card_freeze
Freeze the user's Picnic (Gnosis Pay) card. Returns a sign_url and a resource_uri for live status updates. Execution starts as soon as the user signs.
The signature is verified by Gnosis Pay via EIP-1271 against the user's gnosisPay smart account; on sign, the server mints a one-shot bearer token and calls the freeze endpoint. Off-chain — no 4337 UserOperation.
Required scope: manage:card
Parameters: none.
Returns:
| Field | Type | Description |
|---|---|---|
action_id | string | UUID for the pending action. |
status | string | Always "proposed" immediately after this tool returns. |
summary | string | Human-readable summary (e.g. "Freeze Picnic card …"). |
sign_url | string | URL the user opens to authorize with their passkey. |
resource_uri | string | picnic://action/{action_id}. Subscribe for notifications/resources/updated. |
expires_at | date | ISO timestamp; 10 minutes after creation. |
Action lifecycle: proposed → signed → submitted → executed (no broadcast — there's no bundler in the loop).
Other terminal states: failed (Gnosis Pay rejected the SIWE signature or returned an error), expired, rejected.
Example prompt:
"Freeze my Picnic card."