diff --git a/mintlify/openapi.yaml b/mintlify/openapi.yaml
index e64e9b88..93fbb680 100644
--- a/mintlify/openapi.yaml
+++ b/mintlify/openapi.yaml
@@ -3934,6 +3934,10 @@ paths:
 
         **Important:** If you are transferring funds in the same currency (no exchange required),
         use the `/transfer-in` or `/transfer-out` endpoints instead.
+
+        Requires a token with the `TRANSACT` permission; `VIEW` alone is not
+        sufficient. A quote is the instrument a later execute draws on, and
+        `immediatelyExecute` moves funds within this same request.
       operationId: createQuote
       tags:
         - Cross-Currency Transfers
@@ -4052,7 +4056,7 @@ paths:
               schema:
                 $ref: '#/components/schemas/Error401'
         '403':
-          description: Customer has not accepted the End User Terms
+          description: Forbidden. The token lacks the `TRANSACT` permission, or the customer has not accepted the End User Terms.
           content:
             application/json:
               schema:
@@ -4104,6 +4108,12 @@ paths:
         session private key of a verified authentication credential on the source
         Embedded Wallet.
 
+        Requires a token with the `TRANSACT` permission; `VIEW` alone is not
+        sufficient to release a transfer. On an `EMBEDDED_WALLET` source this is in
+        addition to the `Grid-Wallet-Signature` header: the signature proves the
+        wallet holder authorized the payment, while `TRANSACT` is what authorizes
+        your integration to release it.
+
         Once executed, the quote cannot be cancelled and the transfer will be processed.
       operationId: executeQuote
       tags:
@@ -4163,6 +4173,12 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/Error401'
+        '403':
+          description: Forbidden. The token lacks the `TRANSACT` permission.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error403'
         '404':
           description: Quote not found
           content:
diff --git a/openapi.yaml b/openapi.yaml
index e64e9b88..93fbb680 100644
--- a/openapi.yaml
+++ b/openapi.yaml
@@ -3934,6 +3934,10 @@ paths:
 
         **Important:** If you are transferring funds in the same currency (no exchange required),
         use the `/transfer-in` or `/transfer-out` endpoints instead.
+
+        Requires a token with the `TRANSACT` permission; `VIEW` alone is not
+        sufficient. A quote is the instrument a later execute draws on, and
+        `immediatelyExecute` moves funds within this same request.
       operationId: createQuote
       tags:
         - Cross-Currency Transfers
@@ -4052,7 +4056,7 @@ paths:
               schema:
                 $ref: '#/components/schemas/Error401'
         '403':
-          description: Customer has not accepted the End User Terms
+          description: Forbidden. The token lacks the `TRANSACT` permission, or the customer has not accepted the End User Terms.
           content:
             application/json:
               schema:
@@ -4104,6 +4108,12 @@ paths:
         session private key of a verified authentication credential on the source
         Embedded Wallet.
 
+        Requires a token with the `TRANSACT` permission; `VIEW` alone is not
+        sufficient to release a transfer. On an `EMBEDDED_WALLET` source this is in
+        addition to the `Grid-Wallet-Signature` header: the signature proves the
+        wallet holder authorized the payment, while `TRANSACT` is what authorizes
+        your integration to release it.
+
         Once executed, the quote cannot be cancelled and the transfer will be processed.
       operationId: executeQuote
       tags:
@@ -4163,6 +4173,12 @@ paths:
             application/json:
               schema:
                 $ref: '#/components/schemas/Error401'
+        '403':
+          description: Forbidden. The token lacks the `TRANSACT` permission.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/Error403'
         '404':
           description: Quote not found
           content:
diff --git a/openapi/paths/quotes/quotes.yaml b/openapi/paths/quotes/quotes.yaml
index 8e3ba69b..973b4ada 100644
--- a/openapi/paths/quotes/quotes.yaml
+++ b/openapi/paths/quotes/quotes.yaml
@@ -17,6 +17,10 @@ post:
 
     **Important:** If you are transferring funds in the same currency (no exchange required),
     use the `/transfer-in` or `/transfer-out` endpoints instead.
+
+    Requires a token with the `TRANSACT` permission; `VIEW` alone is not
+    sufficient. A quote is the instrument a later execute draws on, and
+    `immediatelyExecute` moves funds within this same request.
   operationId: createQuote
   tags:
     - Cross-Currency Transfers
@@ -141,7 +145,9 @@ post:
           schema:
             $ref: ../../components/schemas/errors/Error401.yaml
     '403':
-      description: Customer has not accepted the End User Terms
+      description: >-
+        Forbidden. The token lacks the `TRANSACT` permission, or the customer has
+        not accepted the End User Terms.
       content:
         application/json:
           schema:
diff --git a/openapi/paths/quotes/quotes_{quoteId}_execute.yaml b/openapi/paths/quotes/quotes_{quoteId}_execute.yaml
index 80bceef9..91460b59 100644
--- a/openapi/paths/quotes/quotes_{quoteId}_execute.yaml
+++ b/openapi/paths/quotes/quotes_{quoteId}_execute.yaml
@@ -14,6 +14,12 @@ post:
     session private key of a verified authentication credential on the source
     Embedded Wallet.
 
+    Requires a token with the `TRANSACT` permission; `VIEW` alone is not
+    sufficient to release a transfer. On an `EMBEDDED_WALLET` source this is in
+    addition to the `Grid-Wallet-Signature` header: the signature proves the
+    wallet holder authorized the payment, while `TRANSACT` is what authorizes
+    your integration to release it.
+
     Once executed, the quote cannot be cancelled and the transfer will be processed.
   operationId: executeQuote
   tags:
@@ -95,6 +101,12 @@ post:
         application/json:
           schema:
             $ref: ../../components/schemas/errors/Error401.yaml
+    '403':
+      description: Forbidden. The token lacks the `TRANSACT` permission.
+      content:
+        application/json:
+          schema:
+            $ref: ../../components/schemas/errors/Error403.yaml
     '404':
       description: Quote not found
       content: