generated: '2026-07-18' method: generated source: openapi/chef-software-applications-applications-openapi.json, openapi/chef-software-cds-cds-openapi.json, openapi/chef-software-cfgmgmt-cfgmgmt-openapi.json, openapi/chef-software-compliance-profiles-profiles-openapi.json, openapi/chef-software-compliance-reporting-reporting-openapi.json, openapi/chef-software-compliance-reporting-stats-stats-openapi.json, openapi/chef-software-compliance-scanner-jobs-jobs-openapi.json, openapi/chef-software-data_feed-data_feed-openapi.json, openapi/chef-software-data_lifecycle-data_lifecycle-openapi.json, openapi/chef-software-event_feed-event_feed-openapi.json, openapi/chef-software-iam-v2-introspect-openapi.json, openapi/chef-software-iam-v2-policy-openapi.json, openapi/chef-software-iam-v2-rules-openapi.json, openapi/chef-software-iam-v2-teams-openapi.json, openapi/chef-software-iam-v2-tokens-openapi.json, openapi/chef-software-iam-v2-users-openapi.json, openapi/chef-software-infra_proxy-infra_proxy-openapi.json, openapi/chef-software-ingest-chef-openapi.json, openapi/chef-software-ingest-job_scheduler-openapi.json, openapi/chef-software-nodes-manager-manager-openapi.json, openapi/chef-software-nodes-nodes-openapi.json, openapi/chef-software-report_manager-report_manager-openapi.json, openapi/chef-software-secrets-secrets-openapi.json, openapi/chef-software-user_settings-user_settings-openapi.json description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 256 by_action_class: acting: 144 connected: 112 by_consequence: write: 135 read: 112 safety-critical: 7 physical: 2 human_in_the_loop_required: 7 operations: - path: /api/v0/applications/delete_disconnected_services method: post operationId: ApplicationsService_DeleteDisconnectedServices x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/applications/delete_services_by_id method: post operationId: ApplicationsService_DeleteServicesByID x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/applications/disconnected_services method: get operationId: ApplicationsService_GetDisconnectedServices x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/applications/service-groups method: get operationId: ApplicationsService_GetServiceGroups x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/applications/service-groups/{service_group_id} method: get operationId: ApplicationsService_GetServicesBySG x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/applications/service_groups_health_counts method: get operationId: ApplicationsService_GetServiceGroupsHealthCounts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/applications/services method: get operationId: ApplicationsService_GetServices x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/applications/services-distinct-values method: get operationId: ApplicationsService_GetServicesDistinctValues x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/applications/stats method: get operationId: ApplicationsService_GetServicesStats x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/applications/telemetry/services/count method: get operationId: ApplicationsService_GetServicesUsageCount x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/applications/telemetry/services/count/updated method: put operationId: ApplicationsService_UpdateTelemetryReported x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/applications/version method: get operationId: ApplicationsService_GetVersion x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/retention/service_groups/delete_disconnected_services/config method: get operationId: ApplicationsService_GetDeleteDisconnectedServicesConfig x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/retention/service_groups/delete_disconnected_services/config method: post operationId: ApplicationsService_UpdateDeleteDisconnectedServicesConfig x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/retention/service_groups/delete_disconnected_services/run method: post operationId: ApplicationsService_RunDeleteDisconnectedServicesJob x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/retention/service_groups/disconnected_services/config method: get operationId: ApplicationsService_GetDisconnectedServicesConfig x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/retention/service_groups/disconnected_services/config method: post operationId: ApplicationsService_UpdateDisconnectedServicesConfig x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/retention/service_groups/disconnected_services/run method: post operationId: ApplicationsService_RunDisconnectedServicesJob x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/beta/content/credentials method: post operationId: Cds_SubmitCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/beta/content/enabled method: get operationId: Cds_IsContentEnabled x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/beta/content/install method: post operationId: Cds_InstallContentItem x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/beta/content/items method: get operationId: Cds_ListContentItems x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/beta/cfgmgmt/rollouts/create method: post operationId: ConfigMgmt_CreateRollout x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/beta/cfgmgmt/rollouts/find method: get operationId: ConfigMgmt_GetRolloutForChefRun x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/beta/cfgmgmt/rollouts/list method: get operationId: ConfigMgmt_GetRollouts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/beta/cfgmgmt/rollouts/progress_by_node_segment method: get operationId: ConfigMgmt_ListNodeSegmentsWithRolloutProgress x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/beta/cfgmgmt/rollouts/rollout/{rollout_id} method: get operationId: ConfigMgmt_GetRolloutById