One-install Brex front door over nine separately pinned official API domains: accounting records, budgets and spend limits, expenses, custom fields, vendors and transfer status, team and non-PAN card controls, accounts/transactions/statements, travel, and webhook inventory. It bundles seven read-only operating views plus approval-gated expense-memo, vendor, user-invite, and v2-budget intakes. Dependency installs grant the read surface; each write/admin dependency group must be granted explicitly and still asks per run. The suite intentionally excludes partner-only Onboarding client credentials, accounting-integration lifecycle/export reporting, receipt upload/match, money movement, vendor deletion, PAN/CVV or secure-card email, custom-field deletion, webhook secrets/mutation, deprecated v1 budget writes, arbitrary passthrough, and credentials in arguments.