Sensitive operations

Sensitive operations are mutations that typically require your user's consent before execution. Some may not, depending on context (for example, suspendAccountMembership).

All links lead to the mutation's API Reference page. The Server-to-server column indicates whether the mutation is eligible for server-to-server consent: eligible (✓) or not eligible (✗).

Accounts and onboarding

Mutation	Server-to-server
closeAccount	✗
openAccount	✓
finalizeAccountHolderOnboarding	✓
finalizeOnboarding (deprecated)	✓
updateAccountSettings	✓

Account memberships

Mutation	Server-to-server
addAccountMembership	✓
addAccountMemberships	✓
suspendAccountMembership	✓
resumeAccountMembership	✓
updateAccountMembership	✓

Cards

Adding cards

Mutation	Server-to-server
addCard	✓
addCards	✓
addCardsWithGroupDelivery	✓
addDigitalCard	✗
addDigitalCards	✗
addSingleUseVirtualCard	✓
addSingleUseVirtualCards	✓

Virtual cards

Mutation	Server-to-server
updateCard	✓
viewCardNumbers	✗

Physical cards

Mutation	Server-to-server
printPhysicalCard	✓
activatePhysicalCard	✓
resumePhysicalCard	✓
viewPhysicalCardNumbers	✗
viewPhysicalCardPin	✗

Funding

Mutation	Server-to-server
addDirectDebitFundingSource	✓
initiateFundingRequest	✓

Payments and transactions

Credit transfers

Mutation	Server-to-server
initiateCreditTransfers	✓
initiateInternationalCreditTransfer	✓
scheduleStandingOrder	✓

Direct debit payment mandates

Mutation	Server-to-server
addReceivedInternalDirectDebitB2bMandate	✓
addReceivedSepaDirectDebitB2bMandate	✓
enableReceivedDirectDebitMandate	✓
updateReceivedSepaDirectDebitB2bMandate	✓

Other

Mutation	Server-to-server
refund	✓

Trusted beneficiaries

Mutation	Server-to-server
addTrustedInternationalBeneficiary	✗
addTrustedSepaBeneficiaries	✗
addTrustedSepaBeneficiary	✗