@moovio/sdk 26.7.0 → 26.7.2

package/src/funcs/cardIssuingListMerchantCategories.ts

@@ -0,0 +1,155 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { MoovCore } from "../core.js";
+import { matchStatusCode } from "../lib/http.js";
+import * as M from "../lib/matchers.js";
+import { compactMap } from "../lib/primitives.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/httpclienterrors.js";
+import { MoovError } from "../models/errors/mooverror.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import * as operations from "../models/operations/index.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * List the predefined merchant category groups available for issued card spend controls, along with
+ * the merchant category codes (MCCs) each group covers. Use these category names in an issued card's
+ * `merchantCategoryRestrictions`.
+ *
+ * To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/),
+ * you'll need to specify the `/issued-cards.read` scope.
+ */
+export function cardIssuingListMerchantCategories(
+  client: MoovCore,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    operations.ListIssuingMerchantCategoriesResponse,
+    | MoovError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >
+> {
+  return new APIPromise($do(
+    client,
+    options,
+  ));
+}
+
+async function $do(
+  client: MoovCore,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      operations.ListIssuingMerchantCategoriesResponse,
+      | MoovError
+      | ResponseValidationError
+      | ConnectionError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | InvalidRequestError
+      | UnexpectedClientError
+      | SDKValidationError
+    >,
+    APICall,
+  ]
+> {
+  const path = pathToFunc("/issuing/merchant-categories")();
+
+  const headers = new Headers(compactMap({
+    Accept: "application/json",
+  }));
+
+  const securityInput = await extractSecurity(client._options.security);
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID: "listIssuingMerchantCategories",
+    oAuth2Scopes: null,
+
+    resolvedSecurity: requestSecurity,
+
+    securitySource: client._options.security,
+    retryConfig: options?.retries
+      || client._options.retryConfig
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"],
+  };
+
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path: path,
+    headers: headers,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+
+  const doResult = await client._do(req, {
+    context,
+    isErrorStatusCode: (statusCode: number) =>
+      matchStatusCode({ status: statusCode } as Response, ["4XX", "5XX"]),
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req },
+  };
+
+  const [result] = await M.match<
+    operations.ListIssuingMerchantCategoriesResponse,
+    | MoovError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >(
+    M.json(
+      200,
+      operations.ListIssuingMerchantCategoriesResponse$inboundSchema,
+      { hdrs: true, key: "Result" },
+    ),
+    M.fail([401, 403, 429]),
+    M.fail([500, 504]),
+    M.fail("4XX"),
+    M.fail("5XX"),
+  )(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+
+  return [result, { status: "complete", request: req, response }];
+}

package/src/funcs/imagesUpload.ts

@@ -40,7 +40,7 @@ import { isReadableStream } from "../types/streams.js";
 
 /**
  *   Upload a new PNG, JPEG, or WebP image with optional metadata.
- *   Duplicate images, and requests larger than 16MB will be rejected.
+ *   Duplicate images return the existing image's metadata with a 409 status. Requests larger than 16MB will be rejected.
  */
 export function imagesUpload(
   client: MoovCore,

package/src/funcs/institutionsSearch.ts

@@ -27,7 +27,7 @@ import { APICall, APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 
 /**
- * This endpoint has been deprecated and will be removed in a future release. Use [/institutions](https://docs.moov.io/api/enrichment/form-shortening/institutions/get/).
+ * This endpoint has been deprecated and will be removed in a future release. Use [/institutions](https://docs.moov.io/api/enrichment/institutions/get/).
  *
  * Search for institutions by either their name or routing number.
  *

package/src/funcs/issuingTransactionsList.ts

@@ -99,6 +99,7 @@ async function $do(
     "count": payload.count,
     "endDateTime": payload.endDateTime,
     "issuedCardID": payload.issuedCardID,
+    "merchantName": payload.merchantName,
     "skip": payload.skip,
     "startDateTime": payload.startDateTime,
   }, { explode: false });