x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/beta/cfgmgmt/rollouts/test_create method: post operationId: ConfigMgmt_CreateRolloutTest x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/cfgmgmt/errors method: get operationId: ConfigMgmt_GetErrors x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/cfgmgmt/node_metadata_counts method: get operationId: ConfigMgmt_GetNodeMetadataCounts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/cfgmgmt/node_runs_daily_status_time_series method: get operationId: ConfigMgmt_GetNodeRunsDailyStatusTimeSeries x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/cfgmgmt/nodes method: get operationId: ConfigMgmt_GetNodes x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/cfgmgmt/nodes/{node_id}/attribute method: get operationId: ConfigMgmt_GetAttributes x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/cfgmgmt/nodes/{node_id}/runs method: get operationId: ConfigMgmt_GetRuns x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/cfgmgmt/nodes/{node_id}/runs/{run_id} method: get operationId: ConfigMgmt_GetNodeRun x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/cfgmgmt/organizations method: get operationId: ConfigMgmt_GetOrganizations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/cfgmgmt/policy_revision/{revision_id} method: get operationId: ConfigMgmt_GetPolicyCookbooks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/cfgmgmt/source_fqdns method: get operationId: ConfigMgmt_GetSourceFqdns x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/cfgmgmt/stats/checkin_counts_timeseries method: get operationId: ConfigMgmt_GetCheckInCountsTimeSeries x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/cfgmgmt/stats/missing_node_duration_counts method: get operationId: ConfigMgmt_GetMissingNodeDurationCounts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/cfgmgmt/stats/node_counts method: get operationId: ConfigMgmt_GetNodesCounts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/cfgmgmt/stats/run_counts method: get operationId: ConfigMgmt_GetRunsCounts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/cfgmgmt/suggestions method: get operationId: ConfigMgmt_GetSuggestions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/cfgmgmt/telemetry/nodes/count method: get operationId: ConfigMgmt_GetNodesUsageCount x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/cfgmgmt/telemetry/nodes/count/updated method: put operationId: ConfigMgmt_UpdateTelemetryReported x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/cfgmgmt/version method: get operationId: ConfigMgmt_GetVersion x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/compliance/market/read/{name}/version/{version} method: get operationId: ProfilesService_ReadFromMarket x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/compliance/profiles/metasearch method: post operationId: ProfilesService_MetaSearch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/profiles/read/{owner}/{name}/version/{version} method: get operationId: ProfilesService_Read x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/compliance/profiles/search method: post operationId: ProfilesService_List x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/profiles/{owner}/{name}/version/{version} method: delete operationId: ProfilesService_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/reporting/assets/config method: put operationId: ReportingService_SetAssetConfig x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/reporting/assets/config/search method: get operationId: ReportingService_GetAssetConfig x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/compliance/reporting/assets/count method: post operationId: ReportingService_AssetCount x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/reporting/assets/search method: post operationId: ReportingService_ListAsset x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/reporting/controls method: post operationId: ReportingService_ListControlItems x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/v0/compliance/reporting/controls/search method: post operationId: ReportingService_ListControlItemsRange x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/v0/compliance/reporting/nodeheader/id/{id} method: post operationId: ReportingService_ReadNodeHeader x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/reporting/nodes/id/{id} method: get operationId: ReportingService_ReadNode x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/compliance/reporting/nodes/search method: post operationId: ReportingService_ListNodes x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/reporting/profiles method: post operationId: ReportingService_ListProfiles x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/reporting/report-ids method: post operationId: ReportingService_ListReportIds x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/reporting/reportcontrols/id/{id} method: post operationId: ReportingService_ListControlInfo x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/v0/compliance/reporting/reportmanager/export method: post operationId: ReportingService_ExportReportManager x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/reporting/reports method: post operationId: ReportingService_ListReports x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/reporting/reports/id/{id} method: post operationId: ReportingService_ReadReport x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/reporting/suggestions method: post operationId: ReportingService_ListSuggestions x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/reporting/version method: get operationId: ReportingService_GetVersion x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/compliance/reporting/stats/failures method: post operationId: StatsService_ReadFailures x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/reporting/stats/nodes/count