generated: '2026-07-15' method: generated source: openapi/campfire-hq-openapi.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 43 by_action_class: connected: 26 acting: 17 by_consequence: read: 26 write: 14 physical: 3 human_in_the_loop_required: 0 operations: - path: /ca/api/account method: get operationId: list_accounts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ca/api/account method: post operationId: create_account x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ca/api/cash-basis method: get operationId: ca_api_cash_basis_retrieve x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ca/api/file method: get operationId: ca_api_file_list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ca/api/get_balance_sheet method: get operationId: ca_api_get_balance_sheet_retrieve x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ca/api/get_cash_flow method: get operationId: ca_api_get_cash_flow_retrieve x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ca/api/get_income_statement method: get operationId: ca_api_get_income_statement_retrieve x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ca/api/get_trial_balance method: get operationId: ca_api_get_trial_balance_retrieve x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ca/api/transaction method: get operationId: list_bank_transactions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ca/api/transaction method: post operationId: create_bank_transaction x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ca/api/v1/custom-fields/reorder method: post operationId: ca_api_v1_custom_fields_reorder_create x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /coa/api/budgets method: get operationId: coa_api_budgets_list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /coa/api/budgets method: post operationId: coa_api_budgets_create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /coa/api/budgets/{id} method: get operationId: coa_api_budgets_retrieve x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /coa/api/entity method: get operationId: coa_api_entity_list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /coa/api/entity method: post operationId: coa_api_entity_create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /coa/api/entity/{entity_id}/attachment method: post operationId: coa_api_entity_attachment_create x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /coa/api/fixed-asset method: get operationId: coa_api_fixed_asset_list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /coa/api/fixed-asset method: post operationId: coa_api_fixed_asset_create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /coa/api/general-ledger method: get operationId: coa_api_general_ledger_retrieve x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /coa/api/tag method: get operationId: coa_api_tag_list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /coa/api/tag method: post operationId: coa_api_tag_create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /coa/api/transaction method: get operationId: coa_api_transaction_retrieve x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /coa/api/v1/bill-draft method: get operationId: list_bill_drafts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /coa/api/v1/bill-draft method: post operationId: create_bill_draft x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /coa/api/v1/bill/ method: get operationId: coa_api_v1_bill_retrieve x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /coa/api/v1/bill/ method: post operationId: coa_api_v1_bill_create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /coa/api/v1/credit-memo method: get operationId: coa_api_v1_credit_memo_list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /coa/api/v1/credit-memo method: post operationId: coa_api_v1_credit_memo_create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /coa/api/v1/invoice/ method: get operationId: coa_api_v1_invoice_list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /coa/api/v1/invoice/ method: post operationId: coa_api_v1_invoice_create x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /coa/api/v2/reconciliation method: get operationId: coa_api_v2_reconciliation_list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /coa/api/v2/reconciliation method: post operationId: coa_api_v2_reconciliation_create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /coa/api/vendor method: get operationId: coa_api_vendor_list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /coa/api/vendor method: post operationId: coa_api_vendor_create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /integrations/api/v1/webhook method: get operationId: integrations_api_v1_webhook_list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /integrations/api/v1/webhook method: post operationId: integrations_api_v1_webhook_create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /integrations/api/v1/webhook/{id} method: get operationId: integrations_api_v1_webhook_retrieve x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /rr/api/v1/contracts method: get operationId: list_contracts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /rr/api/v1/contracts method: post operationId: create_contract x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /rr/api/v1/customers method: get operationId: rr_api_v1_customers_list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /rr/api/v1/product method: get operationId: list_products x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /rr/api/v1/product method: post operationId: create_product x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required