package/src/funcs/transfersCreateCancellation.ts

@@ -29,6 +29,9 @@ import { Result } from "../types/fp.js";
 /**
  *   Initiate a cancellation for a card, ACH, or queued transfer.
  *
+ *   In v2026.10 and later, an auth-capture `card-payment` transfer can be canceled before any captures exist.
+ *   For these transfers, a successful cancellation reduces `capturableAmount` without changing `authorizedAmount`.
+ *   For these transfers, a partial cancellation leaves the remaining `capturableAmount` available for capture.
  *   To access this endpoint using a [token](https://docs.moov.io/api/authentication/access-tokens/) you'll need
  *   to specify the `/accounts/{accountID}/transfers.write` scope.
  */
@@ -172,7 +175,9 @@ async function $do(
       hdrs: true,
       key: "Result",
     }),
-    M.jsonErr(400, errors.GenericError$inboundSchema, { hdrs: true }),
+    M.jsonErr([400, 409, 422], errors.GenericError$inboundSchema, {
+      hdrs: true,
+    }),
     M.fail([401, 403, 404, 429]),
     M.fail([500, 504]),
     M.fail("4XX"),

package/src/funcs/transfersCreateReversal.ts

@@ -28,6 +28,9 @@ import { Result } from "../types/fp.js";
 
 /**
  * Reverses a card transfer by initiating a cancellation or refund depending on the transaction status.
+ * In v2026.10 and later, reversing an auth-capture `card-payment` transfer with no captures cancels the entire `capturableAmount`.
+ * In those API versions, an auth-capture `card-payment` transfer with one final capture is canceled or refunded depending on its processing state.
+ * Auth-capture `card-payment` transfers with a non-final capture or multiple captures are not supported in those API versions.
  * Read our [reversals guide](https://docs.moov.io/guides/money-movement/accept-payments/card-acceptance/reversals/)
  * to learn more.
  *

package/src/funcs/transfersList.ts

@@ -106,6 +106,8 @@ async function $do(
 
   const query = encodeFormQuery({
     "accountIDs": payload.accountIDs,
+    "authorizationIDs": payload.authorizationIDs,
+    "captureIDs": payload.captureIDs,
     "count": payload.count,
     "disputed": payload.disputed,
     "endDateTime": payload.endDateTime,

package/src/funcs/transfersListCancellations.ts

@@ -168,7 +168,7 @@ async function $do(
       hdrs: true,
       key: "Result",
     }),
-    M.fail([401, 403, 429]),
+    M.fail([401, 403, 404, 429]),
     M.fail([500, 504]),
     M.fail("4XX"),
     M.fail("5XX"),

package/src/funcs/transfersListRefunds.ts

@@ -168,7 +168,7 @@ async function $do(
       hdrs: true,
       key: "Result",
     }),
-    M.fail([401, 403, 429]),
+    M.fail([401, 403, 404, 429]),
     M.fail([500, 504]),
     M.fail("4XX"),
     M.fail("5XX"),

package/src/lib/config.ts

@@ -73,7 +73,7 @@ export function serverURLFromOptions(options: SDKOptions): URL | null {
 export const SDK_METADATA = {
   language: "typescript",
   openapiDocVersion: "v2026.07.00",
-  sdkVersion: "26.7.0",
-  genVersion: "2.924.0",
-  userAgent: "speakeasy-sdk/typescript 26.7.0 2.924.0 v2026.07.00 @moovio/sdk",
+  sdkVersion: "26.7.2",
+  genVersion: "2.935.1",
+  userAgent: "speakeasy-sdk/typescript 26.7.2 2.935.1 v2026.07.00 @moovio/sdk",
 } as const;

