generated: '2026-09-23' method: generated source: openapi/cisco-meraki-administered-api-openapi.yml, openapi/cisco-meraki-appliance-api-openapi.yml, openapi/cisco-meraki-camera-api-openapi.yml, openapi/cisco-meraki-campusgateway-api-openapi.yml, openapi/cisco-meraki-cellulargateway-api-openapi.yml, openapi/cisco-meraki-deployments-api-openapi.yml, openapi/cisco-meraki-devices-api-openapi.yml, openapi/cisco-meraki-firewall-applications-api-openapi.yml, openapi/cisco-meraki-insight-api-openapi.yml, openapi/cisco-meraki-licensing-api-openapi.yml, openapi/cisco-meraki-networks-api-openapi.yml, openapi/cisco-meraki-organizations-api-openapi.yml, openapi/cisco-meraki-policies-api-openapi.yml, openapi/cisco-meraki-reports-api-openapi.yml, openapi/cisco-meraki-sensor-api-openapi.yml, openapi/cisco-meraki-sm-api-openapi.yml, openapi/cisco-meraki-spaces-api-openapi.yml, openapi/cisco-meraki-switch-api-openapi.yml, openapi/cisco-meraki-wireless-api-openapi.yml, openapi/cisco-meraki-wirelesscontroller-api-openapi.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 1023 by_action_class: connected: 555 acting: 468 by_consequence: read: 555 write: 368 safety-critical: 14 physical: 86 human_in_the_loop_required: 14 operations: - path: /administered/identities/me method: get operationId: getAdministeredIdentitiesMe x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /administered/identities/me/api/keys method: get operationId: getAdministeredIdentitiesMeApiKeys x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /administered/identities/me/api/keys/generate method: post operationId: generateAdministeredIdentitiesMeApiKeys x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /administered/identities/me/api/keys/{suffix}/revoke method: post operationId: revokeAdministeredIdentitiesMeApiKeys x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /devices/{serial}/appliance/dhcp/subnets method: get operationId: getDeviceApplianceDhcpSubnets x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/appliance/interfaces/ports/update method: post operationId: createDeviceApplianceInterfacesPortsUpdate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/appliance/performance method: get operationId: getDeviceAppliancePerformance x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/appliance/prefixes/delegated method: get operationId: getDeviceAppliancePrefixesDelegated x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/appliance/prefixes/delegated/vlanAssignments method: get operationId: getDeviceAppliancePrefixesDelegatedVlanAssignments x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/appliance/radio/settings method: get operationId: getDeviceApplianceRadioSettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/appliance/radio/settings method: put operationId: updateDeviceApplianceRadioSettings x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/appliance/uplinks/settings method: get operationId: getDeviceApplianceUplinksSettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/appliance/uplinks/settings method: put operationId: updateDeviceApplianceUplinksSettings x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/appliance/vmx/authenticationToken method: post operationId: createDeviceApplianceVmxAuthenticationToken x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/clients/{clientId}/security/events method: get operationId: getNetworkApplianceClientSecurityEvents x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/connectivityMonitoringDestinations method: get operationId: getNetworkApplianceConnectivityMonitoringDestinations x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/connectivityMonitoringDestinations method: put operationId: updateNetworkApplianceConnectivityMonitoringDestinations x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/contentFiltering method: get operationId: getNetworkApplianceContentFiltering x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/contentFiltering method: put operationId: updateNetworkApplianceContentFiltering x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/contentFiltering/categories method: get operationId: getNetworkApplianceContentFilteringCategories x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/devices/redundancy method: put operationId: updateNetworkApplianceDevicesRedundancy x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/devices/redundancy/swap method: post operationId: createNetworkApplianceDevicesRedundancySwap x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/firewall/cellularFirewallRules method: get operationId: getNetworkApplianceFirewallCellularFirewallRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/firewall/cellularFirewallRules method: put operationId: updateNetworkApplianceFirewallCellularFirewallRules x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/firewall/firewalledServices method: get operationId: getNetworkApplianceFirewallFirewalledServices x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/firewall/firewalledServices/{service} method: get operationId: getNetworkApplianceFirewallFirewalledService x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/firewall/firewalledServices/{service} method: put operationId: updateNetworkApplianceFirewallFirewalledService x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/firewall/inboundCellularFirewallRules method: get operationId: getNetworkApplianceFirewallInboundCellularFirewallRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/firewall/inboundCellularFirewallRules method: put operationId: updateNetworkApplianceFirewallInboundCellularFirewallRules x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/firewall/inboundFirewallRules method: get operationId: getNetworkApplianceFirewallInboundFirewallRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/firewall/inboundFirewallRules method: put operationId: updateNetworkApplianceFirewallInboundFirewallRules x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/firewall/l3FirewallRules method: get operationId: getNetworkApplianceFirewallL3FirewallRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/firewall/l3FirewallRules method: put operationId: updateNetworkApplianceFirewallL3FirewallRules x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/firewall/l7FirewallRules method: get operationId: getNetworkApplianceFirewallL7FirewallRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/firewall/l7FirewallRules method: put operationId: updateNetworkApplianceFirewallL7FirewallRules x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/firewall/l7FirewallRules/applicationCategories method: get operationId: getNetworkApplianceFirewallL7FirewallRulesApplicationCategories x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/firewall/multicastForwarding method: put operationId: updateNetworkApplianceFirewallMulticastForwarding x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/firewall/oneToManyNatRules method: get operationId: getNetworkApplianceFirewallOneToManyNatRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/firewall/oneToManyNatRules method: put operationId: updateNetworkApplianceFirewallOneToManyNatRules x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/firewall/oneToOneNatRules method: get operationId: getNetworkApplianceFirewallOneToOneNatRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/firewall/oneToOneNatRules method: put operationId: updateNetworkApplianceFirewallOneToOneNatRules x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/firewall/portForwardingRules method: get operationId: getNetworkApplianceFirewallPortForwardingRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/firewall/portForwardingRules method: put operationId: updateNetworkApplianceFirewallPortForwardingRules x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/firewall/settings method: get operationId: getNetworkApplianceFirewallSettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/firewall/settings method: put operationId: updateNetworkApplianceFirewallSettings x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/interfaces/l3 method: post operationId: createNetworkApplianceInterfacesL3 x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/interfaces/l3/{interfaceId} method: put operationId: updateNetworkApplianceInterfacesL3 x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/interfaces/l3/{interfaceId} method: delete operationId: deleteNetworkApplianceInterfacesL3 x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/ports method: get operationId: getNetworkAppliancePorts x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/ports/{portId} method: get operationId: getNetworkAppliancePort x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/ports/{portId} method: put operationId: updateNetworkAppliancePort x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/prefixes/delegated/statics method: get operationId: getNetworkAppliancePrefixesDelegatedStatics x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/prefixes/delegated/statics method: post operationId: createNetworkAppliancePrefixesDelegatedStatic x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/prefixes/delegated/statics/{staticDelegatedPrefixId} method: get operationId: getNetworkAppliancePrefixesDelegatedStatic x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/prefixes/delegated/statics/{staticDelegatedPrefixId} method: put operationId: updateNetworkAppliancePrefixesDelegatedStatic x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/prefixes/delegated/statics/{staticDelegatedPrefixId} method: delete operationId: deleteNetworkAppliancePrefixesDelegatedStatic x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/rfProfiles method: get operationId: getNetworkApplianceRfProfiles x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/rfProfiles method: post operationId: createNetworkApplianceRfProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/rfProfiles/{rfProfileId} method: put operationId: updateNetworkApplianceRfProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/rfProfiles/{rfProfileId} method: delete operationId: deleteNetworkApplianceRfProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/rfProfiles/{rfProfileId} method: get operationId: getNetworkApplianceRfProfile x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/sdwan/internetPolicies method: put operationId: updateNetworkApplianceSdwanInternetPolicies x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/security/events method: get operationId: getNetworkApplianceSecurityEvents x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/security/intrusion method: get operationId: getNetworkApplianceSecurityIntrusion x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/security/intrusion method: put operationId: updateNetworkApplianceSecurityIntrusion x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/security/malware method: get operationId: getNetworkApplianceSecurityMalware x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/security/malware method: put operationId: updateNetworkApplianceSecurityMalware x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/settings method: get operationId: getNetworkApplianceSettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/settings method: put operationId: updateNetworkApplianceSettings x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/singleLan method: get operationId: getNetworkApplianceSingleLan x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/singleLan method: put operationId: updateNetworkApplianceSingleLan x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/ssids method: get operationId: getNetworkApplianceSsids x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/ssids/{number} method: get operationId: getNetworkApplianceSsid x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/ssids/{number} method: put operationId: updateNetworkApplianceSsid x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/staticRoutes method: get operationId: getNetworkApplianceStaticRoutes x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/staticRoutes method: post operationId: createNetworkApplianceStaticRoute x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/staticRoutes/{staticRouteId} method: get operationId: getNetworkApplianceStaticRoute x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/staticRoutes/{staticRouteId} method: put operationId: updateNetworkApplianceStaticRoute x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/staticRoutes/{staticRouteId} method: delete operationId: deleteNetworkApplianceStaticRoute x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/trafficShaping method: get operationId: getNetworkApplianceTrafficShaping x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/trafficShaping method: put operationId: updateNetworkApplianceTrafficShaping x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/trafficShaping/customPerformanceClasses method: get operationId: getNetworkApplianceTrafficShapingCustomPerformanceClasses x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/trafficShaping/customPerformanceClasses method: post operationId: createNetworkApplianceTrafficShapingCustomPerformanceClass x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/trafficShaping/customPerformanceClasses/{customPerformanceClassId} method: get operationId: getNetworkApplianceTrafficShapingCustomPerformanceClass x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/trafficShaping/customPerformanceClasses/{customPerformanceClassId} method: put operationId: updateNetworkApplianceTrafficShapingCustomPerformanceClass x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/trafficShaping/customPerformanceClasses/{customPerformanceClassId} method: delete operationId: deleteNetworkApplianceTrafficShapingCustomPerformanceClass x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/trafficShaping/rules method: put operationId: updateNetworkApplianceTrafficShapingRules x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/trafficShaping/rules method: get operationId: getNetworkApplianceTrafficShapingRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/trafficShaping/uplinkBandwidth method: get operationId: getNetworkApplianceTrafficShapingUplinkBandwidth x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/trafficShaping/uplinkBandwidth method: put operationId: updateNetworkApplianceTrafficShapingUplinkBandwidth x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/trafficShaping/uplinkSelection method: get operationId: getNetworkApplianceTrafficShapingUplinkSelection x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/trafficShaping/uplinkSelection method: put operationId: updateNetworkApplianceTrafficShapingUplinkSelection x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/trafficShaping/vpnExclusions method: put operationId: updateNetworkApplianceTrafficShapingVpnExclusions x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/umbrella/account/connect method: post operationId: connectNetworkApplianceUmbrellaAccount x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/umbrella/account/disconnect method: post operationId: disconnectNetworkApplianceUmbrellaAccount x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/umbrella/domains/exclusions method: put operationId: exclusionsNetworkApplianceUmbrellaDomains x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/umbrella/policies/add method: post operationId: addNetworkApplianceUmbrellaPolicies x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/umbrella/policies/remove method: post operationId: removeNetworkApplianceUmbrellaPolicies x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/umbrella/protection method: put operationId: protectionNetworkApplianceUmbrella x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /networks/{networkId}/appliance/uplinks/nat method: put operationId: updateNetworkApplianceUplinksNat x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/uplinks/usageHistory