List legal entities this platform API key has been granted access to. Entities are the top-level scope -- most other tools take an entity_id or account_id from here. Do not assume a single entity.

Get one entity by ID (name, legal structure, NPI, address).

Get an entity's lockbox mailing address (where payers send checks/EOBs).

List lockbox mail received for an entity, including any checks found in each mail item (amounts in cents, *_dollars annotated).

List Lemma bank accounts for an entity, with balances (cents; *_dollars annotated).

Get one bank account (name, account/routing number, balances).

Download a bank account's settlement instructions as a PDF. Pass save_to (absolute path) to write the file; otherwise small PDFs are returned base64-inline.

List transactions for a bank account (paginated; amounts in cents, *_dollars annotated).

Get one transaction (amount, counterparty, source category, linked card if any).

List saved recipients (external bank accounts) for an entity. These are the only allowed destinations for external transfers.

Get one saved recipient by ID (nickname, routing/account number, holder type, status).

List check deposits, optionally filtered by account (status, holds, MICR payer details).

Get one check deposit by ID.

List an entity's insurance remittances (payer, payment amount, trace number, whether an 835 ERA is available).

Fetch a remittance's 835 Electronic Remittance Advice as raw X12. Returns the X12 text inline (or save_to a file for large ERAs).

Get an issued virtual debit card by ID (nickname, last 4, status, every authorization control and spending limit).

SENSITIVE: get a short-lived iframe URL that renders the card's full PAN/CVV. The URL expires quickly and exposes real card credentials -- only fetch it when the user explicitly needs to view card details, never log or store it.

List inbound ACH transfers (money pushed/pulled by outside parties), optionally filtered by account.

Get one inbound ACH transfer by ID.

Get one outbound ACH transfer by ID (status: pending/submitted/settled/returned/canceled/rejected).

Get one internal book transfer by ID.

Download a file by file ID (e.g. a scanned lockbox mail item). Pass save_to (absolute path) to write it; small files return base64-inline.

WRITE: save a new external bank account (saved recipient) for an entity -- the required first step before any external transfer. Creates a REAL payment destination. Saved recipients are IMMUTABLE once created: there is no update API, and archiving is done by emailing the Lemma team (contact@getlemma.com), not via API -- so double-check routing/account numbers before confirming.

WRITE -- MOVES REAL MONEY: send an ACH transfer from a Lemma account to a SAVED RECIPIENT (destination must be an external_account_id from lemma_list_external_accounts; arbitrary bank accounts are rejected). Settles in 1-2 business days; transfers over $100,000 are held for manual review by Lemma. Requires explicit user approval before every call.

WRITE -- MOVES REAL MONEY: instant, free book transfer between two Lemma accounts owned by this platform's granted entities. Requires explicit user approval before every call.

WRITE -- CREATES A REAL FINANCIAL INSTRUMENT: issue a virtual debit card drawing on a Lemma bank account. At least one spending limit is REQUIRED (Lemma sets no ceiling of its own -- a card without limits could spend the entire account balance in one transaction). Requires explicit user approval before every call.

WRITE -- PERMANENTLY cancels a real card so it can no longer be used. Idempotent by nature (DELETE; no idempotency key needed). Requires explicit user approval before every call.