package/src/lib/encodings.ts

@@ -12,10 +12,41 @@ export class EncodingError extends Error {
   }
 }
 
+export type CharEncoding = "percent" | "percentExceptReserved" | "none";
+
+const reservedEscapes = /%(2[346bcf]|3[abdf]|40|5[bd])/gi;
+
+function encodeKeyChars(
+  v: string,
+  charEncoding: CharEncoding | undefined,
+): string {
+  return encodeChars(
+    v,
+    charEncoding === "percentExceptReserved" ? "percent" : charEncoding,
+  );
+}
+
+function encodeChars(
+  v: string,
+  charEncoding: CharEncoding | undefined,
+): string {
+  switch (charEncoding) {
+    case "percent":
+      return encodeURIComponent(v);
+    case "percentExceptReserved":
+      return encodeURIComponent(v).replace(
+        reservedEscapes,
+        (m) => decodeURIComponent(m),
+      );
+    default:
+      return v;
+  }
+}
+
 export function encodeMatrix(
   key: string,
   value: unknown,
-  options?: { explode?: boolean; charEncoding?: "percent" | "none" },
+  options?: { explode?: boolean; charEncoding?: CharEncoding },
 ): string | undefined {
   let out = "";
   const pairs: [string, unknown][] = options?.explode
@@ -27,7 +58,7 @@ export function encodeMatrix(
   }
 
   const encodeString = (v: string) => {
-    return options?.charEncoding === "percent" ? encodeURIComponent(v) : v;
+    return encodeChars(v, options?.charEncoding);
   };
   const encodeValue = (v: unknown) => encodeString(serializeValue(v));
 
@@ -52,7 +83,7 @@ export function encodeMatrix(
       return;
     }
 
-    const keyPrefix = encodeString(pk);
+    const keyPrefix = encodeKeyChars(pk, options?.charEncoding);
     tmp = `${keyPrefix}=${encValue}`;
     // trim trailing '=' if value was empty
     if (tmp === `${keyPrefix}=`) {
@@ -73,7 +104,7 @@ export function encodeMatrix(
 export function encodeLabel(
   key: string,
   value: unknown,
-  options?: { explode?: boolean; charEncoding?: "percent" | "none" },
+  options?: { explode?: boolean; charEncoding?: CharEncoding },
 ): string | undefined {
   let out = "";
   const pairs: [string, unknown][] = options?.explode
@@ -85,7 +116,7 @@ export function encodeLabel(
   }
 
   const encodeString = (v: string) => {
-    return options?.charEncoding === "percent" ? encodeURIComponent(v) : v;
+    return encodeChars(v, options?.charEncoding);
   };
   const encodeValue = (v: unknown) => encodeString(serializeValue(v));
 
@@ -103,7 +134,7 @@ export function encodeLabel(
       encValue = mapped?.join("").slice(1);
     } else {
       const k = options?.explode && isPlainObject(value)
-        ? `${encodeString(pk)}=`
+        ? `${encodeKeyChars(pk, options?.charEncoding)}=`
         : "";
       encValue = `${k}${encodeValue(pv)}`;
     }
@@ -117,14 +148,14 @@ export function encodeLabel(
 type FormEncoder = (
   key: string,
   value: unknown,
-  options?: { explode?: boolean; charEncoding?: "percent" | "none" },
+  options?: { explode?: boolean; charEncoding?: CharEncoding },
 ) => string | undefined;
 
 function formEncoder(sep: string): FormEncoder {
   return (
     key: string,
     value: unknown,
-    options?: { explode?: boolean; charEncoding?: "percent" | "none" },
+    options?: { explode?: boolean; charEncoding?: CharEncoding },
   ) => {
     let out = "";
     const pairs: [string, unknown][] = options?.explode
@@ -136,7 +167,7 @@ function formEncoder(sep: string): FormEncoder {
     }
 
     const encodeString = (v: string) => {
-      return options?.charEncoding === "percent" ? encodeURIComponent(v) : v;
+      return encodeChars(v, options?.charEncoding);
     };
 
     const encodeValue = (v: unknown) => encodeString(serializeValue(v));
@@ -163,7 +194,7 @@ function formEncoder(sep: string): FormEncoder {
         return;
       }
 
-      tmp = `${encodeString(pk)}=${encValue}`;
+      tmp = `${encodeKeyChars(pk, options?.charEncoding)}=${encValue}`;
 