method: get operationId: getNetworkApplianceUplinksUsageHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/vlans method: get operationId: getNetworkApplianceVlans x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/vlans method: post operationId: createNetworkApplianceVlan x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/vlans/settings method: get operationId: getNetworkApplianceVlansSettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/vlans/settings method: put operationId: updateNetworkApplianceVlansSettings x-agentic-access: action-class: acting consequence: safety-critical subject: required scope: - sdwan:config:write audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /networks/{networkId}/appliance/vlans/{vlanId} method: get operationId: getNetworkApplianceVlan x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/vlans/{vlanId} method: put operationId: updateNetworkApplianceVlan x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/vlans/{vlanId} method: delete operationId: deleteNetworkApplianceVlan x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/vpn/bgp method: get operationId: getNetworkApplianceVpnBgp x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/vpn/bgp method: put operationId: updateNetworkApplianceVpnBgp x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/vpn/siteToSiteVpn method: get operationId: getNetworkApplianceVpnSiteToSiteVpn x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/vpn/siteToSiteVpn method: put operationId: updateNetworkApplianceVpnSiteToSiteVpn x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/warmSpare method: get operationId: getNetworkApplianceWarmSpare x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/appliance/warmSpare method: put operationId: updateNetworkApplianceWarmSpare x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/appliance/warmSpare/swap method: post operationId: swapNetworkApplianceWarmSpare x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/devices/interfaces/l3 method: get operationId: getOrganizationApplianceDevicesInterfacesL3 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/devices/interfaces/ports/byDevice method: get operationId: getOrganizationApplianceDevicesInterfacesPortsByDevice x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/devices/ports/transceivers/readings/history/byDevice method: get operationId: getOrganizationApplianceDevicesPortsTransceiversReadingsHistoryByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/devices/redundancy/byNetwork method: get operationId: getOrganizationApplianceDevicesRedundancyByNetwork x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/dns/local/profiles method: get operationId: getOrganizationApplianceDnsLocalProfiles x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/dns/local/profiles method: post operationId: createOrganizationApplianceDnsLocalProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/dns/local/profiles/assignments method: get operationId: getOrganizationApplianceDnsLocalProfilesAssignments x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/dns/local/profiles/assignments/bulkCreate method: post operationId: bulkOrganizationApplianceDnsLocalProfilesAssignmentsCreate x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/dns/local/profiles/assignments/bulkDelete method: post operationId: createOrganizationApplianceDnsLocalProfilesAssignmentsBulkDelete x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/dns/local/profiles/{profileId} method: put operationId: updateOrganizationApplianceDnsLocalProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/dns/local/profiles/{profileId} method: delete operationId: deleteOrganizationApplianceDnsLocalProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/dns/local/records method: get operationId: getOrganizationApplianceDnsLocalRecords x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/dns/local/records method: post operationId: createOrganizationApplianceDnsLocalRecord x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/dns/local/records/{recordId} method: put operationId: updateOrganizationApplianceDnsLocalRecord x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/dns/local/records/{recordId} method: delete operationId: deleteOrganizationApplianceDnsLocalRecord x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/dns/split/profiles method: get operationId: getOrganizationApplianceDnsSplitProfiles x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/dns/split/profiles method: post operationId: createOrganizationApplianceDnsSplitProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/dns/split/profiles/assignments method: get operationId: getOrganizationApplianceDnsSplitProfilesAssignments x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/dns/split/profiles/assignments/bulkCreate method: post operationId: createOrganizationApplianceDnsSplitProfilesAssignmentsBulkCreate x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/dns/split/profiles/assignments/bulkDelete method: post operationId: createOrganizationApplianceDnsSplitProfilesAssignmentsBulkDelete x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/dns/split/profiles/{profileId} method: put operationId: updateOrganizationApplianceDnsSplitProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/dns/split/profiles/{profileId} method: delete operationId: deleteOrganizationApplianceDnsSplitProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/firewall/multicastForwarding/byNetwork method: get operationId: getOrganizationApplianceFirewallMulticastForwardingByNetwork x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/interfaces/packets/overviews/byDevice method: get operationId: getOrganizationApplianceInterfacesPacketsOverviewsByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/routing/vrfs/settings method: get operationId: getOrganizationApplianceRoutingVrfsSettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/routing/vrfs/settings method: put operationId: updateOrganizationApplianceRoutingVrfsSettings x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/security/events method: get operationId: getOrganizationApplianceSecurityEvents x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/security/intrusion method: get operationId: getOrganizationApplianceSecurityIntrusion x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/security/intrusion method: put operationId: updateOrganizationApplianceSecurityIntrusion x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/trafficShaping/vpnExclusions/byNetwork method: get operationId: getOrganizationApplianceTrafficShapingVpnExclusionsByNetwork x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/uplink/statuses method: get operationId: getOrganizationApplianceUplinkStatuses x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/uplinks/nat/byNetwork method: get operationId: getOrganizationApplianceUplinksNatByNetwork x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/uplinks/statuses/overview method: get operationId: getOrganizationApplianceUplinksStatusesOverview x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/uplinks/usage/byNetwork method: get operationId: getOrganizationApplianceUplinksUsageByNetwork x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/vpn/siteToSite/ipsec/peers/slas method: get operationId: getOrganizationApplianceVpnSiteToSiteIpsecPeersSlas x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/vpn/siteToSite/ipsec/peers/slas method: put operationId: updateOrganizationApplianceVpnSiteToSiteIpsecPeersSlas x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/vpn/stats method: get operationId: getOrganizationApplianceVpnStats x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/vpn/statuses method: get operationId: getOrganizationApplianceVpnStatuses x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/vpn/thirdPartyVPNPeers method: get operationId: getOrganizationApplianceVpnThirdPartyVPNPeers x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/vpn/thirdPartyVPNPeers method: put operationId: updateOrganizationApplianceVpnThirdPartyVPNPeers x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/appliance/vpn/vpnFirewallRules method: get operationId: getOrganizationApplianceVpnVpnFirewallRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/appliance/vpn/vpnFirewallRules method: put operationId: updateOrganizationApplianceVpnVpnFirewallRules x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policies/global/group/policies/appliance/vlans/assign method: post operationId: assignOrganizationPoliciesGlobalGroupPoliciesApplianceVlans x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policies/global/group/policies/appliance/vlans/assignments method: get operationId: getOrganizationPoliciesGlobalGroupPoliciesApplianceVlansAssignments x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policies/global/group/policies/appliance/vlans/assignments/byVlan method: get operationId: getOrganizationPoliciesGlobalGroupPoliciesApplianceVlansAssignmentsByVlan x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policies/global/group/policies/appliance/vlans/remove method: post operationId: removeOrganizationPoliciesGlobalGroupPoliciesApplianceVlans x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/camera/analytics/live method: get operationId: getDeviceCameraAnalyticsLive x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /devices/{serial}/camera/analytics/overview method: get operationId: getDeviceCameraAnalyticsOverview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /devices/{serial}/camera/analytics/recent method: get operationId: getDeviceCameraAnalyticsRecent x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /devices/{serial}/camera/analytics/zones method: get operationId: getDeviceCameraAnalyticsZones x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/camera/analytics/zones/{zoneId}/history method: get operationId: getDeviceCameraAnalyticsZoneHistory x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /devices/{serial}/camera/clip method: get operationId: clipDeviceCamera x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:telemetry:write token: max-ttl: 3600 audit: none - path: /devices/{serial}/camera/customAnalytics method: get operationId: getDeviceCameraCustomAnalytics x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/camera/customAnalytics method: put operationId: updateDeviceCameraCustomAnalytics x-agentic-access: action-class: acting consequence: write subject: required scope: - camera:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/camera/generateSnapshot method: post operationId: generateDeviceCameraSnapshot x-agentic-access: action-class: acting consequence: write subject: required scope: - camera:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/camera/qualityAndRetention method: get operationId: getDeviceCameraQualityAndRetention x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/camera/qualityAndRetention method: put operationId: updateDeviceCameraQualityAndRetention x-agentic-access: action-class: acting consequence: write subject: required scope: - camera:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/camera/sense method: get operationId: getDeviceCameraSense x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/camera/sense method: put operationId: updateDeviceCameraSense x-agentic-access: action-class: acting consequence: write subject: required scope: - camera:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/camera/sense/objectDetectionModels method: get operationId: getDeviceCameraSenseObjectDetectionModels x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/camera/video/settings method: get operationId: getDeviceCameraVideoSettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/camera/video/settings method: put operationId: updateDeviceCameraVideoSettings x-agentic-access: action-class: acting consequence: write subject: required scope: - camera:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/camera/videoLink method: get operationId: getDeviceCameraVideoLink x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/camera/wirelessProfiles method: get operationId: getDeviceCameraWirelessProfiles x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/camera/wirelessProfiles method: put operationId: updateDeviceCameraWirelessProfiles x-agentic-access: action-class: acting consequence: physical subject: required scope: - camera:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/camera/qualityRetentionProfiles method: get operationId: getNetworkCameraQualityRetentionProfiles x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/camera/qualityRetentionProfiles method: post operationId: createNetworkCameraQualityRetentionProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - camera:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/camera/qualityRetentionProfiles/{qualityRetentionProfileId} method: get operationId: getNetworkCameraQualityRetentionProfile x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/camera/qualityRetentionProfiles/{qualityRetentionProfileId} method: put operationId: updateNetworkCameraQualityRetentionProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - camera:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/camera/qualityRetentionProfiles/{qualityRetentionProfileId} method: delete operationId: deleteNetworkCameraQualityRetentionProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - camera:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/camera/schedules method: get operationId: getNetworkCameraSchedules x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/camera/wirelessProfiles method: post operationId: createNetworkCameraWirelessProfile x-agentic-access: action-class: acting consequence: physical subject: required scope: - camera:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/camera/wirelessProfiles method: get operationId: getNetworkCameraWirelessProfiles x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/camera/wirelessProfiles/{wirelessProfileId} method: get operationId: getNetworkCameraWirelessProfile x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/camera/wirelessProfiles/{wirelessProfileId} method: put operationId: updateNetworkCameraWirelessProfile x-agentic-access: action-class: acting consequence: physical subject: required scope: - camera:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/camera/wirelessProfiles/{wirelessProfileId} method: delete operationId: deleteNetworkCameraWirelessProfile x-agentic-access: action-class: acting consequence: physical subject: required scope: - camera:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/camera/boundaries/areas/byDevice method: get operationId: getOrganizationCameraBoundariesAreasByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/camera/boundaries/lines/byDevice method: get operationId: getOrganizationCameraBoundariesLinesByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/camera/customAnalytics/artifacts method: get operationId: getOrganizationCameraCustomAnalyticsArtifacts x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/camera/customAnalytics/artifacts method: post operationId: createOrganizationCameraCustomAnalyticsArtifact x-agentic-access: action-class: acting consequence: write subject: required scope: - camera:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/camera/customAnalytics/artifacts/{artifactId} method: get operationId: getOrganizationCameraCustomAnalyticsArtifact x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/camera/customAnalytics/artifacts/{artifactId} method: delete operationId: deleteOrganizationCameraCustomAnalyticsArtifact x-agentic-access: action-class: acting consequence: write subject: required scope: - camera:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/camera/detections/history/byBoundary/byInterval method: get operationId: getOrganizationCameraDetectionsHistoryByBoundaryByInterval