Upload an attachment file (PDF, JPEG, PNG) from the filesystem

Show details of a specific attachment

List attachments for a transaction

Attach a file to a transaction from the filesystem

Remove attachment(s) from a transaction. If attachment_id is provided, removes that specific attachment. Otherwise removes all attachments.

List all bank accounts for the organization

Show details of a specific bank account

Download IBAN certificate PDF for a bank account

Create a new bank account. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Update an existing bank account. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Close a bank account. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

List SEPA beneficiaries in the organization

Show details of a specific SEPA beneficiary

Create a new SEPA beneficiary. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Update an existing SEPA beneficiary. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Trust one or more SEPA beneficiaries (requires Embed-partner-only beneficiary.trust OAuth scope; standard third-party apps will receive 403). SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Untrust one or more SEPA beneficiaries (requires Embed-partner-only beneficiary.trust OAuth scope; standard third-party apps will receive 403). SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

List cards in the organization

Show details of a specific card

Create a new card. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Bulk create cards (up to 50). SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Lock a card. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Unlock a card. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Report a physical card as lost (irreversible). SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Report a physical card as stolen (irreversible). SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Discard a card (irreversible). SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Update a card's spending limits. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Update a card's nickname. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Update a card's options (ATM, NFC, online, foreign). SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Update a card's restrictions (active days, merchant categories). SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Get secure iframe URL for viewing card details (PAN, CVV, expiry)

List available card appearances (designs by type and level)

Create a bulk SEPA transfer from a debit account. Each item provides either beneficiary_id (existing) or beneficiary (inline name+iban). client_transfer_id is auto-generated when omitted; vop_proof_token is auto-resolved via bulk_verify_payee when omitted (and sca_session_token is not provided). SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

List bulk transfers

Show details of a specific bulk transfer

List clients with optional pagination

Show details of a specific client

Create a new client

Update an existing client

Delete a client

List client invoices with optional filters

Show details of a specific client invoice

Create a draft client invoice with client and line items

Update a draft client invoice

Delete a draft client invoice

Finalize a client invoice (assign number, transition from draft to unpaid)

Send a finalized client invoice to the client via email. Requires send_to (one or more recipient emails) and email_title; optional email_body and copy_to_self (default true).

Mark a client invoice as paid

Unmark a client invoice paid status (transition back to unpaid)

Cancel a finalized client invoice

Upload a file to a client invoice from the filesystem

Show upload details for a client invoice

List credit notes in the organization

Show details of a specific credit note

Run a read-only healthcheck against the configured qontoctl profile. Returns a DiagnosticReport with per-check status (ok/warn/fail/skip), detail, and suggested actions. Use this first when something doesn't work.

Retrieve e-invoicing settings for the organization

Show insurance contract details

Create a new insurance contract

Update an insurance contract

Upload a document to an insurance contract from the filesystem

Remove a document from an insurance contract

Check eligibility for international transfers

List supported currencies for international transfers

Create an international transfer quote with exchange rate

List international beneficiaries in the organization

Get required fields for an international beneficiary corridor

Create a new international beneficiary. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Update an international beneficiary. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Remove an international beneficiary. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Get required fields for an international transfer

Create an international transfer. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Create an internal transfer between two bank accounts within the same organization. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

List all labels in the organization

Show details of a specific label

List all memberships in the organization

Show the current authenticated user's membership

Invite a new member to the organization

Show organization details including name, slug, and bank accounts

List payment links

Show details of a specific payment link

Create a new payment link (basket or invoice type)

Deactivate a payment link

List payments for a specific payment link

List available payment methods for payment links

Establish payment link connection with provider

Get payment link connection status

List products from the authenticated organization's catalogue

List quotes with optional filters

Show details of a specific quote

Create a new quote with client and line items

Update an existing quote

Delete a quote

Send a quote to the client via email. Requires send_to (one or more recipient emails) and email_title; copy_to_self BCCs the authenticated user (defaults to true server-side).

Create a recurring transfer. vop_proof_token is auto-resolved via verify_payee when omitted (and sca_session_token is not provided). SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Cancel a recurring transfer. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

List recurring transfers

Show details of a specific recurring transfer

List all requests in the organization

Approve a pending request. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.

Decline a pending request. SCA: this operation may require Strong Customer Authentication; the tool polls inline by default (wait=30s) and falls back to a structured pending response so the caller can continue via sca_session_show + sca_session_token.