       // If we end up with the nothing then skip forward
       if (!tmp || tmp === "=") {
@@ -184,7 +215,7 @@ export const encodePipeDelimited = formEncoder("|");
 export function encodeBodyForm(
   key: string,
   value: unknown,
-  options?: { explode?: boolean; charEncoding?: "percent" | "none" },
+  options?: { explode?: boolean; charEncoding?: CharEncoding },
 ): string {
   let out = "";
   const pairs: [string, unknown][] = options?.explode
@@ -192,7 +223,7 @@ export function encodeBodyForm(
     : [[key, value]];
 
   const encodeString = (v: string) => {
-    return options?.charEncoding === "percent" ? encodeURIComponent(v) : v;
+    return encodeChars(v, options?.charEncoding);
   };
 
   const encodeValue = (v: unknown) => encodeString(serializeValue(v));
@@ -211,7 +242,7 @@ export function encodeBodyForm(
       encValue = `${encodeValue(pv)}`;
     }
 
-    tmp = `${encodeString(pk)}=${encValue}`;
+    tmp = `${encodeKeyChars(pk, options?.charEncoding)}=${encValue}`;
 
     // If we end up with the nothing then skip forward
     if (!tmp || tmp === "=") {
@@ -227,7 +258,7 @@ export function encodeBodyForm(
 export function encodeDeepObject(
   key: string,
   value: unknown,
-  options?: { charEncoding?: "percent" | "none" },
+  options?: { charEncoding?: CharEncoding },
 ): string | undefined {
   if (value == null) {
     return;
@@ -245,7 +276,7 @@ export function encodeDeepObject(
 export function encodeDeepObjectObject(
   key: string,
   value: unknown,
-  options?: { charEncoding?: "percent" | "none" },
+  options?: { charEncoding?: CharEncoding },
 ): string | undefined {
   if (value == null) {
     return;
@@ -254,7 +285,7 @@ export function encodeDeepObjectObject(
   let out = "";
 
   const encodeString = (v: string) => {
-    return options?.charEncoding === "percent" ? encodeURIComponent(v) : v;
+    return encodeChars(v, options?.charEncoding);
   };
 
   if (!isPlainObject(value)) {
@@ -278,7 +309,9 @@ export function encodeDeepObjectObject(
 
     const pairs: unknown[] = Array.isArray(cv) ? cv : [cv];
     const encoded = mapDefined(pairs, (v) => {
-      return `${encodeString(pk)}=${encodeString(serializeValue(v))}`;
+      return `${encodeKeyChars(pk, options?.charEncoding)}=${
+        encodeString(serializeValue(v))
+      }`;
     })?.join("&");
 
     out += encoded == null ? "" : `&${encoded}`;
@@ -290,25 +323,27 @@ export function encodeDeepObjectObject(
 export function encodeJSON(
   key: string,
   value: unknown,
-  options?: { explode?: boolean; charEncoding?: "percent" | "none" },
+  options?: { explode?: boolean; charEncoding?: CharEncoding },
 ): string | undefined {
   if (typeof value === "undefined") {
     return;
   }
 
   const encodeString = (v: string) => {
-    return options?.charEncoding === "percent" ? encodeURIComponent(v) : v;
+    return encodeChars(v, options?.charEncoding);
   };
 
   const encVal = encodeString(JSON.stringify(value, jsonReplacer));
 
-  return options?.explode ? encVal : `${encodeString(key)}=${encVal}`;
+  return options?.explode
+    ? encVal
+    : `${encodeKeyChars(key, options?.charEncoding)}=${encVal}`;
 }
 
 export const encodeSimple = (
   key: string,
   value: unknown,
-  options?: { explode?: boolean; charEncoding?: "percent" | "none" },
+  options?: { explode?: boolean; charEncoding?: CharEncoding },
 ): string | undefined => {
   let out = "";
   const pairs: [string, unknown][] = options?.explode
@@ -320,7 +355,7 @@ export const encodeSimple = (
   }
 
   const encodeString = (v: string) => {
-    return options?.charEncoding === "percent" ? encodeURIComponent(v) : v;
+    return encodeChars(v, options?.charEncoding);
   };
   const encodeValue = (v: unknown) => encodeString(serializeValue(v));
 
@@ -426,7 +461,7 @@ export function queryJoin(...args: (string | undefined)[]): string {
 
 type QueryEncoderOptions = {
   explode?: boolean;
-  charEncoding?: "percent" | "none";
+  charEncoding?: CharEncoding;
   allowEmptyValue?: string[];
 };
 

package/src/mcp-server/mcp-server.ts

@@ -19,7 +19,7 @@ const routes = buildRouteMap({
 export const app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "26.7.0",
+    currentVersion: "26.7.2",
   },
 });
 

package/src/mcp-server/server.ts

@@ -57,6 +57,7 @@ import { tool$capabilitiesRequest } from "./tools/capabilitiesRequest.js";
 import { tool$cardIssuingGet } from "./tools/cardIssuingGet.js";
 import { tool$cardIssuingGetFull } from "./tools/cardIssuingGetFull.js";
 import { tool$cardIssuingList } from "./tools/cardIssuingList.js";
+import { tool$cardIssuingListMerchantCategories } from "./tools/cardIssuingListMerchantCategories.js";
 import { tool$cardIssuingRequest } from "./tools/cardIssuingRequest.js";
 import { tool$cardIssuingUpdate } from "./tools/cardIssuingUpdate.js";
 import { tool$cardsDisable } from "./tools/cardsDisable.js";
@@ -216,7 +217,7 @@ export function createMCPServer(deps: {
 }) {
   const server = new McpServer({
     name: "Moov",
-    version: "26.7.0",
+    version: "26.7.2",
   });
 
   const client = new MoovCore({
@@ -413,16 +414,17 @@ export function createMCPServer(deps: {
   tool(tool$industriesList);
   tool(tool$institutionsSearchInstitutions);
   tool(tool$institutionsSearch);
-  tool(tool$issuingTransactionsListAuthorizations);
-  tool(tool$issuingTransactionsGetAuthorization);
-  tool(tool$issuingTransactionsListAuthorizationEvents);
-  tool(tool$issuingTransactionsList);
-  tool(tool$issuingTransactionsGet);
+  tool(tool$cardIssuingListMerchantCategories);
   tool(tool$cardIssuingRequest);
   tool(tool$cardIssuingList);
   tool(tool$cardIssuingGet);
   tool(tool$cardIssuingUpdate);
   tool(tool$cardIssuingGetFull);
+  tool(tool$issuingTransactionsListAuthorizations);
+  tool(tool$issuingTransactionsGetAuthorization);
+  tool(tool$issuingTransactionsListAuthorizationEvents);
+  tool(tool$issuingTransactionsList);
+  tool(tool$issuingTransactionsGet);
   tool(tool$authenticationRevokeAccessToken);
   tool(tool$authenticationCreateAccessToken);
   tool(tool$onboardingCreateInvite);

package/src/mcp-server/tools/avatarsGet.ts

@@ -14,7 +14,7 @@ export const tool$avatarsGet: ToolDefinition<typeof args> = {
   name: "avatars-get",
   description: `Get avatar image for an account using a unique ID.    
 
-To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/) 
+To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/)
 you'll need to specify the \`/profile-enrichment.read\` scope.`,
   args,
   tool: async (client, args, ctx) => {

package/src/mcp-server/tools/cardIssuingGetFull.ts

@@ -17,7 +17,7 @@ export const tool$cardIssuingGetFull: ToolDefinition<typeof args> = {
 Only use this endpoint if you have provided Moov with a copy of your PCI attestation of compliance.
 
 To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/) 
-you'll need to specify the \`/accounts/{accountID}/issued-cards.read-secure\` scope.`,
+you'll need to specify the \`/accounts/{accountID}/issued-cards.read-private\` scope.`,
   args,
   tool: async (client, args, ctx) => {
     const [result, apiCall] = await cardIssuingGetFull(

package/src/mcp-server/tools/cardIssuingListMerchantCategories.ts

@@ -0,0 +1,34 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { cardIssuingListMerchantCategories } from "../../funcs/cardIssuingListMerchantCategories.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+export const tool$cardIssuingListMerchantCategories: ToolDefinition = {
+  name: "card-issuing-list-merchant-categories",
+  description:
+    `List the predefined merchant category groups available for issued card spend controls, along with
+the merchant category codes (MCCs) each group covers. Use these category names in an issued card's
+\`merchantCategoryRestrictions\`.
+
+To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/),
+you'll need to specify the \`/issued-cards.read\` scope.`,
+  tool: async (client, ctx) => {
+    const [result, apiCall] = await cardIssuingListMerchantCategories(
+      client,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    const value = result.value.result;
+
+    return formatResult(value, apiCall);
+  },
+};

package/src/mcp-server/tools/enrichedAddressGet.ts

@@ -14,7 +14,7 @@ export const tool$enrichedAddressGet: ToolDefinition<typeof args> = {
   name: "enriched-address-get",
   description: `Fetch enriched address suggestions. Requires a partial address. 
   