x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/camera/onboarding/statuses method: get operationId: getOrganizationCameraOnboardingStatuses x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/camera/onboarding/statuses method: put operationId: updateOrganizationCameraOnboardingStatuses x-agentic-access: action-class: acting consequence: write subject: required scope: - camera:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/camera/permissions method: get operationId: getOrganizationCameraPermissions x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/camera/permissions/{permissionScopeId} method: get operationId: getOrganizationCameraPermission x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/camera/roles method: get operationId: getOrganizationCameraRoles x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/camera/roles method: post operationId: createOrganizationCameraRole x-agentic-access: action-class: acting consequence: write subject: required scope: - camera:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/camera/roles/{roleId} method: get operationId: getOrganizationCameraRole x-agentic-access: action-class: connected consequence: read subject: optional scope: - camera:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/camera/roles/{roleId} method: delete operationId: deleteOrganizationCameraRole x-agentic-access: action-class: acting consequence: write subject: required scope: - camera:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/camera/roles/{roleId} method: put operationId: updateOrganizationCameraRole x-agentic-access: action-class: acting consequence: write subject: required scope: - camera:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/campusGateway/clusters method: post operationId: createNetworkCampusGatewayCluster x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/campusGateway/clusters/{clusterId} method: put operationId: updateNetworkCampusGatewayCluster x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/campusGateway/clusters/{clusterId} method: delete operationId: deleteNetworkCampusGatewayCluster x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/campusGateway/clients/usage/byNetwork/byCluster method: get operationId: getOrganizationCampusGatewayClientsUsageByNetworkByCluster x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/campusGateway/clusters method: get operationId: getOrganizationCampusGatewayClusters x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/campusGateway/clusters/failover/targets method: get operationId: getOrganizationCampusGatewayClustersFailoverTargets x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/campusGateway/clusters/failover/targets/byCluster method: get operationId: getOrganizationCampusGatewayClustersFailoverTargetsByCluster x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/campusGateway/clusters/networks/overviews method: get operationId: getOrganizationCampusGatewayClustersNetworksOverviews x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/campusGateway/clusters/provision method: post operationId: provisionOrganizationCampusGatewayClusters x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/campusGateway/clusters/ssids method: get operationId: getOrganizationCampusGatewayClustersSsids x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/campusGateway/clusters/tunnelable method: get operationId: getOrganizationCampusGatewayClustersTunnelable x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/campusGateway/connections method: get operationId: getOrganizationCampusGatewayConnections x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/campusGateway/connections/overview method: get operationId: getOrganizationCampusGatewayConnectionsOverview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/campusGateway/devices/uplinks/localOverrides/byDevice method: get operationId: getOrganizationCampusGatewayDevicesUplinksLocalOverridesByDevice x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /devices/{serial}/cellularGateway/lan method: get operationId: getDeviceCellularGatewayLan x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/cellularGateway/lan method: put operationId: updateDeviceCellularGatewayLan x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/cellularGateway/portForwardingRules method: get operationId: getDeviceCellularGatewayPortForwardingRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/cellularGateway/portForwardingRules method: put operationId: updateDeviceCellularGatewayPortForwardingRules x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/cellularGateway/connectivityMonitoringDestinations method: get operationId: getNetworkCellularGatewayConnectivityMonitoringDestinations x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/cellularGateway/connectivityMonitoringDestinations method: put operationId: updateNetworkCellularGatewayConnectivityMonitoringDestinations x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/cellularGateway/dhcp method: get operationId: getNetworkCellularGatewayDhcp x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/cellularGateway/dhcp method: put operationId: updateNetworkCellularGatewayDhcp x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/cellularGateway/subnetPool method: get operationId: getNetworkCellularGatewaySubnetPool x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/cellularGateway/subnetPool method: put operationId: updateNetworkCellularGatewaySubnetPool x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/cellularGateway/uplink method: get operationId: getNetworkCellularGatewayUplink x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/cellularGateway/uplink method: put operationId: updateNetworkCellularGatewayUplink x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/cellularGateway/esims/inventory method: get operationId: getOrganizationCellularGatewayEsimsInventory x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/cellularGateway/esims/inventory/{id} method: put operationId: updateOrganizationCellularGatewayEsimsInventory x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/cellularGateway/esims/serviceProviders method: get operationId: getOrganizationCellularGatewayEsimsServiceProviders x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/cellularGateway/esims/serviceProviders/accounts method: get operationId: getOrganizationCellularGatewayEsimsServiceProvidersAccounts x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/cellularGateway/esims/serviceProviders/accounts method: post operationId: createOrganizationCellularGatewayEsimsServiceProvidersAccount x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/cellularGateway/esims/serviceProviders/accounts/communicationPlans method: get operationId: getOrganizationCellularGatewayEsimsServiceProvidersAccountsCommunicationPlans x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/cellularGateway/esims/serviceProviders/accounts/ratePlans method: get operationId: getOrganizationCellularGatewayEsimsServiceProvidersAccountsRatePlans x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/cellularGateway/esims/serviceProviders/accounts/{accountId} method: put operationId: updateOrganizationCellularGatewayEsimsServiceProvidersAccount x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/cellularGateway/esims/serviceProviders/accounts/{accountId} method: delete operationId: deleteOrganizationCellularGatewayEsimsServiceProvidersAccount x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/cellularGateway/esims/swap method: post operationId: createOrganizationCellularGatewayEsimsSwap x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/cellularGateway/esims/swap/{id} method: put operationId: updateOrganizationCellularGatewayEsimsSwap x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/cellularGateway/uplink/statuses method: get operationId: getOrganizationCellularGatewayUplinkStatuses x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/datacenters method: get operationId: getDatacenters x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/networkDevices method: post operationId: createNetworkDevice x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/networkDevices method: get operationId: getAllNetworkDevices x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/networkDevices/{originId} method: patch operationId: updateNetworkDevice x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/networkDevices/{originId} method: get operationId: getNetworkDevice x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/networkDevices/{originId} method: delete operationId: deleteNetworkDevice x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/networkDevices/{originId}/policies method: get operationId: listNetworkDevicePolicies x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/tunnels method: get operationId: listTunnels x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/tunnels method: post operationId: addTunnel x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/tunnels/{id} method: get operationId: getTunnel x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/tunnels/{id} method: delete operationId: deleteTunnel x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/tunnels/{id}/policies method: get operationId: getTunnelPolicies x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policies method: get operationId: listPolicies x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /devices/{serial} method: get operationId: getDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial} method: put operationId: updateDevice x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/blinkLeds method: post operationId: blinkDeviceLeds x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/cellular/geolocations method: put operationId: updateDeviceCellularGeolocations x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/cellular/sims method: get operationId: getDeviceCellularSims x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/cellular/sims method: put operationId: updateDeviceCellularSims x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/cellular/uplinks/bands/masks/update method: post operationId: createDeviceCellularUplinksBandsMasksUpdate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/clients method: get operationId: getDeviceClients x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/liveTools/arpTable method: post operationId: createDeviceLiveToolsArpTable x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/liveTools/arpTable/{arpTableId} method: get operationId: getDeviceLiveToolsArpTable x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/liveTools/cableTest method: post operationId: createDeviceLiveToolsCableTest x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/liveTools/cableTest/{id} method: get operationId: getDeviceLiveToolsCableTest x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/liveTools/leds/blink method: post operationId: createDeviceLiveToolsLedsBlink x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/liveTools/leds/blink/{ledsBlinkId} method: get operationId: getDeviceLiveToolsLedsBlink x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/liveTools/macTable method: post operationId: createDeviceLiveToolsMacTable x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/liveTools/macTable/{macTableId} method: get operationId: getDeviceLiveToolsMacTable x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/liveTools/multicastRouting method: post operationId: createDeviceLiveToolsMulticastRouting x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/liveTools/multicastRouting/{multicastRoutingId} method: get operationId: getDeviceLiveToolsMulticastRouting x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/liveTools/ping method: post operationId: createDeviceLiveToolsPing x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/liveTools/ping/{id} method: get operationId: getDeviceLiveToolsPing x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/liveTools/pingDevice method: post operationId: createDeviceLiveToolsPingDevice x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/liveTools/pingDevice/{id} method: get operationId: getDeviceLiveToolsPingDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/liveTools/ports/cycle method: post operationId: createDeviceLiveToolsPortsCycle x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/liveTools/ports/cycle/{id} method: get operationId: getDeviceLiveToolsPortsCycle x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/liveTools/ports/status method: post operationId: createDeviceLiveToolsPortsStatus x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/liveTools/ports/status/{jobId} method: get operationId: getDeviceLiveToolsPortsStatus x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/liveTools/power/usage method: post operationId: createDeviceLiveToolsPowerUsage x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/liveTools/power/usage/{jobId} method: get operationId: getDeviceLiveToolsPowerUsage x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/liveTools/routingTable/lookups method: post operationId: createDeviceLiveToolsRoutingTableLookup x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/liveTools/routingTable/lookups/{id} method: get operationId: getDeviceLiveToolsRoutingTableLookup x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/liveTools/routingTable/summaries method: post operationId: createDeviceLiveToolsRoutingTableSummary x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/liveTools/routingTable/summaries/{id} method: get operationId: getDeviceLiveToolsRoutingTableSummary x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/liveTools/throughputTest method: post operationId: createDeviceLiveToolsThroughputTest x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/liveTools/throughputTest/{throughputTestId} method: get operationId: getDeviceLiveToolsThroughputTest x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/liveTools/wakeOnLan method: post operationId: createDeviceLiveToolsWakeOnLan x-agentic-access: action-class: acting consequence: physical subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/liveTools/wakeOnLan/{wakeOnLanId} method: get operationId: getDeviceLiveToolsWakeOnLan x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/lldpCdp method: get operationId: getDeviceLldpCdp x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/lossAndLatencyHistory method: get operationId: getDeviceLossAndLatencyHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/managementInterface method: get operationId: getDeviceManagementInterface x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/managementInterface method: put operationId: updateDeviceManagementInterface x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/reboot method: post operationId: rebootDevice x-agentic-access: action-class: acting consequence: safety-critical subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /organizations/{organizationId}/firewall/applications method: get operationId: getFirewallApplications x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /networks/{networkId}/insight/applications/{applicationId}/healthByTime method: get operationId: getNetworkInsightApplicationHealthByTime x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/insight/applications method: get operationId: getOrganizationInsightApplications x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/insight/monitoredMediaServers method: get operationId: getOrganizationInsightMonitoredMediaServers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/insight/monitoredMediaServers method: post operationId: createOrganizationInsightMonitoredMediaServer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/insight/monitoredMediaServers/{monitoredMediaServerId} method: get operationId: getOrganizationInsightMonitoredMediaServer