generated: '2026-07-15' method: generated source: openapi/argo-workflows-openapi.json description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 73 by_action_class: connected: 34 acting: 39 by_consequence: read: 34 write: 37 safety-critical: 2 human_in_the_loop_required: 2 operations: - path: /api/v1/archived-workflows method: get operationId: ArchivedWorkflowService_ListArchivedWorkflows x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/archived-workflows-label-keys method: get operationId: ArchivedWorkflowService_ListArchivedWorkflowLabelKeys x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/archived-workflows-label-values method: get operationId: ArchivedWorkflowService_ListArchivedWorkflowLabelValues x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/archived-workflows/{uid} method: get operationId: ArchivedWorkflowService_GetArchivedWorkflow x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/archived-workflows/{uid} method: delete operationId: ArchivedWorkflowService_DeleteArchivedWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/archived-workflows/{uid}/resubmit method: put operationId: ArchivedWorkflowService_ResubmitArchivedWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/archived-workflows/{uid}/retry method: put operationId: ArchivedWorkflowService_RetryArchivedWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/cluster-workflow-templates method: get operationId: ClusterWorkflowTemplateService_ListClusterWorkflowTemplates x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/cluster-workflow-templates method: post operationId: ClusterWorkflowTemplateService_CreateClusterWorkflowTemplate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/cluster-workflow-templates/lint method: post operationId: ClusterWorkflowTemplateService_LintClusterWorkflowTemplate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/cluster-workflow-templates/{name} method: get operationId: ClusterWorkflowTemplateService_GetClusterWorkflowTemplate x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/cluster-workflow-templates/{name} method: put operationId: ClusterWorkflowTemplateService_UpdateClusterWorkflowTemplate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/cluster-workflow-templates/{name} method: delete operationId: ClusterWorkflowTemplateService_DeleteClusterWorkflowTemplate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/cron-workflows/{namespace} method: get operationId: CronWorkflowService_ListCronWorkflows x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/cron-workflows/{namespace} method: post operationId: CronWorkflowService_CreateCronWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/cron-workflows/{namespace}/lint method: post operationId: CronWorkflowService_LintCronWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/cron-workflows/{namespace}/{name} method: get operationId: CronWorkflowService_GetCronWorkflow x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/cron-workflows/{namespace}/{name} method: put operationId: CronWorkflowService_UpdateCronWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/cron-workflows/{namespace}/{name} method: delete operationId: CronWorkflowService_DeleteCronWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/cron-workflows/{namespace}/{name}/resume method: put operationId: CronWorkflowService_ResumeCronWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/cron-workflows/{namespace}/{name}/suspend method: put operationId: CronWorkflowService_SuspendCronWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/event-sources/{namespace} method: get operationId: EventSourceService_ListEventSources x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/event-sources/{namespace} method: post operationId: EventSourceService_CreateEventSource x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/event-sources/{namespace}/{name} method: get operationId: EventSourceService_GetEventSource x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/event-sources/{namespace}/{name} method: put operationId: EventSourceService_UpdateEventSource x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/event-sources/{namespace}/{name} method: delete operationId: EventSourceService_DeleteEventSource x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/events/{namespace}/{discriminator} method: post operationId: EventService_ReceiveEvent x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/info method: get operationId: InfoService_GetInfo x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/sensors/{namespace} method: get operationId: SensorService_ListSensors x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/sensors/{namespace} method: post operationId: SensorService_CreateSensor x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/sensors/{namespace}/{name} method: get operationId: SensorService_GetSensor x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/sensors/{namespace}/{name} method: put operationId: SensorService_UpdateSensor x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/sensors/{namespace}/{name} method: delete operationId: SensorService_DeleteSensor x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/stream/event-sources/{namespace} method: get operationId: EventSourceService_WatchEventSources x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stream/event-sources/{namespace}/logs method: get operationId: EventSourceService_EventSourcesLogs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stream/events/{namespace} method: get operationId: WorkflowService_WatchEvents x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stream/sensors/{namespace} method: get operationId: SensorService_WatchSensors x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stream/sensors/{namespace}/logs method: get operationId: SensorService_SensorsLogs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/sync/{namespace} method: post operationId: SyncService_CreateSyncLimit x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/sync/{namespace}/{key} method: get operationId: SyncService_GetSyncLimit x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/sync/{namespace}/{key} method: put operationId: SyncService_UpdateSyncLimit x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/sync/{namespace}/{key} method: delete operationId: SyncService_DeleteSyncLimit x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tracking/event method: post operationId: InfoService_CollectEvent x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/userinfo method: get operationId: InfoService_GetUserInfo x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/version method: get operationId: InfoService_GetVersion x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/workflow-event-bindings/{namespace} method: get operationId: EventService_ListWorkflowEventBindings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/workflow-events/{namespace} method: get operationId: WorkflowService_WatchWorkflows x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/workflow-templates/{namespace} method: get operationId: WorkflowTemplateService_ListWorkflowTemplates x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/workflow-templates/{namespace} method: post operationId: WorkflowTemplateService_CreateWorkflowTemplate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflow-templates/{namespace}/lint method: post operationId: WorkflowTemplateService_LintWorkflowTemplate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflow-templates/{namespace}/{name} method: get operationId: WorkflowTemplateService_GetWorkflowTemplate x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/workflow-templates/{namespace}/{name} method: put operationId: WorkflowTemplateService_UpdateWorkflowTemplate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflow-templates/{namespace}/{name} method: delete operationId: WorkflowTemplateService_DeleteWorkflowTemplate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflows/{namespace} method: get operationId: WorkflowService_ListWorkflows x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/workflows/{namespace} method: post operationId: WorkflowService_CreateWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflows/{namespace}/lint method: post operationId: WorkflowService_LintWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflows/{namespace}/submit method: post operationId: WorkflowService_SubmitWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflows/{namespace}/{name} method: get operationId: WorkflowService_GetWorkflow x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/workflows/{namespace}/{name} method: delete operationId: WorkflowService_DeleteWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflows/{namespace}/{name}/log method: get operationId: WorkflowService_WorkflowLogs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/workflows/{namespace}/{name}/resubmit method: put operationId: WorkflowService_ResubmitWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflows/{namespace}/{name}/resume method: put operationId: WorkflowService_ResumeWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflows/{namespace}/{name}/retry method: put operationId: WorkflowService_RetryWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflows/{namespace}/{name}/set method: put operationId: WorkflowService_SetWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflows/{namespace}/{name}/stop method: put operationId: WorkflowService_StopWorkflow x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/v1/workflows/{namespace}/{name}/suspend method: put operationId: WorkflowService_SuspendWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflows/{namespace}/{name}/terminate method: put operationId: WorkflowService_TerminateWorkflow x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/v1/workflows/{namespace}/{name}/{podName}/log method: get operationId: WorkflowService_PodLogs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /artifact-files/{namespace}/{idDiscriminator}/{id}/{nodeId}/{artifactDiscriminator}/{artifactName} method: get operationId: ArtifactService_GetArtifactFile x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /artifacts-by-uid/{uid}/{nodeId}/{artifactName} method: get operationId: ArtifactService_GetOutputArtifactByUID x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /artifacts/{namespace}/{name}/{nodeId}/{artifactName} method: get operationId: ArtifactService_GetOutputArtifact x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /input-artifacts-by-uid/{uid}/{nodeId}/{artifactName} method: get operationId: ArtifactService_GetInputArtifactByUID x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /input-artifacts/{namespace}/{name}/{nodeId}/{artifactName} method: get operationId: ArtifactService_GetInputArtifact x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none