donorperfect-api

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents integration with the DonorPerfect XML API, which handles fundraising and donor records, including saving gifts, pledges, and managing EFT payment methods (dp_savegift, dp_savepledge, dp_PaymentMethod_Insert). These qualify as direct financial operations (charges/payments/purchases/transfers). However, authentication is handled via a single API key per user account provided by the service (?apikey=...), which constitutes an established authentication mechanism. Therefore, the exposure level is medium due to the presence of qualifying independent service-level authentication for the direct payment/gift operations.