x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/insight/monitoredMediaServers/{monitoredMediaServerId} method: put operationId: updateOrganizationInsightMonitoredMediaServer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/insight/monitoredMediaServers/{monitoredMediaServerId} method: delete operationId: deleteOrganizationInsightMonitoredMediaServer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /administered/licensing/subscription/entitlements method: get operationId: getAdministeredLicensingSubscriptionEntitlements x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:licensing:config:read token: max-ttl: 3600 audit: none - path: /administered/licensing/subscription/subscriptions method: get operationId: getAdministeredLicensingSubscriptionSubscriptions x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:licensing:config:read token: max-ttl: 3600 audit: none - path: /administered/licensing/subscription/subscriptions/claim method: post operationId: claimAdministeredLicensingSubscriptionSubscriptions x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:licensing:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /administered/licensing/subscription/subscriptions/claimKey/validate method: post operationId: validateAdministeredLicensingSubscriptionSubscriptionsClaimKey x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:licensing:config:write token: max-ttl: 3600 audit: none - path: /administered/licensing/subscription/subscriptions/compliance/statuses method: get operationId: getAdministeredLicensingSubscriptionSubscriptionsComplianceStatuses x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:licensing:config:read token: max-ttl: 3600 audit: none - path: /administered/licensing/subscription/subscriptions/{subscriptionId}/bind method: post operationId: bindAdministeredLicensingSubscriptionSubscription x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:licensing:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/licensing/coterm/licenses method: get operationId: getOrganizationLicensingCotermLicenses x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:licensing:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/licensing/coterm/licenses/move method: post operationId: moveOrganizationLicensingCotermLicenses x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:licensing:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId} method: get operationId: getNetwork x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId} method: put operationId: updateNetwork x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId} method: delete operationId: deleteNetwork x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/alerts/history method: get operationId: getNetworkAlertsHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/alerts/settings method: get operationId: getNetworkAlertsSettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/alerts/settings method: put operationId: updateNetworkAlertsSettings x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/bind method: post operationId: bindNetwork x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/bluetoothClients method: get operationId: getNetworkBluetoothClients x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/bluetoothClients/{bluetoothClientId} method: get operationId: getNetworkBluetoothClient x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/clients method: get operationId: getNetworkClients x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/clients/applicationUsage method: get operationId: getNetworkClientsApplicationUsage x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/clients/bandwidthUsageHistory method: get operationId: getNetworkClientsBandwidthUsageHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/clients/overview method: get operationId: getNetworkClientsOverview x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/clients/provision method: post operationId: provisionNetworkClients x-agentic-access: action-class: acting consequence: physical subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/clients/usageHistories method: get operationId: getNetworkClientsUsageHistories x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/clients/{clientId} method: get operationId: getNetworkClient x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/clients/{clientId}/policy method: get operationId: getNetworkClientPolicy x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/clients/{clientId}/policy method: put operationId: updateNetworkClientPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/clients/{clientId}/splashAuthorizationStatus method: get operationId: getNetworkClientSplashAuthorizationStatus x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/clients/{clientId}/splashAuthorizationStatus method: put operationId: updateNetworkClientSplashAuthorizationStatus x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/clients/{clientId}/trafficHistory method: get operationId: getNetworkClientTrafficHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/clients/{clientId}/usageHistory method: get operationId: getNetworkClientUsageHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/devices method: get operationId: getNetworkDevices x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/devices/claim method: post operationId: claimNetworkDevices x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:licensing:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/devices/claim/vmx method: post operationId: vmxNetworkDevicesClaim x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/devices/remove method: post operationId: removeNetworkDevices x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/devices/syslog/servers method: put operationId: updateNetworkDevicesSyslogServers x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/events method: get operationId: getNetworkEvents x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/events/eventTypes method: get operationId: getNetworkEventsEventTypes x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/firmwareUpgrades method: get operationId: getNetworkFirmwareUpgrades x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/firmwareUpgrades method: put operationId: updateNetworkFirmwareUpgrades x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/firmwareUpgrades/rollbacks method: post operationId: createNetworkFirmwareUpgradesRollback x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/firmwareUpgrades/staged/events method: get operationId: getNetworkFirmwareUpgradesStagedEvents x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/firmwareUpgrades/staged/events method: post operationId: createNetworkFirmwareUpgradesStagedEvent x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/firmwareUpgrades/staged/events method: put operationId: updateNetworkFirmwareUpgradesStagedEvents x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/firmwareUpgrades/staged/events/defer method: post operationId: deferNetworkFirmwareUpgradesStagedEvents x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/firmwareUpgrades/staged/events/rollbacks method: post operationId: rollbacksNetworkFirmwareUpgradesStagedEvents x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/firmwareUpgrades/staged/groups method: get operationId: getNetworkFirmwareUpgradesStagedGroups x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/firmwareUpgrades/staged/groups method: post operationId: createNetworkFirmwareUpgradesStagedGroup x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/firmwareUpgrades/staged/groups/{groupId} method: get operationId: getNetworkFirmwareUpgradesStagedGroup x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/firmwareUpgrades/staged/groups/{groupId} method: put operationId: updateNetworkFirmwareUpgradesStagedGroup x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/firmwareUpgrades/staged/groups/{groupId} method: delete operationId: deleteNetworkFirmwareUpgradesStagedGroup x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/firmwareUpgrades/staged/stages method: get operationId: getNetworkFirmwareUpgradesStagedStages x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/firmwareUpgrades/staged/stages method: put operationId: updateNetworkFirmwareUpgradesStagedStages x-agentic-access: action-class: acting consequence: physical subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/floorPlans method: get operationId: getNetworkFloorPlans x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/floorPlans method: post operationId: createNetworkFloorPlan x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/floorPlans/autoLocate/jobs/batch method: post operationId: batchNetworkFloorPlansAutoLocateJobs x-agentic-access: action-class: acting consequence: write subject: required scope: - wireless:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/floorPlans/autoLocate/jobs/{jobId}/cancel method: post operationId: cancelNetworkFloorPlansAutoLocateJob x-agentic-access: action-class: acting consequence: write subject: required scope: - wireless:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/floorPlans/autoLocate/jobs/{jobId}/publish method: post operationId: publishNetworkFloorPlansAutoLocateJob x-agentic-access: action-class: acting consequence: write subject: required scope: - wireless:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/floorPlans/autoLocate/jobs/{jobId}/recalculate method: post operationId: recalculateNetworkFloorPlansAutoLocateJob x-agentic-access: action-class: acting consequence: write subject: required scope: - wireless:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/floorPlans/devices/batchUpdate method: post operationId: batchNetworkFloorPlansDevicesUpdate x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/floorPlans/{floorPlanId} method: get operationId: getNetworkFloorPlan x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/floorPlans/{floorPlanId} method: put operationId: updateNetworkFloorPlan x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/floorPlans/{floorPlanId} method: delete operationId: deleteNetworkFloorPlan x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/groupPolicies method: get operationId: getNetworkGroupPolicies x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/groupPolicies method: post operationId: createNetworkGroupPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/groupPolicies/{groupPolicyId} method: get operationId: getNetworkGroupPolicy x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/groupPolicies/{groupPolicyId} method: put operationId: updateNetworkGroupPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/groupPolicies/{groupPolicyId} method: delete operationId: deleteNetworkGroupPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/health/alerts method: get operationId: getNetworkHealthAlerts x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/merakiAuthUsers method: get operationId: getNetworkMerakiAuthUsers x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/merakiAuthUsers method: post operationId: createNetworkMerakiAuthUser x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/merakiAuthUsers/{merakiAuthUserId} method: get operationId: getNetworkMerakiAuthUser x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/merakiAuthUsers/{merakiAuthUserId} method: delete operationId: deleteNetworkMerakiAuthUser x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/merakiAuthUsers/{merakiAuthUserId} method: put operationId: updateNetworkMerakiAuthUser x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/mqttBrokers method: get operationId: getNetworkMqttBrokers x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/mqttBrokers method: post operationId: createNetworkMqttBroker x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/mqttBrokers/{mqttBrokerId} method: get operationId: getNetworkMqttBroker x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/mqttBrokers/{mqttBrokerId} method: put operationId: updateNetworkMqttBroker x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/mqttBrokers/{mqttBrokerId} method: delete operationId: deleteNetworkMqttBroker x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/netflow method: get operationId: getNetworkNetflow x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/netflow method: put operationId: updateNetworkNetflow x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/networkHealth/channelUtilization method: get operationId: getNetworkNetworkHealthChannelUtilization x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/pii/piiKeys method: get operationId: getNetworkPiiPiiKeys x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/pii/requests method: get operationId: getNetworkPiiRequests x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/pii/requests method: post operationId: createNetworkPiiRequest x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/pii/requests/{requestId} method: get operationId: getNetworkPiiRequest x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/pii/requests/{requestId} method: delete operationId: deleteNetworkPiiRequest x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/pii/smDevicesForKey method: get operationId: getNetworkPiiSmDevicesForKey x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/pii/smOwnersForKey method: get operationId: getNetworkPiiSmOwnersForKey x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/policies/byClient method: get operationId: getNetworkPoliciesByClient x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/settings method: get operationId: getNetworkSettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/settings method: put operationId: updateNetworkSettings x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/snmp method: get operationId: getNetworkSnmp x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/snmp method: put operationId: updateNetworkSnmp x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/splashLoginAttempts method: get operationId: getNetworkSplashLoginAttempts x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/split method: post operationId: splitNetwork x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/syslogServers method: get operationId: getNetworkSyslogServers x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/syslogServers method: put operationId: updateNetworkSyslogServers x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/topology/linkLayer method: get operationId: getNetworkTopologyLinkLayer x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/traffic method: get operationId: getNetworkTraffic x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/trafficAnalysis method: get operationId: getNetworkTrafficAnalysis x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/trafficAnalysis method: put operationId: updateNetworkTrafficAnalysis x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/trafficShaping/applicationCategories method: get operationId: getNetworkTrafficShapingApplicationCategories x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/trafficShaping/dscpTaggingOptions method: get operationId: getNetworkTrafficShapingDscpTaggingOptions x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/unbind method: post operationId: unbindNetwork x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/vlanProfiles method: get operationId: getNetworkVlanProfiles x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/vlanProfiles method: post operationId: createNetworkVlanProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/vlanProfiles/assignments/byDevice method: get operationId: getNetworkVlanProfilesAssignmentsByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/vlanProfiles/assignments/reassign method: post operationId: reassignNetworkVlanProfilesAssignments x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/vlanProfiles/{iname} method: get operationId: getNetworkVlanProfile x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/vlanProfiles/{iname} method: