: 3600 audit: none - path: /three-d-secure/authentications/{authentication-id}/lookup method: post operationId: authenticationValueLookup x-agentic-access: action-class: acting consequence: write subject: required scope: - payment.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /three-d-secure/card-lookups method: post operationId: cardLookup x-agentic-access: action-class: acting consequence: write subject: required scope: - payment.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /validations method: post operationId: createValidation x-agentic-access: action-class: acting consequence: write subject: required scope: - payment.write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /validations method: get operationId: getValidations x-agentic-access: action-class: connected consequence: read subject: optional scope: - payment.read - payment.write token: max-ttl: 3600 audit: none - path: /validations/{validation-id} method: get operationId: getValidation x-agentic-access: action-class: connected consequence: read subject: optional scope: - payment.read - payment.write token: max-ttl: 3600 audit: none