Lap Account Api

Account API skill. Use when working with Account for checkAccountHolder, closeAccount, closeAccountHolder. Covers 20 endpoints.

Security Scan

The skill is broadly coherent with an Account API wrapper, but its authentication instructions and a few details conflict with the declared requirements and deserve review before use.

Purpose & Capability

Name/description indicate an Account API client for account-holder operations and the single required env var ACCOUNT_API_KEY is consistent with an API-key style integration. The base URL points to an Adyen test host (cal-test.adyen.com) — reasonable for a test integration but the SKILL.md does not state explicitly that this is a test environment, which could be important for users expecting production endpoints.

Instruction Scope

The runtime instructions are instruction-only and mostly scoped to calling the listed endpoints, but the SKILL.md contains contradictory auth guidance: the Auth section lists both "ApiKey X-API-Key in header" and "Bearer basic", and the Setup step tells the user to "Set Authorization header with your Bearer token" while the skill declares ACCOUNT_API_KEY as the required env var. This inconsistency could cause the agent to send credentials incorrectly. The instructions otherwise do not request unrelated files or environment data.

Install Mechanism

No install spec and no code files — instruction-only. This minimizes installation risk because nothing is downloaded or written to disk by the skill itself.

Credentials

The skill only requests a single env var (ACCOUNT_API_KEY), which is proportionate for an API client. However the SKILL.md's contradictory auth text (Bearer token vs X-API-Key) makes it unclear which secret the agent actually needs, and therefore whether that environment variable will be used correctly. Also the skill exposes many destructive endpoints (close, delete, suspend, update, uploadDocument) — the required credential should be scoped to least privilege.

Persistence & Privilege

always:false and default invocation settings — the skill has no elevated or forced presence and does not request modification of other skills or system config. Autonomous invocation is allowed (platform default) but not itself a solitary red flag.

What to consider before installing

This skill appears to be an instruction-only client for an Account API and asks for a single credential (ACCOUNT_API_KEY), which is appropriate — but the documentation is inconsistent about authentication. Before installing, verify: 1) whether the API expects an X-API-Key header or a Bearer token and provide only the correctly-scoped secret (prefer least-privilege keys). 2) that the base URL (cal-test.adyen.com) is the intended environment (it's a test host). 3) that you are comfortable the agent may call destructive endpoints (close/delete/suspend) automatically if invoked; consider using a limited-scope or test credential, and restrict autonomous invocation if you need human approval. Finally, confirm the referenced spec (references/api-spec.lap) is available to the runtime and update any auth mismatch in the SKILL.md so the agent won't send the wrong credential.

Account API

API version: 6

Auth

ApiKey X-API-Key in header | Bearer basic

Base URL

https://cal-test.adyen.com/cal/services/Account/v6

Setup

1. Set Authorization header with your Bearer token
2. POST /checkAccountHolder -- create first checkAccountHolder

Endpoints

20 endpoints across 20 groups. See references/api-spec.lap for full details.

checkAccountHolder

Method	Path	Description
POST	/checkAccountHolder	Trigger verification

closeAccount

Method	Path	Description
POST	/closeAccount	Close an account

closeAccountHolder

Method	Path	Description
POST	/closeAccountHolder	Close an account holder

closeStores

Method	Path	Description
POST	/closeStores	Close stores

createAccount

Method	Path	Description
POST	/createAccount	Create an account

createAccountHolder

Method	Path	Description
POST	/createAccountHolder	Create an account holder

deleteBankAccounts

Method	Path	Description
POST	/deleteBankAccounts	Delete bank accounts

deleteLegalArrangements

Method	Path	Description
POST	/deleteLegalArrangements	Delete legal arrangements

deletePayoutMethods

Method	Path	Description
POST	/deletePayoutMethods	Delete payout methods

deleteShareholders

Method	Path	Description
POST	/deleteShareholders	Delete shareholders

deleteSignatories

Method	Path	Description
POST	/deleteSignatories	Delete signatories

getAccountHolder

Method	Path	Description
POST	/getAccountHolder	Get an account holder

getTaxForm

Method	Path	Description
POST	/getTaxForm	Get a tax form

getUploadedDocuments

Method	Path	Description
POST	/getUploadedDocuments	Get documents

suspendAccountHolder

Method	Path	Description
POST	/suspendAccountHolder	Suspend an account holder

unSuspendAccountHolder

Method	Path	Description
POST	/unSuspendAccountHolder	Unsuspend an account holder

updateAccount

Method	Path	Description
POST	/updateAccount	Update an account

updateAccountHolder

Method	Path	Description
POST	/updateAccountHolder	Update an account holder

updateAccountHolderState

Method	Path	Description
POST	/updateAccountHolderState	Update payout or processing state

uploadDocument

Method	Path	Description
POST	/uploadDocument	Upload a document

Common Questions

Match user requests to endpoints in references/api-spec.lap. Key patterns:

• "Create a checkAccountHolder?" -> POST /checkAccountHolder
• "Create a closeAccount?" -> POST /closeAccount
• "Create a closeAccountHolder?" -> POST /closeAccountHolder
• "Create a closeStore?" -> POST /closeStores
• "Create a createAccount?" -> POST /createAccount
• "Create a createAccountHolder?" -> POST /createAccountHolder
• "Create a deleteBankAccount?" -> POST /deleteBankAccounts
• "Create a deleteLegalArrangement?" -> POST /deleteLegalArrangements
• "Create a deletePayoutMethod?" -> POST /deletePayoutMethods
• "Create a deleteShareholder?" -> POST /deleteShareholders
• "Create a deleteSignatory?" -> POST /deleteSignatories
• "Create a getAccountHolder?" -> POST /getAccountHolder
• "Create a getTaxForm?" -> POST /getTaxForm
• "Create a getUploadedDocument?" -> POST /getUploadedDocuments
• "Create a suspendAccountHolder?" -> POST /suspendAccountHolder
• "Create a unSuspendAccountHolder?" -> POST /unSuspendAccountHolder
• "Create a updateAccount?" -> POST /updateAccount
• "Create a updateAccountHolder?" -> POST /updateAccountHolder
• "Create a updateAccountHolderState?" -> POST /updateAccountHolderState
• "Create a uploadDocument?" -> POST /uploadDocument
• "How to authenticate?" -> See Auth section

Response Tips

• Check response schemas in references/api-spec.lap for field details
• Create/update endpoints typically return the created/updated object

CLI

# Update this spec to the latest version
npx @lap-platform/lapsh get account-api -o references/api-spec.lap

# Search for related APIs
npx @lap-platform/lapsh search account-api

References

• Full spec: See references/api-spec.lap for complete endpoint details, parameter tables, and response schemas

Generated from the official API spec by LAP