put operationId: updateNetworkVlanProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/vlanProfiles/{iname} method: delete operationId: deleteNetworkVlanProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/webhooks/httpServers method: get operationId: getNetworkWebhooksHttpServers x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/webhooks/httpServers method: post operationId: createNetworkWebhooksHttpServer x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/webhooks/httpServers/{httpServerId} method: get operationId: getNetworkWebhooksHttpServer x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/webhooks/httpServers/{httpServerId} method: put operationId: updateNetworkWebhooksHttpServer x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/webhooks/httpServers/{httpServerId} method: delete operationId: deleteNetworkWebhooksHttpServer x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/webhooks/payloadTemplates method: get operationId: getNetworkWebhooksPayloadTemplates x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/webhooks/payloadTemplates method: post operationId: createNetworkWebhooksPayloadTemplate x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/webhooks/payloadTemplates/{payloadTemplateId} method: get operationId: getNetworkWebhooksPayloadTemplate x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/webhooks/payloadTemplates/{payloadTemplateId} method: delete operationId: deleteNetworkWebhooksPayloadTemplate x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/webhooks/payloadTemplates/{payloadTemplateId} method: put operationId: updateNetworkWebhooksPayloadTemplate x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/webhooks/webhookTests method: post operationId: createNetworkWebhooksWebhookTest x-agentic-access: action-class: acting consequence: physical subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/webhooks/webhookTests/{webhookTestId} method: get operationId: getNetworkWebhooksWebhookTest x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations method: get operationId: getOrganizations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations method: post operationId: createOrganization x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId} method: get operationId: getOrganization x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId} method: put operationId: updateOrganization x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId} method: delete operationId: deleteOrganization x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/actionBatches method: post operationId: createOrganizationActionBatch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/actionBatches method: get operationId: getOrganizationActionBatches x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/actionBatches/{actionBatchId} method: get operationId: getOrganizationActionBatch x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/actionBatches/{actionBatchId} method: delete operationId: deleteOrganizationActionBatch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/actionBatches/{actionBatchId} method: put operationId: updateOrganizationActionBatch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/adaptivePolicy/acls method: get operationId: getOrganizationAdaptivePolicyAcls x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/adaptivePolicy/acls method: post operationId: createOrganizationAdaptivePolicyAcl x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/adaptivePolicy/acls/{aclId} method: get operationId: getOrganizationAdaptivePolicyAcl x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/adaptivePolicy/acls/{aclId} method: put operationId: updateOrganizationAdaptivePolicyAcl x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/adaptivePolicy/acls/{aclId} method: delete operationId: deleteOrganizationAdaptivePolicyAcl x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/adaptivePolicy/groups method: get operationId: getOrganizationAdaptivePolicyGroups x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/adaptivePolicy/groups method: post operationId: createOrganizationAdaptivePolicyGroup x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/adaptivePolicy/groups/{id} method: get operationId: getOrganizationAdaptivePolicyGroup x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/adaptivePolicy/groups/{id} method: put operationId: updateOrganizationAdaptivePolicyGroup x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/adaptivePolicy/groups/{id} method: delete operationId: deleteOrganizationAdaptivePolicyGroup x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/adaptivePolicy/overview method: get operationId: getOrganizationAdaptivePolicyOverview x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/adaptivePolicy/policies method: get operationId: getOrganizationAdaptivePolicyPolicies x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/adaptivePolicy/policies method: post operationId: createOrganizationAdaptivePolicyPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/adaptivePolicy/policies/{id} method: get operationId: getOrganizationAdaptivePolicyPolicy x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/adaptivePolicy/policies/{id} method: put operationId: updateOrganizationAdaptivePolicyPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/adaptivePolicy/policies/{id} method: delete operationId: deleteOrganizationAdaptivePolicyPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/adaptivePolicy/settings method: get operationId: getOrganizationAdaptivePolicySettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/adaptivePolicy/settings method: put operationId: updateOrganizationAdaptivePolicySettings x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/admins method: get operationId: getOrganizationAdmins x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:iam:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/admins method: post operationId: createOrganizationAdmin x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/admins/{adminId} method: put operationId: updateOrganizationAdmin x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/admins/{adminId} method: delete operationId: deleteOrganizationAdmin x-agentic-access: action-class: acting consequence: safety-critical subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /organizations/{organizationId}/alerts/profiles method: get operationId: getOrganizationAlertsProfiles x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/alerts/profiles method: post operationId: createOrganizationAlertsProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/alerts/profiles/{alertConfigId} method: put operationId: updateOrganizationAlertsProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/alerts/profiles/{alertConfigId} method: delete operationId: deleteOrganizationAlertsProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - sdwan:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/api/rest/provisioning/pipelines/jobs method: get operationId: getOrganizationApiRestProvisioningPipelinesJobs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/api/rest/provisioning/pipelines/jobs/overviews/byPipeline method: get operationId: getOrganizationApiRestProvisioningPipelinesJobsOverviewsByPipeline x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/apiRequests method: get operationId: getOrganizationApiRequests x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/apiRequests/overview method: get operationId: getOrganizationApiRequestsOverview x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/apiRequests/overview/responseCodes/byInterval method: get operationId: getOrganizationApiRequestsOverviewResponseCodesByInterval x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/assurance/alerts method: get operationId: getOrganizationAssuranceAlerts x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/assurance/alerts/dismiss method: post operationId: dismissOrganizationAssuranceAlerts x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/assurance/alerts/overview method: get operationId: getOrganizationAssuranceAlertsOverview x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/assurance/alerts/overview/byNetwork method: get operationId: getOrganizationAssuranceAlertsOverviewByNetwork x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/assurance/alerts/overview/byType method: get operationId: getOrganizationAssuranceAlertsOverviewByType x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/assurance/alerts/overview/historical method: get operationId: getOrganizationAssuranceAlertsOverviewHistorical x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/assurance/alerts/profiles method: get operationId: getOrganizationAssuranceAlertsProfiles x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/assurance/alerts/profiles method: post operationId: createOrganizationAssuranceAlertsProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/assurance/alerts/profiles/{profileId} method: put operationId: updateOrganizationAssuranceAlertsProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/assurance/alerts/profiles/{profileId} method: delete operationId: deleteOrganizationAssuranceAlertsProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/assurance/alerts/restore method: post operationId: restoreOrganizationAssuranceAlerts x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/assurance/alerts/taxonomy/categories method: get operationId: getOrganizationAssuranceAlertsTaxonomyCategories x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/assurance/alerts/taxonomy/types method: get operationId: getOrganizationAssuranceAlertsTaxonomyTypes x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/assurance/alerts/{id} method: get operationId: getOrganizationAssuranceAlert x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/brandingPolicies method: get operationId: getOrganizationBrandingPolicies x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:iam:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/brandingPolicies method: post operationId: createOrganizationBrandingPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/brandingPolicies/priorities method: get operationId: getOrganizationBrandingPoliciesPriorities x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:iam:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/brandingPolicies/priorities method: put operationId: updateOrganizationBrandingPoliciesPriorities x-agentic-access: action-class: acting consequence: physical subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/brandingPolicies/{brandingPolicyId} method: get operationId: getOrganizationBrandingPolicy x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:iam:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/brandingPolicies/{brandingPolicyId} method: put operationId: updateOrganizationBrandingPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/brandingPolicies/{brandingPolicyId} method: delete operationId: deleteOrganizationBrandingPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/claim method: post operationId: claimIntoOrganization x-agentic-access: action-class: acting consequence: physical subject: required scope: - dashboard:licensing:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/clients/bandwidthUsageHistory method: get operationId: getOrganizationClientsBandwidthUsageHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/clients/overview method: get operationId: getOrganizationClientsOverview x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/clients/search method: get operationId: getOrganizationClientsSearch x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/clone method: post operationId: cloneOrganization x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/configTemplates method: get operationId: getOrganizationConfigTemplates x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/configTemplates method: post operationId: createOrganizationConfigTemplate x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/configTemplates/{configTemplateId} method: get operationId: getOrganizationConfigTemplate x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/configTemplates/{configTemplateId} method: put operationId: updateOrganizationConfigTemplate x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/configTemplates/{configTemplateId} method: delete operationId: deleteOrganizationConfigTemplate x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/configurationChanges method: get operationId: getOrganizationConfigurationChanges x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices method: get operationId: getOrganizationDevices x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/availabilities method: get operationId: getOrganizationDevicesAvailabilities x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/availabilities/changeHistory method: get operationId: getOrganizationDevicesAvailabilitiesChangeHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/cellular/data/devices method: get operationId: getOrganizationDevicesCellularDataDevices x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/cellular/data/profiles method: get operationId: getOrganizationDevicesCellularDataProfiles x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/cellular/data/profiles method: post operationId: createOrganizationDevicesCellularDataProfile x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/devices/cellular/data/profiles/assignments method: get operationId: getOrganizationDevicesCellularDataProfilesAssignments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/cellular/data/profiles/assignments/batchCreate method: post operationId: batchOrganizationDevicesCellularDataProfilesAssignmentsCreate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/devices/cellular/data/profiles/assignments/bulkDelete method: post operationId: bulkOrganizationDevicesCellularDataProfilesAssignmentsDelete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/devices/cellular/data/profiles/{profileId} method: put operationId: updateOrganizationDevicesCellularDataProfile x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/devices/cellular/data/profiles/{profileId} method: delete operationId: deleteOrganizationDevicesCellularDataProfile x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/devices/cellular/data/usage/byDevice method: get operationId: getOrganizationDevicesCellularDataUsageByDevice x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/cellular/data/usage/history/byDevice/byInterval method: get operationId: getOrganizationDevicesCellularDataUsageHistoryByDeviceByInterval x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/cellular/geolocations method: get operationId: getOrganizationDevicesCellularGeolocations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/cellular/uplinks/bands/byDevice method: get operationId: getOrganizationDevicesCellularUplinksBandsByDevice x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/cellular/uplinks/towers/byDevice method: get operationId: getOrganizationDevicesCellularUplinksTowersByDevice x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/controller/migrations method: post operationId: createOrganizationDevicesControllerMigration x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /organizations/{organizationId}/devices/controller/migrations method: get operationId: getOrganizationDevicesControllerMigrations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/details/bulkUpdate method: post operationId: bulkUpdateOrganizationDevicesDetails x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/devices/overview/byModel method: get operationId: getOrganizationDevicesOverviewByModel x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/packetCapture/captures method: get operationId: getOrganizationDevicesPacketCaptureCaptures x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/packetCapture/captures