method: get operationId: StatsService_GetNodesUsageCount x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/compliance/reporting/stats/nodes/count/updated method: put operationId: StatsService_UpdateTelemetryReported x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/reporting/stats/profiles method: post operationId: StatsService_ReadProfiles x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/reporting/stats/summary method: post operationId: StatsService_ReadSummary x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/reporting/stats/trend method: post operationId: StatsService_ReadTrend x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/scanner/jobs method: post operationId: JobsService_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/scanner/jobs/id/{id} method: get operationId: JobsService_Read x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/compliance/scanner/jobs/id/{id} method: delete operationId: JobsService_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/scanner/jobs/id/{id} method: put operationId: JobsService_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/compliance/scanner/jobs/rerun/id/{id} method: get operationId: JobsService_Rerun x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/compliance/scanner/jobs/search method: post operationId: JobsService_List x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/datafeed/config method: get operationId: DatafeedService_GlobalDataFeedConfig x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/datafeed/destination method: post operationId: DatafeedService_AddDestination x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/datafeed/destination/enable/{id} method: patch operationId: DatafeedService_EnableDestination x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/datafeed/destination/{id} method: get operationId: DatafeedService_GetDestination x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/datafeed/destination/{id} method: delete operationId: DatafeedService_DeleteDestination x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/datafeed/destination/{id} method: patch operationId: DatafeedService_UpdateDestination x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/datafeed/destinations method: post operationId: DatafeedService_ListDestinations x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/datafeed/destinations/test method: post operationId: DatafeedService_TestDestination x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/data-lifecycle/compliance/config method: put operationId: DataLifecycle_SetComplianceConfig x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/data-lifecycle/compliance/run method: post operationId: DataLifecycle_RunCompliance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/data-lifecycle/compliance/status method: get operationId: DataLifecycle_GetComplianceStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/data-lifecycle/config method: put operationId: DataLifecycle_SetConfig x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/data-lifecycle/event-feed/config method: put operationId: DataLifecycle_SetEventFeedConfig x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/data-lifecycle/event-feed/run method: post operationId: DataLifecycle_RunEventFeed x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/data-lifecycle/event-feed/status method: get operationId: DataLifecycle_GetEventFeedStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/data-lifecycle/infra/config method: put operationId: DataLifecycle_SetInfraConfig x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/data-lifecycle/infra/run method: post operationId: DataLifecycle_RunInfra x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/data-lifecycle/infra/status method: get operationId: DataLifecycle_GetInfraStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/data-lifecycle/run method: post operationId: DataLifecycle_Run x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/data-lifecycle/services/config method: put operationId: DataLifecycle_SetServicesConfig x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/data-lifecycle/services/run method: post operationId: DataLifecycle_RunServices x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/data-lifecycle/services/status method: get operationId: DataLifecycle_GetServicesStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/data-lifecycle/status method: get operationId: DataLifecycle_GetStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/event_task_counts method: get operationId: EventFeedService_GetEventTaskCounts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/event_type_counts method: get operationId: EventFeedService_GetEventTypeCounts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/eventexport method: get operationId: EventFeedService_EventExport x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/eventfeed method: get operationId: EventFeedService_GetEventFeed x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/eventstrings method: get operationId: EventFeedService_GetEventStringBuckets x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/introspect method: get operationId: Authorization_IntrospectAll x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/introspect method: post operationId: Authorization_Introspect x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/introspect_some method: post operationId: Authorization_IntrospectSome x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/introspect_projects method: get operationId: Policies_IntrospectAllProjects x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/policies method: get operationId: Policies_ListPolicies x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/policies method: post operationId: