generated: '2026-07-18' method: generated source: openapi/celonis-agents-ai-openapi.yaml, openapi/celonis-knowledge-model-openapi.yaml, openapi/celonis-mcp-tool-calling-openapi.yaml, openapi/celonis-mlwb-openapi.yaml, openapi/celonis-permissions-openapi.yaml, openapi/celonis-subscription-openapi.yaml, openapi/celonis-team-openapi.yaml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 78 by_action_class: acting: 33 connected: 45 by_consequence: write: 28 read: 45 safety-critical: 5 human_in_the_loop_required: 5 operations: - path: /intelligence/api/ai/agents/{agent_id}/conversations method: post operationId: pushConversations x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /intelligence/api/knowledge-models method: get operationId: getKnowledgeModel x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/knowledge-models/{km_id} method: get operationId: getKnowledgeModelDetails x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/knowledge-models/{km_id}/filters method: get operationId: getFilters x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/knowledge-models/{km_id}/records method: get operationId: getRecords x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/knowledge-models/{km_id}/records/{record_id} method: get operationId: getRecordDetails x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/knowledge-models/{km_id}/data method: get operationId: getKnowledgeModelDataResult x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/knowledge-models/{km_id}/data method: post operationId: getKnowledgeModelQueryResultByUsingQueryInBody x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /intelligence/api/knowledge-models/{km_id}/records/{record_id}/data method: get operationId: getRecordDataResult x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/knowledge-models/{km_id}/records/{record_id}/data method: post operationId: getRecordDataResultByUsingQueryInBody x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /intelligence/api/knowledge-models/{km_id}/records/{record_id}/query method: get operationId: getRecordQueryResult x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/knowledge-models/{km_id}/kpis method: get operationId: getKpis x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/knowledge-models/{km_id}/query method: get operationId: getKnowledgeModelQueryResult x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/knowledge-models/{km_id}/spec method: get operationId: getKnowledgeModelSpec x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/knowledge-models/{km_id}/records/{record_id}/summary method: get operationId: summaryResult x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/odata/{km_id}.svc/$metadata method: get operationId: odataMetadataResult x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/odata/{km_id}.svc method: get operationId: odataServiceDefinitionResult x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/odata/{km_id}.svc/{record_id}_entries method: get operationId: odataServiceDataResult x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /studio-copilot/api/v1/mcp-servers/mcp/{asset_id}/tool-api/{tool_id} method: post operationId: postMcpServerToolResponse x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/scheduling/{id} method: get operationId: findOne x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/scheduling/{id} method: put operationId: update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/scheduling/{id} method: delete operationId: delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/scheduling/{id}/change-status method: put operationId: changeStatus x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/notebooks/{id} method: get operationId: findOne_1 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/notebooks/{id} method: put operationId: update_1 x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/notebooks/{id} method: delete operationId: delete_1 x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/notebooks/{id}/upgrade method: put operationId: upgrade x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/notebooks/{id}/resources method: get operationId: getResources x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/notebooks/{id}/resources method: put operationId: updateResources x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/notebooks/{id}/probe method: put operationId: activeProbe x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/notebooks/{id}/move method: put operationId: moveToWorkspace x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/notebooks/{id}/app-key method: get operationId: getApplicationKey x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/notebooks/{id}/app-key method: put operationId: setApplicationKey x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/executions/{id}/stop method: put operationId: stop x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/scheduling method: get operationId: findAll x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/scheduling method: post operationId: create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/scheduling/{id}/run method: post operationId: runSchedule x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/notebooks method: get operationId: findAll_1 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/notebooks method: post operationId: create_1 x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/notebooks/{id}/stop method: post operationId: stop_1 x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/notebooks/{id}/start method: post operationId: start x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/notebooks/{id}/open method: post operationId: open x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/jobs/{jobId}/executions method: get operationId: getExecutions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/jobs/{jobId}/executions method: post operationId: execute x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/jobs/{jobId}/application-key method: post operationId: updateApplicationKey x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/jobs/executions/{id}/stop method: post operationId: stop_2 x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/jobs/executions/{id}/logs method: get operationId: getLogs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/executions method: post operationId: execute_1 x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/scheduling/{id}/executions method: get operationId: findAllExecutions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/notebooks/{id}/versions/latest method: get operationId: getAllNewVersions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/notebooks/{id}/llm/access-info method: get operationId: getAccessInformationLLM x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/notebooks/{id}/content method: get operationId: getContents x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/notebooks/{id}/access-info method: get operationId: getAccessInformation x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/notebooks/versions method: get operationId: getAllVersions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/notebooks/node method: get operationId: hasDedicatedService x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/notebooks/machine-learning-images method: get operationId: getMachineLearningImages x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/notebooks/limit/reached method: get operationId: limitReached x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/jobs/executions/{id} method: get operationId: getExecution x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/jobs/executions/groups method: get operationId: getExecutionGroups x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/executions/{id} method: get operationId: find x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/executions/{id}/logs method: get operationId: getLogs_1 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/executions/triggered/{id} method: get operationId: getTriggeredExecutions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/executions/triggered-groups method: get operationId: getTriggeredExecutionGroups x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/executions/triggered-groups/{id} method: get operationId: getTriggeredExecutionGroup x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/authorization/external/permissions method: get operationId: findAllPermissions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/knowledge-models/{km_id}/triggers method: get operationId: getTriggers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/knowledge-models/{km_id}/triggers/{trigger_id} method: get operationId: getTriggerDetails x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/knowledge-models/{km_id}/triggers/{trigger_id}/subscriptions method: post operationId: createSubscription x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /intelligence/api/subscriptions method: get operationId: getSubscriptions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /intelligence/api/subscriptions/{subscription_id} method: delete operationId: unsubscribe x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /intelligence/api/subscriptions/{subscription_id} method: put operationId: updateSubscription x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /intelligence/api/subscriptions/{subscription_id}/events method: patch operationId: nextPageFromRemainingData x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /intelligence/api/subscriptions/{subscription_id}/pause method: patch operationId: pauseSubscription x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /intelligence/api/subscriptions/{subscription_id}/resume method: patch operationId: resumeSubscription x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /intelligence/api/subscriptions/{subscription_id}/resume-from-latest method: patch operationId: resumeSubscriptionNoHistory x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /intelligence/api/subscriptions/{subscription_id}/replay method: patch operationId: replaySubscriptionFromAnOffset x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/external/authentication-events method: get operationId: findAllAuthenticationEvents x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/external/members method: get operationId: getMemberProfileExternalTransport x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none