method: post operationId: createOrganizationDevicesPacketCaptureCapture x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/devices/packetCapture/captures/bulkCreate method: post operationId: bulkOrganizationDevicesPacketCaptureCapturesCreate x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/devices/packetCapture/captures/bulkDelete method: post operationId: bulkOrganizationDevicesPacketCaptureCapturesDelete x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/devices/packetCapture/captures/{captureId} method: delete operationId: deleteOrganizationDevicesPacketCaptureCapture x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/devices/packetCapture/captures/{captureId}/downloadUrl/generate method: post operationId: generateOrganizationDevicesPacketCaptureCaptureDownloadUrl x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:write token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/packetCapture/captures/{captureId}/stop method: post operationId: stopOrganizationDevicesPacketCaptureCapture x-agentic-access: action-class: acting consequence: safety-critical subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /organizations/{organizationId}/devices/packetCapture/schedules method: get operationId: getOrganizationDevicesPacketCaptureSchedules x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/packetCapture/schedules method: post operationId: createOrganizationDevicesPacketCaptureSchedule x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/devices/packetCapture/schedules/reorder method: post operationId: reorderOrganizationDevicesPacketCaptureSchedules x-agentic-access: action-class: acting consequence: physical subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/devices/packetCapture/schedules/{scheduleId} method: put operationId: updateOrganizationDevicesPacketCaptureSchedule x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/devices/packetCapture/schedules/{scheduleId} method: delete operationId: deleteOrganizationDevicesPacketCaptureSchedule x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/devices/powerModules/statuses/byDevice method: get operationId: getOrganizationDevicesPowerModulesStatusesByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/provisioning/statuses method: get operationId: getOrganizationDevicesProvisioningStatuses x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/statuses method: get operationId: getOrganizationDevicesStatuses x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/statuses/overview method: get operationId: getOrganizationDevicesStatusesOverview x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/syslog/servers/byNetwork method: get operationId: getOrganizationDevicesSyslogServersByNetwork x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/syslog/servers/roles/byNetwork method: get operationId: getOrganizationDevicesSyslogServersRolesByNetwork x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/system/memory/usage/history/byInterval method: get operationId: getOrganizationDevicesSystemMemoryUsageHistoryByInterval x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/uplinks/addresses/byDevice method: get operationId: getOrganizationDevicesUplinksAddressesByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/devices/uplinksLossAndLatency method: get operationId: getOrganizationDevicesUplinksLossAndLatency x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/earlyAccess/features method: get operationId: getOrganizationEarlyAccessFeatures x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:iam:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/earlyAccess/features/optIns method: get operationId: getOrganizationEarlyAccessFeaturesOptIns x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:iam:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/earlyAccess/features/optIns method: post operationId: createOrganizationEarlyAccessFeaturesOptIn x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/earlyAccess/features/optIns/{optInId} method: get operationId: getOrganizationEarlyAccessFeaturesOptIn x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:iam:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/earlyAccess/features/optIns/{optInId} method: put operationId: updateOrganizationEarlyAccessFeaturesOptIn x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/earlyAccess/features/optIns/{optInId} method: delete operationId: deleteOrganizationEarlyAccessFeaturesOptIn x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/firmware/upgrades method: get operationId: getOrganizationFirmwareUpgrades x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/firmware/upgrades/byDevice method: get operationId: getOrganizationFirmwareUpgradesByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/floorPlans/autoLocate/devices method: get operationId: getOrganizationFloorPlansAutoLocateDevices x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/floorPlans/autoLocate/statuses method: get operationId: getOrganizationFloorPlansAutoLocateStatuses x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/integrations/deployable method: get operationId: getOrganizationIntegrationsDeployable x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/integrations/deployed method: get operationId: getOrganizationIntegrationsDeployed x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/integrations/xdr/networks method: get operationId: getOrganizationIntegrationsXdrNetworks x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/integrations/xdr/networks/disable method: post operationId: disableOrganizationIntegrationsXdrNetworks x-agentic-access: action-class: acting consequence: safety-critical subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /organizations/{organizationId}/integrations/xdr/networks/enable method: post operationId: enableOrganizationIntegrationsXdrNetworks x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/inventory/claim method: post operationId: claimIntoOrganizationInventory x-agentic-access: action-class: acting consequence: physical subject: required scope: - dashboard:licensing:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/inventory/devices method: get operationId: getOrganizationInventoryDevices x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/inventory/devices/eox/overview method: get operationId: getOrganizationInventoryDevicesEoxOverview x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/inventory/devices/swaps/bulk method: post operationId: createOrganizationInventoryDevicesSwapsBulk x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/inventory/devices/swaps/bulk/{id} method: get operationId: getOrganizationInventoryDevicesSwapsBulk x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/inventory/devices/{serial} method: get operationId: getOrganizationInventoryDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/inventory/orders/claim method: post operationId: claimOrganizationInventoryOrders x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/inventory/orders/preview method: post operationId: previewOrganizationInventoryOrders x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/inventory/release method: post operationId: releaseFromOrganizationInventory x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/licenses method: get operationId: getOrganizationLicenses x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:licensing:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/licenses/assignSeats method: post operationId: assignOrganizationLicensesSeats x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:licensing:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/licenses/move method: post operationId: moveOrganizationLicenses x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:licensing:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/licenses/moveSeats method: post operationId: moveOrganizationLicensesSeats x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:licensing:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/licenses/overview method: get operationId: getOrganizationLicensesOverview x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:licensing:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/licenses/renewSeats method: post operationId: renewOrganizationLicensesSeats x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:licensing:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/licenses/{licenseId} method: get operationId: getOrganizationLicense x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:licensing:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/licenses/{licenseId} method: put operationId: updateOrganizationLicense x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:licensing:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/loginSecurity method: get operationId: getOrganizationLoginSecurity x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:iam:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/loginSecurity method: put operationId: updateOrganizationLoginSecurity x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/networks method: get operationId: getOrganizationNetworks x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/networks method: post operationId: createOrganizationNetwork x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/networks/combine method: post operationId: combineOrganizationNetworks x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/networks/groups method: get operationId: getOrganizationNetworksGroups x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/networks/groups method: post operationId: createOrganizationNetworksGroup x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/networks/groups/overview/byGroup method: get operationId: getOrganizationNetworksGroupsOverviewByGroup x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/networks/groups/{groupId} method: put operationId: updateOrganizationNetworksGroup x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/networks/groups/{groupId} method: delete operationId: deleteOrganizationNetworksGroup x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/networks/groups/{groupId}/bulkAssign method: post operationId: bulkOrganizationNetworksGroupAssign x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/networks/groups/{groupId}/bulkUnassign method: post operationId: bulkOrganizationNetworksGroupUnassign x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/networks/moves method: post operationId: createNetworkMove x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/networks/moves method: get operationId: getNetworkMoves x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/openapiSpec method: get operationId: getOrganizationOpenapiSpec x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policies/assignments/byClient method: get operationId: getOrganizationPoliciesAssignmentsByClient x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policies/global/firewall/applicationCategories method: get operationId: getOrganizationPoliciesGlobalFirewallApplicationCategories x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policies/global/firewall/rulesets method: get operationId: getOrganizationPoliciesGlobalFirewallRulesets x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policies/global/firewall/rulesets method: post operationId: createOrganizationPoliciesGlobalFirewallRuleset x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policies/global/firewall/rulesets/rules method: post operationId: createOrganizationPoliciesGlobalFirewallRulesetsRule x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policies/global/firewall/rulesets/rules method: get operationId: getOrganizationPoliciesGlobalFirewallRulesetsRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policies/global/firewall/rulesets/rules/{ruleId} method: delete operationId: deleteOrganizationPoliciesGlobalFirewallRulesetsRule x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policies/global/firewall/rulesets/rules/{ruleId} method: put operationId: updateOrganizationPoliciesGlobalFirewallRulesetsRule x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policies/global/firewall/rulesets/{rulesetId} method: put operationId: updateOrganizationPoliciesGlobalFirewallRuleset x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policies/global/firewall/rulesets/{rulesetId} method: delete operationId: deleteOrganizationPoliciesGlobalFirewallRuleset x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policies/global/group/policies method: get operationId: getOrganizationPoliciesGlobalGroupPolicies x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policies/global/group/policies method: post operationId: createOrganizationPoliciesGlobalGroupPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policies/global/group/policies/adaptivePolicyGroups/assign method: post operationId: assignOrganizationPoliciesGlobalGroupPoliciesAdaptivePolicyGroups x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policies/global/group/policies/adaptivePolicyGroups/assignments method: get operationId: getOrganizationPoliciesGlobalGroupPoliciesAdaptivePolicyGroupsAssignments x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policies/global/group/policies/adaptivePolicyGroups/remove method: post operationId: removeOrganizationPoliciesGlobalGroupPoliciesAdaptivePolicyGroups x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policies/global/group/policies/firewall/rulesets/assignments method: get operationId: getOrganizationPoliciesGlobalGroupPoliciesFirewallRulesetsAssignments x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policies/global/group/policies/firewall/rulesets/assignments method: post operationId: createOrganizationPoliciesGlobalGroupPoliciesFirewallRulesetsAssignment x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policies/global/group/policies/firewall/rulesets/assignments/{assignmentId} method: put operationId: updateOrganizationPoliciesGlobalGroupPoliciesFirewallRulesetsAssignment x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policies/global/group/policies/firewall/rulesets/assignments/{assignmentId} method: delete operationId: deleteOrganizationPoliciesGlobalGroupPoliciesFirewallRulesetsAssignment x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policies/global/group/policies/{policyId} method: put operationId: updateOrganizationPoliciesGlobalGroupPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policies/global/group/policies/{policyId} method: delete operationId: deleteOrganizationPoliciesGlobalGroupPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policyObjects method: get operationId: getOrganizationPolicyObjects x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policyObjects method: post operationId: createOrganizationPolicyObject x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policyObjects/groups method: get operationId: getOrganizationPolicyObjectsGroups x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policyObjects/groups method: post operationId: createOrganizationPolicyObjectsGroup x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policyObjects/groups/{policyObjectGroupId} method: get operationId: getOrganizationPolicyObjectsGroup x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policyObjects/groups/{policyObjectGroupId} method: put operationId: updateOrganizationPolicyObjectsGroup x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policyObjects/groups/{policyObjectGroupId} method: delete operationId: deleteOrganizationPolicyObjectsGroup x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policyObjects/{policyObjectId} method: get operationId: getOrganizationPolicyObject x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policyObjects/{policyObjectId} method: put operationId: updateOrganizationPolicyObject x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policyObjects/{policyObjectId} method: delete operationId: