generated: '2026-07-18' method: generated source: openapi/authlete-openapi-original.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 86 by_action_class: connected: 18 acting: 68 by_consequence: read: 18 write: 67 safety-critical: 1 human_in_the_loop_required: 1 operations: - path: /api/{serviceId}/service/get method: get operationId: service_get_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/service/get/list method: get operationId: service_get_list_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/service/create method: post operationId: service_create_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/service/update method: post operationId: service_update_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/service/delete method: delete operationId: service_delete_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/get/{clientId} method: get operationId: client_get_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/{serviceId}/client/get/list method: get operationId: client_get_list_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/{serviceId}/client/create method: post operationId: client_create_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/update/{clientId} method: post operationId: client_update_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/delete/{clientId} method: delete operationId: client_delete_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/lock_flag/update/{clientIdentifier} method: post operationId: client_flag_update_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/secret/refresh/{clientIdentifier} method: get operationId: client_secret_refresh_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/{serviceId}/client/secret/update/{clientIdentifier} method: post operationId: client_secret_update_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/authorization/get/list method: get operationId: client_authorization_get_list_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/{serviceId}/client/authorization/get/list method: post operationId: client_authorization_get_list_api_post x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/authorization/get/list/{subject} method: get operationId: client_authorization_get_list_by_subject_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/{serviceId}/client/authorization/update/{clientId} method: post operationId: client_authorization_update_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/authorization/delete/{clientId} method: delete operationId: client_authorization_delete_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/authorization/delete/{clientId} method: post operationId: client_authorization_delete_api_post x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/authorization/delete/{clientId}/{subject} method: delete operationId: client_authorization_delete_by_subject_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/granted_scopes/get/{clientId} method: get operationId: client_granted_scopes_get_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/{serviceId}/client/granted_scopes/get/{clientId} method: post operationId: client_granted_scopes_get_api_post x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/granted_scopes/get/{clientId}/{subject} method: get operationId: client_granted_scopes_get_by_subject_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/{serviceId}/client/granted_scopes/delete/{clientId} method: delete operationId: client_granted_scopes_delete_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/granted_scopes/delete/{clientId}/{subject} method: delete operationId: client_granted_scopes_delete_by_subject_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/authorization method: post operationId: auth_authorization_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/authorization/fail method: post operationId: auth_authorization_fail_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/authorization/issue method: post operationId: auth_authorization_issue_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/pushed_auth_req method: post operationId: pushed_auth_req_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/token method: post operationId: auth_token_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/token/fail method: post operationId: auth_token_fail_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/token/issue method: post operationId: auth_token_issue_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/introspection method: post operationId: auth_introspection_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/introspection/standard method: post operationId: auth_introspection_standard_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/revocation method: post operationId: auth_revocation_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/userinfo method: post operationId: auth_userinfo_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/userinfo/issue method: post operationId: auth_userinfo_issue_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/idtoken/reissue method: post operationId: idtoken_reissue_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/gm method: post operationId: grant_m_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/service/jwks/get method: get operationId: service_jwks_get_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/{serviceId}/service/configuration method: get operationId: service_configuration_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/{serviceId}/client/registration method: post operationId: client_registration_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/registration/get method: post operationId: client_registration_get_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/registration/update method: post operationId: client_registration_update_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/registration/delete method: post operationId: client_registration_delete_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/backchannel/authentication method: post operationId: backchannel_authentication_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/backchannel/authentication/issue method: post operationId: backchannel_authentication_issue_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/backchannel/authentication/fail method: post operationId: backchannel_authentication_fail_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/backchannel/authentication/complete method: post operationId: backchannel_authentication_complete_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/device/authorization method: post operationId: device_authorization_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/device/verification method: post operationId: device_verification_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/device/complete method: post operationId: device_complete_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/token/get/list method: get operationId: auth_token_get_list_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/{serviceId}/auth/token/create method: post operationId: auth_token_create_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/token/update method: post operationId: auth_token_update_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/token/delete/{accessTokenIdentifier} method: delete operationId: auth_token_delete_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/token/revoke method: post operationId: auth_token_revoke_api x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/{serviceId}/jose/verify method: post operationId: jose_verify_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/federation/configuration method: post operationId: federation_configuration_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/federation/registration method: post operationId: federation_registration_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/info method: get operationId: info_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/{serviceId}/client/extension/requestable_scopes/get/{clientId} method: get operationId: client_extension_requestables_scopes_get_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/{serviceId}/client/extension/requestable_scopes/update/{clientId} method: post operationId: client_extension_requestables_scopes_update_api_post x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/extension/requestable_scopes/update/{clientId} method: put operationId: client_extension_requestables_scopes_update_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/client/extension/requestable_scopes/delete/{clientId} method: delete operationId: client_extension_requestables_scopes_delete_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/hsk/create method: post operationId: hsk_create_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/hsk/delete/{handle} method: delete operationId: hsk_delete_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/hsk/get/{handle} method: get operationId: hsk_get_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/{serviceId}/hsk/get/list method: get operationId: hsk_get_list_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/misc/echo method: get operationId: misc_echo_api x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/{serviceId}/vci/metadata method: post operationId: vci_metadata_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/vci/jwtissuer method: post operationId: vci_jwtissuer_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/vci/jwks method: post operationId: vci_jwks_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/vci/offer/create method: post operationId: vci_offer_create_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/vci/offer/info method: post operationId: vci_offer_info_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/vci/single/parse method: post operationId: vci_single_parse_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/vci/single/issue method: post operationId: vci_single_issue_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/vci/batch/parse method: post operationId: vci_batch_parse_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/vci/batch/issue method: post operationId: vci_batch_issue_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/lifecycle/healthcheck method: get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/{serviceId}/vci/deferred/parse method: post operationId: vci_deferred_parse_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/vci/deferred/issue method: post operationId: vci_deferred_issue_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/authorization/ticket/info method: post operationId: getAuthorizationTicketInfo x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/auth/authorization/ticket/update method: post operationId: updateAuthorizationTicket x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/nativesso method: post operationId: native_sso_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/{serviceId}/nativesso/logout method: post operationId: native_sso_logout_api x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required