Scopes

When you connect Moneda to your AI client, you’ll be asked to approve specific permissions. These control what your AI can see and do with your account.

Not every scope can go on an API key. The scopes below are the full OAuth set, granted when you connect an assistant. API keys carry a narrower set — creating a key with one of the following is rejected:read:api_keys · write:api_keys · read:sessions · write:sessions · read:agent_sessions · write:agent_sessions · write:payments · write:trades · write:sub_accounts · write:receipts · write:usage_creditsPayments are excluded from API keys by design: a payment always needs your approval in the Moneda app. The rest are session- and credential-management scopes, which stay with an interactive connection rather than a long-lived key.

What read permissions are available?

These permissions let your AI view your data.

Scope	Label	Description
`read:account`	Account Information	View your account details and profile
`read:balances`	Account Balances	View your account and earnings balances
`read:transactions`	Transaction History	View your transaction history and details
`read:rates`	Exchange Rates	View real-time exchange rates
`read:points`	Points & Rewards	View your points balance and rewards activity
`read:referrals`	Referral Program	View your referral code and referred friends
`read:virtual_accounts`	Virtual Accounts	View your virtual bank account details
`read:contacts`	Contacts	View your saved contacts and counterparties
`read:settings`	App Settings	View your app preferences and notification settings
`read:recovery`	Account Recovery	View your recovery contacts, recovery emails, and guardian relationships
`read:passkeys`	Passkeys	View your passkeys and authentication devices
`read:external_accounts`	External Accounts	View your saved wallets and bank accounts
`read:knowledge`	Knowledge Base	Search FAQ and help articles about Moneda
`read:earnings`	Earnings & APY	View APY rates for earnings products
`read:spending`	Spending Analytics	View spending summaries and category breakdowns
`read:users`	User Search	Search for Moneda users by username, display name, email, or phone
`read:payments`	Payment Status	View payment request status and history
`read:sub_accounts`	Sub-accounts (Vaults)	View your sub-accounts (vaults), their balances, and aggregate wealth
`read:notifications`	Notifications	View your in-app notifications inbox
`read:receipts`	Receipts & Invoices	View receipts attached to transactions, line items, and Bewirtungsbeleg/Eigenbeleg overlays
`read:subscriptions`	Subscription Billing	View your subscription charge history and generate plan invoice PDFs
`read:agent_sessions`	Agent Sessions	View your scoped autonomous agent sessions — status, spending policy, remaining period cap, and recent executions.
`read:sessions`	Active Sessions	View your active login sessions (devices and clients signed in to your account) and connected agents.
`read:api_keys`	API Keys	View the API keys on your account — name, prefix, permissions and last use. The secret is never returned.

What write permissions are available?

These permissions let your AI take actions on your behalf.

Scope	Label	Description
`write:profile`	Update Profile	Update your display name and profile information
`write:transactions`	Transaction Annotations	Add or update categories and notes on your transactions
`write:external_accounts`	Manage External Accounts	Add wallets and bank accounts to your saved external accounts
`write:contacts`	Manage Contacts	Add Moneda users or external contacts to your contact list
`write:payments`	Initiate Payments	Create payment, recurring payment and currency exchange requests that you approve in the Moneda app
`write:trades`	Propose Trades	Propose buying or selling crypto, which you approve and sign in the Moneda app. Not granted by default.
`write:sub_accounts`	Propose Sub-account Actions	Propose sub-account top-ups, withdrawals, swaps, freezes, joint-account proposals and payments from a sub-account, which you approve in the Moneda app. Not granted by default.
`write:receipts`	Manage Receipts	Upload, correct and delete receipts, edit line items, create Bewirtungsbeleg/Eigenbeleg overlays, and re-run extraction
`write:agent_sessions`	Manage Agent Sessions	Create scoped autonomous agent sessions (you approve activation with a passkey in the Moneda app), execute payments within an active session’s on-chain spending policy, and revoke sessions. Spend is hard-capped on-chain by a pre-funded wallet and a pinned recipient — the agent can never exceed the policy or redirect funds.
`write:usage_credits`	Manage AI Usage Credits	Redeem a completed top-up payment to Moneda for prepaid AI usage credits, and set the monthly spend limit. The purchase amount is read from the confirmed payment, not from input. This scope only turns an already-finished payment into credits and adjusts your spending cap — it never moves money on its own.
`write:sessions`	Manage Active Sessions	Terminate a login session or disconnect a connected agent. Terminating a session immediately signs that device out. Not granted by default — an agent ending your other sessions is a security action you opt into.
`write:api_keys`	Create & Revoke API Keys	Create API keys for scripts, the CLI, and integrations, and revoke them. A new key can never carry more access than the connection that created it, and API keys can never be used for payments — those always need your approval in the Moneda app. Not granted by default.

Even with write:payments granted, all payment requests must be approved by you in the Moneda mobile app with biometric authentication before any money moves.

write:payments covers these request types, each approved by you in the Moneda app: initiate_payment (one-off payments), initiate_currency_exchange (moving money between your own currency accounts), propose_scheduled_payment (recurring payments) and pay_x402. Currency exchange and recurring payment proposals were added to this scope after it first shipped, so an assistant you connected earlier with write:payments can now also prepare those requests. Nothing moves without your approval; to withdraw the permission, disconnect the assistant in Settings > Security > Active Sessions. Crypto trades are separate, under write:trades, which also covers cancel_conditional_order (cancelling an open crypto limit, stop-loss, take-profit or trailing-stop order).

read:agent_sessions and write:agent_sessions are not included in the default scope set — AI clients have to ask for them explicitly. Delegating autonomous spend is opt-in: you activate every session with a passkey in the Moneda app, and the on-chain policy (pre-funded wallet + pinned recipient + per-payment / per-period caps) means the agent can never exceed the limits you set or send funds anywhere else.

write:usage_credits is not included in the default scope set — AI clients have to ask for it explicitly. It only lets the agent redeem a top-up payment you already sent to Moneda for AI usage credits. The amount comes from the confirmed payment, so there’s nothing extra to approve, and the same payment can never be redeemed twice.

Learn more

Authentication

How OAuth keeps your account secure when connecting to AI.

Resources

Data your AI reads automatically for context.

Available tools

See the full set of tools your AI assistant can use.

Use cases

Real examples of what you can do with Moneda and AI.

Overview

Getting Started

Tools

Reference

What read permissions are available?

What write permissions are available?

Learn more

Authentication

Resources

Available tools

Use cases

​What read permissions are available?

​What write permissions are available?

​Learn more

Authentication

Resources

Available tools

Use cases

What read permissions are available?

What write permissions are available?

Learn more