deleteOrganizationPolicyObject x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/saml method: get operationId: getOrganizationSaml x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:iam:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/saml method: put operationId: updateOrganizationSaml x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/saml/idps method: get operationId: getOrganizationSamlIdps x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:iam:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/saml/idps method: post operationId: createOrganizationSamlIdp x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/saml/idps/{idpId} method: put operationId: updateOrganizationSamlIdp x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/saml/idps/{idpId} method: get operationId: getOrganizationSamlIdp x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:iam:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/saml/idps/{idpId} method: delete operationId: deleteOrganizationSamlIdp x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/samlRoles method: get operationId: getOrganizationSamlRoles x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:iam:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/samlRoles method: post operationId: createOrganizationSamlRole x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/samlRoles/{samlRoleId} method: get operationId: getOrganizationSamlRole x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:iam:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/samlRoles/{samlRoleId} method: put operationId: updateOrganizationSamlRole x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/samlRoles/{samlRoleId} method: delete operationId: deleteOrganizationSamlRole x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/sase/connectors method: get operationId: getOrganizationSaseConnectors x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/sase/connectors/batchDelete method: post operationId: batchOrganizationSaseConnectorsDelete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/sase/integrations method: post operationId: createOrganizationSaseIntegration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/sase/integrations/{integrationId} method: get operationId: getOrganizationSaseIntegration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/sase/integrations/{integrationId} method: delete operationId: deleteOrganizationSaseIntegration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/sase/networks/eligible method: get operationId: getOrganizationSaseNetworksEligible x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/sase/regions method: get operationId: getOrganizationSaseRegions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/sase/sites method: get operationId: getOrganizationSaseSites x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/sase/sites/attach method: post operationId: attachOrganizationSaseSites x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/sase/sites/connectivity/history/bySite method: get operationId: getOrganizationSaseSitesConnectivityHistoryBySite x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/sase/sites/connectivity/overview method: get operationId: getOrganizationSaseSitesConnectivityOverview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/sase/sites/detach method: post operationId: detachOrganizationSaseSites x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/sase/sites/{siteId} method: put operationId: updateOrganizationSaseSite x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/snmp method: get operationId: getOrganizationSnmp x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/snmp method: put operationId: updateOrganizationSnmp x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/splash/assets/{id} method: get operationId: getOrganizationSplashAsset x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/splash/assets/{id} method: delete operationId: deleteOrganizationSplashAsset x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/splash/themes method: get operationId: getOrganizationSplashThemes x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/splash/themes method: post operationId: createOrganizationSplashTheme x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/splash/themes/{id} method: delete operationId: deleteOrganizationSplashTheme x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/splash/themes/{themeIdentifier}/assets method: post operationId: createOrganizationSplashThemeAsset x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/summary/top/appliances/byUtilization method: get operationId: getOrganizationSummaryTopAppliancesByUtilization x-agentic-access: action-class: connected consequence: read subject: optional scope: - sdwan:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/summary/top/applications/byUsage method: get operationId: getOrganizationSummaryTopApplicationsByUsage x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/summary/top/applications/categories/byUsage method: get operationId: getOrganizationSummaryTopApplicationsCategoriesByUsage x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/summary/top/clients/byUsage method: get operationId: getOrganizationSummaryTopClientsByUsage x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/summary/top/clients/manufacturers/byUsage method: get operationId: getOrganizationSummaryTopClientsManufacturersByUsage x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/summary/top/devices/byUsage method: get operationId: getOrganizationSummaryTopDevicesByUsage x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/summary/top/devices/models/byUsage method: get operationId: getOrganizationSummaryTopDevicesModelsByUsage x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/summary/top/networks/byStatus method: get operationId: getOrganizationSummaryTopNetworksByStatus x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/summary/top/ssids/byUsage method: get operationId: getOrganizationSummaryTopSsidsByUsage x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/summary/top/switches/byEnergyUsage method: get operationId: getOrganizationSummaryTopSwitchesByEnergyUsage x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/uplinks/statuses method: get operationId: getOrganizationUplinksStatuses x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/webhooks/alertTypes method: get operationId: getOrganizationWebhooksAlertTypes x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/webhooks/callbacks/statuses/{callbackId} method: get operationId: getOrganizationWebhooksCallbacksStatus x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/webhooks/logs method: get operationId: getOrganizationWebhooksLogs x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policy/destinationLists method: get operationId: getDestinationLists x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policy/destinationLists method: post operationId: createDestinationList x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policy/destinationLists/{destinationListId} method: patch operationId: updateDestinationLists x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policy/destinationLists/{destinationListId} method: delete operationId: deleteDestinationList x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policy/destinationLists/{destinationListId} method: get operationId: getDestinationList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policy/destinationLists/{destinationListId}/destinations method: get operationId: getDestinations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/policy/destinationLists/{destinationListId}/destinations method: post operationId: createDestinations x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/policy/destinationLists/{destinationListId}/destinations/remove method: delete operationId: deleteDestinations x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/reports/activity method: get operationId: getActivities x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/reports/topCategories method: get operationId: getTopCategories x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/reports/categoriesByTimerange method: get operationId: getRequestsByTimerangeAndCategory x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/reports/totalRequests method: get operationId: getTotalRequests x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/reports/totalRequests/{type} method: get operationId: getTotalRequestsByType x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/reports/summary method: get operationId: getSummary x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/reports/summary/{type} method: get operationId: getSummaryByType x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/reports/appDiscovery/applications method: get operationId: getApplicationsAppDiscovery x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/reports/appDiscovery/applications/{applicationId} method: get operationId: getApplication x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /devices/{serial}/sensor/commands method: get operationId: getDeviceSensorCommands x-agentic-access: action-class: connected consequence: read subject: optional scope: - sensor:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/sensor/commands method: post operationId: createDeviceSensorCommand x-agentic-access: action-class: acting consequence: physical subject: required scope: - sensor:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/sensor/commands/{commandId} method: get operationId: getDeviceSensorCommand x-agentic-access: action-class: connected consequence: read subject: optional scope: - sensor:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/sensor/relationships method: get operationId: getDeviceSensorRelationships x-agentic-access: action-class: connected consequence: read subject: optional scope: - sensor:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/sensor/relationships method: put operationId: updateDeviceSensorRelationships x-agentic-access: action-class: acting consequence: physical subject: required scope: - sensor:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sensor/alerts/current/overview/byMetric method: get operationId: getNetworkSensorAlertsCurrentOverviewByMetric x-agentic-access: action-class: connected consequence: read subject: optional scope: - sensor:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sensor/alerts/overview/byMetric method: get operationId: getNetworkSensorAlertsOverviewByMetric x-agentic-access: action-class: connected consequence: read subject: optional scope: - sensor:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sensor/alerts/profiles method: get operationId: getNetworkSensorAlertsProfiles x-agentic-access: action-class: connected consequence: read subject: optional scope: - sensor:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sensor/alerts/profiles method: post operationId: createNetworkSensorAlertsProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - sensor:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sensor/alerts/profiles/{id} method: get operationId: getNetworkSensorAlertsProfile x-agentic-access: action-class: connected consequence: read subject: optional scope: - sensor:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sensor/alerts/profiles/{id} method: put operationId: updateNetworkSensorAlertsProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - sensor:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sensor/alerts/profiles/{id} method: delete operationId: deleteNetworkSensorAlertsProfile x-agentic-access: action-class: acting consequence: write subject: required scope: - sensor:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sensor/mqttBrokers method: get operationId: getNetworkSensorMqttBrokers x-agentic-access: action-class: connected consequence: read subject: optional scope: - sensor:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sensor/mqttBrokers/{mqttBrokerId} method: get operationId: getNetworkSensorMqttBroker x-agentic-access: action-class: connected consequence: read subject: optional scope: - sensor:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sensor/mqttBrokers/{mqttBrokerId} method: put operationId: updateNetworkSensorMqttBroker x-agentic-access: action-class: acting consequence: write subject: required scope: - sensor:telemetry:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sensor/relationships method: get operationId: getNetworkSensorRelationships x-agentic-access: action-class: connected consequence: read subject: optional scope: - sensor:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/sensor/gateways/connections/latest method: get operationId: getOrganizationSensorGatewaysConnectionsLatest x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/sensor/readings/history method: get operationId: getOrganizationSensorReadingsHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - sensor:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/sensor/readings/latest method: get operationId: getOrganizationSensorReadingsLatest x-agentic-access: action-class: connected consequence: read subject: optional scope: - sensor:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/bypassActivationLockAttempts method: post operationId: createNetworkSmBypassActivationLockAttempt x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sm/bypassActivationLockAttempts/{attemptId} method: get operationId: getNetworkSmBypassActivationLockAttempt x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/devices method: get operationId: getNetworkSmDevices x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/devices/checkin method: post operationId: checkinNetworkSmDevices x-agentic-access: action-class: acting consequence: write subject: required scope: - sm:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sm/devices/fields method: put operationId: updateNetworkSmDevicesFields x-agentic-access: action-class: acting consequence: write subject: required scope: - sm:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sm/devices/lock method: post operationId: lockNetworkSmDevices x-agentic-access: action-class: acting consequence: write subject: required scope: - sm:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sm/devices/modifyTags method: post operationId: modifyNetworkSmDevicesTags x-agentic-access: action-class: acting consequence: write subject: required scope: - sm:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sm/devices/move method: post operationId: moveNetworkSmDevices x-agentic-access: action-class: acting consequence: write subject: required scope: - sm:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sm/devices/reboot method: post operationId: rebootNetworkSmDevices x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /networks/{networkId}/sm/devices/shutdown method: post operationId: shutdownNetworkSmDevices x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /networks/{networkId}/sm/devices/wipe method: post operationId: wipeNetworkSmDevices x-agentic-access: action-class: acting consequence: write subject: required scope: - sm:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sm/devices/{deviceId}/cellularUsageHistory method: get operationId: getNetworkSmDeviceCellularUsageHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/devices/{deviceId}/certs method: get operationId: getNetworkSmDeviceCerts x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/devices/{deviceId}/connectivity method: get operationId: getNetworkSmDeviceConnectivity x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/devices/{deviceId}/desktopLogs method: get operationId: getNetworkSmDeviceDesktopLogs x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/devices/{deviceId}/deviceCommandLogs method: get operationId: getNetworkSmDeviceDeviceCommandLogs x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/devices/{deviceId}/deviceProfiles