slug: autogpt
provider: AutoGPT
generated_by: planning/capability-mapping/scripts/classify_capabilities.py
model: claude-opus-5
frame:
- Software & Technology
min_confidence: 0.7
capability_model:
  source: https://github.com/vincentmakes/turbo-ea-capabilities
  license: CC-BY-4.0
  attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities,
    CC BY 4.0
  notice: NOTICE
edge_count: 3
edges:
- tag: Credits
  spec_file: autogpt-credits-api-openapi.yml
  capability_id: BC-4250
  capability_id_l1: BC-4250
  capability_name: Subscription Billing & Revenue Management
  confidence: 0.85
  evidence: GET /api/credits/invoices  List Stripe invoices; GET /api/credits/manage  Manage payment methods;
    POST /api/credits  Request credit top up; GET /api/credits/subscription  Get subscription tier, current
    cost, and all tier costs
  reason: 'Clearly the commercial monetisation surface: prepaid credit balances and top-ups, Stripe checkout
    fulfilment, invoices, payment-method management, refunds, and subscription tier changes. Spans invoicing,
    payment collection and subscription tiering, so no single L2 is named cleanly — L1 only.'
- tag: API Keys
  spec_file: autogpt-api-keys-api-openapi.yml
  capability_id: BC-4270.40
  capability_id_l1: BC-4270
  capability_name: Developer Identity & Credential Management
  confidence: 0.75
  evidence: POST /api/api-keys  Create new API key; DELETE /api/api-keys/{key_id}  Revoke API key; PUT
    /api/api-keys/{key_id}/permissions  Update key permissions
  reason: Issuance, scoping, suspension and revocation of API keys used by developers consuming the AutoGPT
    agent server API — Developer Identity & Credential Management; some chance the intended frame is general
    Identity & Access Management.
- tag: OAuth
  spec_file: autogpt-oauth-api-openapi.yml
  capability_id: BC-4270.40
  capability_id_l1: BC-4270
  capability_name: Developer Identity & Credential Management
  confidence: 0.75
  evidence: GET /api/oauth/apps/mine 'List My Oauth Apps'; POST /api/oauth/authorize; POST /api/oauth/token;
    POST /api/oauth/introspect; POST /api/oauth/revoke; schemas OAuthApplicationInfo, APIKeyPermission
  reason: 'This surface is an OAuth authorisation server for third-party applications built on the platform:
    registering/updating OAuth apps and issuing, introspecting and revoking tokens. That matches Developer
    Identity & Credential Management (issuance and stewardship of developer credentials and OAuth clients).
    Some chance it is better read as generic IAM, hence 0.75.'