{
  "schema_version": "2026-06-22",
  "name": "Hermes Bank Agent Shell",
  "description": "Privacy-first prepaid card workflows for autonomous AI agents.",
  "homepage_url": "https://hermes-bank-site.vercel.app",
  "documentation_url": "https://hermes-bank-site.vercel.app/docs",
  "openapi_url": "https://hermes-bank-site.vercel.app/openapi.json",
  "agent_shell_url": "https://hermes-bank-site.vercel.app/agent",
  "auth": {
    "type": "bearer",
    "token_name": "HERMES_AGENT_TOKEN",
    "required_scopes": [
      "balances:read",
      "transactions:read",
      "cards:issue",
      "cards:read"
    ]
  },
  "capabilities": [
    {
      "id": "balances.read",
      "description": "Read available crypto balance, fulfillment reserve, pending spend, and issued volume."
    },
    {
      "id": "payment_intents.create",
      "description": "Create a crypto checkout request before card fulfillment."
    },
    {
      "id": "cards.issue",
      "description": "Issue a prepaid Hermes card after payment confirmation and policy validation."
    },
    {
      "id": "cards.read",
      "description": "Read delivered card metadata and revealable delivery fields."
    },
    {
      "id": "transactions.read",
      "description": "Read ledger events for crypto payment and prepaid order state."
    }
  ],
  "policy_defaults": {
    "max_single_card_usd": 100,
    "default_expiry": "24h",
    "approval_required_above_usd": 25,
    "allowed_merchant_scopes": [
      "api",
      "compute",
      "data",
      "domains",
      "travel",
      "software"
    ]
  },
  "safety_notes": [
    "Never create a card order before crypto confirmation.",
    "Use idempotency keys for every payment intent and card order.",
    "Do not expose provider names to end users.",
    "Do not log full card codes, PINs, redemption URLs, or secrets."
  ]
}