-To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/) 
+To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/)
 you'll need to specify the \`/profile-enrichment.read\` scope.`,
   args,
   tool: async (client, args, ctx) => {

package/src/mcp-server/tools/enrichedProfileGet.ts

@@ -15,7 +15,7 @@ export const tool$enrichedProfileGet: ToolDefinition<typeof args> = {
   description:
     `Fetch enriched profile data. Requires a valid email address. This service is offered in collaboration with Clearbit. 
 
-To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/) 
+To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/)
 you'll need to specify the \`/profile-enrichment.read\` scope.`,
   args,
   tool: async (client, args, ctx) => {

package/src/mcp-server/tools/imagesUpload.ts

@@ -13,7 +13,7 @@ const args = {
 export const tool$imagesUpload: ToolDefinition<typeof args> = {
   name: "images-upload",
   description: `  Upload a new PNG, JPEG, or WebP image with optional metadata. 
-  Duplicate images, and requests larger than 16MB will be rejected.`,
+  Duplicate images return the existing image's metadata with a 409 status. Requests larger than 16MB will be rejected.`,
   args,
   tool: async (client, args, ctx) => {
     const [result, apiCall] = await imagesUpload(

package/src/mcp-server/tools/institutionsSearch.ts

@@ -13,11 +13,11 @@ const args = {
 export const tool$institutionsSearch: ToolDefinition<typeof args> = {
   name: "institutions-search",
   description:
-    `This endpoint has been deprecated and will be removed in a future release. Use [/institutions](https://docs.moov.io/api/enrichment/form-shortening/institutions/get/).
+    `This endpoint has been deprecated and will be removed in a future release. Use [/institutions](https://docs.moov.io/api/enrichment/institutions/get/).
 
 Search for institutions by either their name or routing number.
 
-To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/) 
+To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/)
 you'll need to specify the \`/fed.read\` scope.`,
   args,
   tool: async (client, args, ctx) => {

package/src/mcp-server/tools/transfersCreateCancellation.ts

@@ -14,6 +14,9 @@ export const tool$transfersCreateCancellation: ToolDefinition<typeof args> = {
   name: "transfers-create-cancellation",
   description: `  Initiate a cancellation for a card, ACH, or queued transfer.
   
+  In v2026.10 and later, an auth-capture \`card-payment\` transfer can be canceled before any captures exist.
+  For these transfers, a successful cancellation reduces \`capturableAmount\` without changing \`authorizedAmount\`.
+  For these transfers, a partial cancellation leaves the remaining \`capturableAmount\` available for capture.
   To access this endpoint using a [token](https://docs.moov.io/api/authentication/access-tokens/) you'll need 
   to specify the \`/accounts/{accountID}/transfers.write\` scope.`,
   args,

package/src/mcp-server/tools/transfersCreateReversal.ts

@@ -13,7 +13,10 @@ const args = {
 export const tool$transfersCreateReversal: ToolDefinition<typeof args> = {
   name: "transfers-create-reversal",
   description:
-    `Reverses a card transfer by initiating a cancellation or refund depending on the transaction status. 
+    `Reverses a card transfer by initiating a cancellation or refund depending on the transaction status.
+In v2026.10 and later, reversing an auth-capture \`card-payment\` transfer with no captures cancels the entire \`capturableAmount\`.
+In those API versions, an auth-capture \`card-payment\` transfer with one final capture is canceled or refunded depending on its processing state.
+Auth-capture \`card-payment\` transfers with a non-final capture or multiple captures are not supported in those API versions.
 Read our [reversals guide](https://docs.moov.io/guides/money-movement/accept-payments/card-acceptance/reversals/) 
 to learn more.