Policies_CreatePolicy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/policies/{id} method: get operationId: Policies_GetPolicy x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/policies/{id} method: delete operationId: Policies_DeletePolicy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/policies/{id} method: put operationId: Policies_UpdatePolicy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/policies/{id}/members method: get operationId: Policies_ListPolicyMembers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/policies/{id}/members method: put operationId: Policies_ReplacePolicyMembers x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/policies/{id}/members:add method: post operationId: Policies_AddPolicyMembers x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/policies/{id}/members:remove method: post operationId: Policies_RemovePolicyMembers x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/policy_version method: get operationId: Policies_GetPolicyVersion x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/projects method: get operationId: Policies_ListProjects x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/projects method: post operationId: Policies_CreateProject x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/projects/{id} method: get operationId: Policies_GetProject x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/projects/{id} method: delete operationId: Policies_DeleteProject x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/projects/{id} method: put operationId: Policies_UpdateProject x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/roles method: get operationId: Policies_ListRoles x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/roles method: post operationId: Policies_CreateRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/roles/{id} method: get operationId: Policies_GetRole x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/roles/{id} method: delete operationId: Policies_DeleteRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/roles/{id} method: put operationId: Policies_UpdateRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/apply-rules method: get operationId: Rules_ApplyRulesStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/apply-rules method: delete operationId: Rules_ApplyRulesCancel x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/apply-rules method: post operationId: Rules_ApplyRulesStart x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/projects/{id}/rules method: get operationId: Rules_ListRulesForProject x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/projects/{project_id}/rules method: post operationId: Rules_CreateRule x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/projects/{project_id}/rules/{id} method: get operationId: Rules_GetRule x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/projects/{project_id}/rules/{id} method: delete operationId: Rules_DeleteRule x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/projects/{project_id}/rules/{id} method: put operationId: Rules_UpdateRule x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/teams method: get operationId: Teams_ListTeams x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/teams method: post operationId: Teams_CreateTeam x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/teams/{id} method: get operationId: Teams_GetTeam x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/teams/{id} method: delete operationId: Teams_DeleteTeam x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/teams/{id} method: put operationId: Teams_UpdateTeam x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/teams/{id}/users method: get operationId: Teams_GetTeamMembership x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/teams/{id}/users:add method: post operationId: Teams_AddTeamMembers x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/teams/{id}/users:remove method: post operationId: Teams_RemoveTeamMembers x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/users/{membership_id}/teams method: get operationId: Teams_GetTeamsForMember x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/tokens method: get operationId: Tokens_ListTokens x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/tokens method: post operationId: Tokens_CreateToken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/tokens/{id} method: get operationId: Tokens_GetToken x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/tokens/{id} method: delete operationId: Tokens_DeleteToken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/tokens/{id} method: put operationId: Tokens_UpdateToken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/self/{id} method: put operationId: Users_UpdateSelf x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/users method: get operationId: Users_ListUsers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/users method: post operationId: Users_CreateUser x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/users/{id} method: get operationId: Users_GetUser x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /apis/iam/v2/users/{id} method: delete operationId: Users_DeleteUser x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /apis/iam/v2/users/{id} method: put operationId: Users_UpdateUser x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers method: get operationId: InfraProxy_GetServers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers method: post operationId: InfraProxy_CreateServer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/server_status method: get operationId: InfraProxy_GetServerStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{id} method: get operationId: InfraProxy_GetServer x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{id} method: