Give the agent the OpenAPI specification before requesting code. The bundle comes from routes available to integrators.
Use these sources
Set agent rules
Require the agent to:
- Read OpenAPI before generating code
- Use only routes and fields in the bundle
- Keep the key in the backend
- Start with
https://api.test.simplepay.mx
- Add idempotency to compatible mutations
- Verify webhooks with the original body
- Avoid processor parameters and IDs
- Run examples against sandbox
Reject integrations that invent key prefixes, endpoints, or responses.