FI setting ownership
The FI owns its account and data. Your integrator can change only the settings the FI has delegated to it.
| Setting | Owner | What you can change |
|---|---|---|
| FI account, participant data, funding sources, payments, and limits | FI | Use the FI’s API routes only when it grants the required scope. The data remains scoped to that FI. |
| Delegation scopes | FI | The FI grants and changes scopes on its connection to you. You cannot grant yourself scopes. |
| Provider record | FI | The provider update route currently supports shortName. You can change it when the FI grants moov-money-provider.write. |
| Receiver, endpoint URLs, operation timeouts, and authorize deduplication | Account that owns the routing values | If you are the receiver, you can change these values. The FI can switch the receiver back to itself only if the routing values stay unchanged. |
| OAuth credential references | Account that owns the routing values | A routing configuration can use only credential references owned by its receiver. The private signing key stays with Moov Money. |
| Ledger signing secrets | Receiver recorded on each secret | You can create or revoke secrets for your receiver. A secret created while the FI was the receiver belongs to the FI. |
| Stand-in policy and BIN ranges | FI | Integrator routing changes do not change these settings. |
| Funding model and program wallet | Set during FI provisioning | You cannot change these after activation. |
Read or update the FI’s receiver configuration with
GET
and
PATCH
/providers/{providerID}/configuration. Each FI has its own configuration
version.
The initial write determines who owns the routing values:
- With no stored configuration, the FI can route to itself. An affiliated integrator can also create the first configuration, but it must route to that integrator.
- If the FI writes first, it owns the routing values. You cannot take over the configuration. The FI must change the receiver itself.
- If you are the receiver, you own the routing values. The FI can switch the receiver to itself only without changing the URLs, credential references, timeouts, or authorize deduplication setting.
For credential-reference setup and key rotation, see receiving calls from Moov Money.