delete operationId: InfraProxy_DeleteServer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{id} method: put operationId: InfraProxy_UpdateServer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs method: get operationId: InfraProxy_GetOrgs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs method: post operationId: InfraProxy_CreateOrg x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{id} method: get operationId: InfraProxy_GetOrg x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{id} method: delete operationId: InfraProxy_DeleteOrg x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{id} method: put operationId: InfraProxy_UpdateOrg x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{id}/reset-key method: put operationId: InfraProxy_ResetOrgAdminKey x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/clients method: get operationId: InfraProxy_GetClients x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/clients method: post operationId: InfraProxy_CreateClient x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/clients/{name} method: get operationId: InfraProxy_GetClient x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/clients/{name} method: delete operationId: InfraProxy_DeleteClient x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/clients/{name}/reset method: put operationId: InfraProxy_ResetClientKey x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/cookbooks method: get operationId: InfraProxy_GetCookbooks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/cookbooks/{name} method: get operationId: InfraProxy_GetCookbookVersions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/cookbooks/{name}/{version} method: get operationId: InfraProxy_GetCookbook x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/cookbooks/{name}/{version}/file-content method: get operationId: InfraProxy_GetCookbookFileContent x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags method: get operationId: InfraProxy_GetDataBags x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags method: post operationId: InfraProxy_CreateDataBag x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags/{name} method: get operationId: InfraProxy_GetDataBagItems x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags/{name} method: delete operationId: InfraProxy_DeleteDataBag x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags/{name} method: post operationId: InfraProxy_CreateDataBagItem x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags/{name}/{item_id} method: put operationId: InfraProxy_UpdateDataBagItem x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags/{name}/{item} method: get operationId: InfraProxy_GetDataBagItem x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags/{name}/{item} method: delete operationId: InfraProxy_DeleteDataBagItem x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/environments method: get operationId: InfraProxy_GetEnvironments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/environments method: post operationId: InfraProxy_CreateEnvironment x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/environments/{name} method: get operationId: InfraProxy_GetEnvironment x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/environments/{name} method: delete operationId: InfraProxy_DeleteEnvironment x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/environments/{name} method: put operationId: InfraProxy_UpdateEnvironment x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/environments/{name}/recipes method: get operationId: InfraProxy_GetEnvironmentRecipes x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/node/{name}/runlist/{environment} method: get operationId: InfraProxy_GetNodeExpandedRunList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/nodes method: get operationId: InfraProxy_GetNodes x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/nodes/{name} method: get operationId: InfraProxy_GetNode x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/nodes/{name} method: delete operationId: InfraProxy_DeleteNode x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/nodes/{name} method: put operationId: InfraProxy_UpdateNode x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/nodes/{name}/attributes method: put operationId: InfraProxy_UpdateNodeAttributes x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/nodes/{name}/environment method: put operationId: InfraProxy_UpdateNodeEnvironment x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/nodes/{name}/tags method: put operationId: InfraProxy_UpdateNodeTags x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/policyfiles method: get operationId: InfraProxy_GetPolicyfiles x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/policyfiles/{name} method: get operationId: InfraProxy_GetPolicyfile x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/policyfiles/{name} method: delete operationId: InfraProxy_DeletePolicyfile x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/policyfiles/{name}/revisions method: get operationId: InfraProxy_GetPolicyfileRevisions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/policygroups/{name} method: get operationId: InfraProxy_GetPolicygroup x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/roles method: get operationId: InfraProxy_GetRoles x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/roles method: post operationId: InfraProxy_CreateRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/roles/{name} method: get operationId: InfraProxy_GetRole x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/roles/{name} method: delete operationId: InfraProxy_DeleteRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/roles/{name} method: put operationId: InfraProxy_UpdateRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/roles/{name}/environments method: get operationId: InfraProxy_GetRoleEnvironments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/roles/{name}/runlist/{environment} method: get operationId: InfraProxy_GetRoleExpandedRunList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/orgs/{org_id}/users method: get operationId: InfraProxy_GetOrgUsersList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/infra/servers/{server_id}/users method: post operationId: InfraProxy_GetServerUsersList x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/ingest/events/chef/action method: post operationId: ChefIngester_ProcessChefAction x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/ingest/events/chef/liveness method: post operationId: ChefIngester_ProcessLivenessPing x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/ingest/events/chef/node-multiple-deletes method: post operationId: ChefIngester_ProcessMultipleNodeDeletes x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/ingest/events/chef/nodedelete method: post operationId: ChefIngester_ProcessNodeDelete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/ingest/events/chef/run method: post operationId: ChefIngester_ProcessChefRun x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/ingest/version method: get operationId: ChefIngester_GetVersion x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/retention/nodes/delete-nodes/config method: post operationId: JobScheduler_ConfigureDeleteNodesScheduler x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/retention/nodes/missing-nodes-deletion/config method: post operationId: JobScheduler_ConfigureMissingNodesForDeletionScheduler x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/retention/nodes/missing-nodes/config method: post operationId: JobScheduler_ConfigureNodesMissingScheduler x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/retention/nodes/status method: get operationId: JobScheduler_GetStatusJobScheduler x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/nodemanagers method: post operationId: NodeManagerService_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/nodemanagers/id/{id} method: get operationId: NodeManagerService_Read x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/nodemanagers/id/{id} method: delete operationId: NodeManagerService_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/nodemanagers/id/{id} method: put operationId: NodeManagerService_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/nodemanagers/id/{id}/with-node-state/stopped method: delete operationId: NodeManagerService_DeleteWithNodeStateStopped x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/v0/nodemanagers/id/{id}/with-node-state/terminated method: delete operationId: NodeManagerService_DeleteWithNodeStateTerminated x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/v0/nodemanagers/id/{id}/with-nodes method: delete operationId: NodeManagerService_DeleteWithNodes x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/nodemanagers/id/{node_manager_id}/search-fields method: post operationId: NodeManagerService_SearchNodeFields x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/nodemanagers/id/{node_manager_id}/search-nodes method: post operationId: NodeManagerService_SearchNodes x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/nodemanagers/rerun/id/{id} method: post operationId: NodeManagerService_Connect x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/nodemanagers/search method: post operationId: NodeManagerService_List x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/nodes method: post operationId: NodesService_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/nodes/bulk-create method: post operationId: NodesService_BulkCreate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/nodes/delete method: post operationId: NodesService_BulkDelete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/nodes/delete/ids method: post operationId: NodesService_BulkDeleteById x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/nodes/id/{id} method: get operationId: NodesService_Read x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/nodes/id/{id} method: delete operationId: NodesService_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/nodes/id/{id} method: put operationId: NodesService_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/nodes/rerun/id/{id} method: get operationId: NodesService_Rerun x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/nodes/search method: post operationId: NodesService_List x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/reportmanager/requests method: get operationId: ReportManagerService_ListDownloadReportRequests x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/secrets method: post operationId: SecretsService_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/secrets/id/{id} method: get operationId: SecretsService_Read x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/secrets/id/{id} method: delete operationId: SecretsService_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/secrets/id/{id} method: patch operationId: SecretsService_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/secrets/search method: post operationId: SecretsService_List x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/user-settings/{user.name}/{user.connector} method: get operationId: UserSettingsService_GetUserSettings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v0/user-settings/{user.name}/{user.connector} method: delete operationId: UserSettingsService_DeleteUserSettings x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v0/user-settings/{user.name}/{user.connector} method: put operationId: UserSettingsService_PutUserSettings x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required