method: get operationId: getNetworkSmDeviceDeviceProfiles x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/devices/{deviceId}/installApps method: post operationId: installNetworkSmDeviceApps x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sm/devices/{deviceId}/networkAdapters method: get operationId: getNetworkSmDeviceNetworkAdapters x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/devices/{deviceId}/performanceHistory method: get operationId: getNetworkSmDevicePerformanceHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/devices/{deviceId}/refreshDetails method: post operationId: refreshNetworkSmDeviceDetails x-agentic-access: action-class: acting consequence: write subject: required scope: - sm:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sm/devices/{deviceId}/restrictions method: get operationId: getNetworkSmDeviceRestrictions x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/devices/{deviceId}/securityCenters method: get operationId: getNetworkSmDeviceSecurityCenters x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/devices/{deviceId}/softwares method: get operationId: getNetworkSmDeviceSoftwares x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/devices/{deviceId}/unenroll method: post operationId: unenrollNetworkSmDevice x-agentic-access: action-class: acting consequence: write subject: required scope: - sm:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sm/devices/{deviceId}/uninstallApps method: post operationId: uninstallNetworkSmDeviceApps x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sm/devices/{deviceId}/wlanLists method: get operationId: getNetworkSmDeviceWlanLists x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/profiles method: get operationId: getNetworkSmProfiles x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/targetGroups method: get operationId: getNetworkSmTargetGroups x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/targetGroups method: post operationId: createNetworkSmTargetGroup x-agentic-access: action-class: acting consequence: write subject: required scope: - sm:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sm/targetGroups/{targetGroupId} method: get operationId: getNetworkSmTargetGroup x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/targetGroups/{targetGroupId} method: put operationId: updateNetworkSmTargetGroup x-agentic-access: action-class: acting consequence: write subject: required scope: - sm:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sm/targetGroups/{targetGroupId} method: delete operationId: deleteNetworkSmTargetGroup x-agentic-access: action-class: acting consequence: write subject: required scope: - sm:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sm/trustedAccessConfigs method: get operationId: getNetworkSmTrustedAccessConfigs x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/userAccessDevices method: get operationId: getNetworkSmUserAccessDevices x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/userAccessDevices/{userAccessDeviceId} method: delete operationId: deleteNetworkSmUserAccessDevice x-agentic-access: action-class: acting consequence: write subject: required scope: - sm:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/sm/users method: get operationId: getNetworkSmUsers x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/users/{userId}/deviceProfiles method: get operationId: getNetworkSmUserDeviceProfiles x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/sm/users/{userId}/softwares method: get operationId: getNetworkSmUserSoftwares x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/sm/admins/roles method: get operationId: getOrganizationSmAdminsRoles x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/sm/admins/roles method: post operationId: createOrganizationSmAdminsRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/sm/admins/roles/{roleId} method: get operationId: getOrganizationSmAdminsRole x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/sm/admins/roles/{roleId} method: put operationId: updateOrganizationSmAdminsRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/sm/admins/roles/{roleId} method: delete operationId: deleteOrganizationSmAdminsRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/sm/apnsCert method: get operationId: getOrganizationSmApnsCert x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/sm/sentry/policies/assignments method: put operationId: updateOrganizationSmSentryPoliciesAssignments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/sm/sentry/policies/assignments/byNetwork method: get operationId: getOrganizationSmSentryPoliciesAssignmentsByNetwork x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/sm/vppAccounts method: get operationId: getOrganizationSmVppAccounts x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/sm/vppAccounts/{vppAccountId} method: get operationId: getOrganizationSmVppAccount x-agentic-access: action-class: connected consequence: read subject: optional scope: - sm:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/spaces/integrate/status method: get operationId: getOrganizationSpacesIntegrateStatus x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:general:config:write token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/spaces/integration/remove method: post operationId: removeOrganizationSpacesIntegration x-agentic-access: action-class: acting consequence: write subject: required scope: - dashboard:general:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/switch/ports method: get operationId: getDeviceSwitchPorts x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/switch/ports/cycle method: post operationId: cycleDeviceSwitchPorts x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/switch/ports/statuses method: get operationId: getDeviceSwitchPortsStatuses x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/switch/ports/statuses/packets method: get operationId: getDeviceSwitchPortsStatusesPackets x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/switch/ports/{portId} method: get operationId: getDeviceSwitchPort x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/switch/ports/{portId} method: put operationId: updateDeviceSwitchPort x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/switch/routing/interfaces method: get operationId: getDeviceSwitchRoutingInterfaces x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/switch/routing/interfaces method: post operationId: createDeviceSwitchRoutingInterface x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/switch/routing/interfaces/{interfaceId} method: get operationId: getDeviceSwitchRoutingInterface x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/switch/routing/interfaces/{interfaceId} method: put operationId: updateDeviceSwitchRoutingInterface x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/switch/routing/interfaces/{interfaceId} method: delete operationId: deleteDeviceSwitchRoutingInterface x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/switch/routing/interfaces/{interfaceId}/dhcp method: get operationId: getDeviceSwitchRoutingInterfaceDhcp x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/switch/routing/interfaces/{interfaceId}/dhcp method: put operationId: updateDeviceSwitchRoutingInterfaceDhcp x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/switch/routing/staticRoutes method: get operationId: getDeviceSwitchRoutingStaticRoutes x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/switch/routing/staticRoutes method: post operationId: createDeviceSwitchRoutingStaticRoute x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/switch/routing/staticRoutes/{staticRouteId} method: get operationId: getDeviceSwitchRoutingStaticRoute x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/switch/routing/staticRoutes/{staticRouteId} method: put operationId: updateDeviceSwitchRoutingStaticRoute x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/switch/routing/staticRoutes/{staticRouteId} method: delete operationId: deleteDeviceSwitchRoutingStaticRoute x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/switch/warmSpare method: get operationId: getDeviceSwitchWarmSpare x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/switch/warmSpare method: put operationId: updateDeviceSwitchWarmSpare x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/accessControlLists method: get operationId: getNetworkSwitchAccessControlLists x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/accessControlLists method: put operationId: updateNetworkSwitchAccessControlLists x-agentic-access: action-class: acting consequence: safety-critical subject: required scope: - switch:config:write audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /networks/{networkId}/switch/accessPolicies method: get operationId: getNetworkSwitchAccessPolicies x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/accessPolicies method: post operationId: createNetworkSwitchAccessPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/accessPolicies/{accessPolicyNumber} method: get operationId: getNetworkSwitchAccessPolicy x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/accessPolicies/{accessPolicyNumber} method: put operationId: updateNetworkSwitchAccessPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/accessPolicies/{accessPolicyNumber} method: delete operationId: deleteNetworkSwitchAccessPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/alternateManagementInterface method: get operationId: getNetworkSwitchAlternateManagementInterface x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/alternateManagementInterface method: put operationId: updateNetworkSwitchAlternateManagementInterface x-agentic-access: action-class: acting consequence: safety-critical subject: required scope: - switch:config:write audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /networks/{networkId}/switch/dhcp/v4/servers/seen method: get operationId: getNetworkSwitchDhcpV4ServersSeen x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/dhcpServerPolicy method: get operationId: getNetworkSwitchDhcpServerPolicy x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/dhcpServerPolicy method: put operationId: updateNetworkSwitchDhcpServerPolicy x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/dhcpServerPolicy/arpInspection/trustedServers method: get operationId: getNetworkSwitchDhcpServerPolicyArpInspectionTrustedServers x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/dhcpServerPolicy/arpInspection/trustedServers method: post operationId: createNetworkSwitchDhcpServerPolicyArpInspectionTrustedServer x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/dhcpServerPolicy/arpInspection/trustedServers/{trustedServerId} method: put operationId: updateNetworkSwitchDhcpServerPolicyArpInspectionTrustedServer x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/dhcpServerPolicy/arpInspection/trustedServers/{trustedServerId} method: delete operationId: deleteNetworkSwitchDhcpServerPolicyArpInspectionTrustedServer x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/dhcpServerPolicy/arpInspection/warnings/byDevice method: get operationId: getNetworkSwitchDhcpServerPolicyArpInspectionWarningsByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/dscpToCosMappings method: get operationId: getNetworkSwitchDscpToCosMappings x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/dscpToCosMappings method: put operationId: updateNetworkSwitchDscpToCosMappings x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/linkAggregations method: get operationId: getNetworkSwitchLinkAggregations x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/linkAggregations method: post operationId: createNetworkSwitchLinkAggregation x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/linkAggregations/{linkAggregationId} method: put operationId: updateNetworkSwitchLinkAggregation x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/linkAggregations/{linkAggregationId} method: delete operationId: deleteNetworkSwitchLinkAggregation x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/mtu method: get operationId: getNetworkSwitchMtu x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/mtu method: put operationId: updateNetworkSwitchMtu x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/portSchedules method: get operationId: getNetworkSwitchPortSchedules x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/portSchedules method: post operationId: createNetworkSwitchPortSchedule x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/portSchedules/{portScheduleId} method: delete operationId: deleteNetworkSwitchPortSchedule x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/portSchedules/{portScheduleId} method: put operationId: updateNetworkSwitchPortSchedule x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/qosRules method: get operationId: getNetworkSwitchQosRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/qosRules method: post operationId: createNetworkSwitchQosRule x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/qosRules/order method: get operationId: getNetworkSwitchQosRulesOrder x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/qosRules/order method: put operationId: updateNetworkSwitchQosRulesOrder x-agentic-access: action-class: acting consequence: physical subject: required scope: - switch:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/qosRules/{qosRuleId} method: get operationId: getNetworkSwitchQosRule x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/qosRules/{qosRuleId} method: delete operationId: deleteNetworkSwitchQosRule x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/qosRules/{qosRuleId} method: put operationId: updateNetworkSwitchQosRule x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/routing/multicast method: get operationId: getNetworkSwitchRoutingMulticast x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/routing/multicast method: put operationId: updateNetworkSwitchRoutingMulticast x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/routing/multicast/rendezvousPoints method: get operationId: getNetworkSwitchRoutingMulticastRendezvousPoints x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/routing/multicast/rendezvousPoints method: post operationId: createNetworkSwitchRoutingMulticastRendezvousPoint x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/routing/multicast/rendezvousPoints/{rendezvousPointId} method: get operationId: getNetworkSwitchRoutingMulticastRendezvousPoint x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/routing/multicast/rendezvousPoints/{rendezvousPointId} method: delete operationId: deleteNetworkSwitchRoutingMulticastRendezvousPoint x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/routing/multicast/rendezvousPoints/{rendezvousPointId} method: put operationId: updateNetworkSwitchRoutingMulticastRendezvousPoint x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/routing/ospf method: get operationId: getNetworkSwitchRoutingOspf x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/routing/ospf method: put operationId: updateNetworkSwitchRoutingOspf x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/settings method: get operationId: getNetworkSwitchSettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/settings method: put operationId: updateNetworkSwitchSettings x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/stacks method: get operationId: getNetworkSwitchStacks x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/stacks method: post operationId: createNetworkSwitchStack x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/stacks/{switchStackId} method: put operationId: updateNetworkSwitchStack x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/stacks/{switchStackId} method: get operationId: getNetworkSwitchStack x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/stacks/{switchStackId} method: delete operationId: deleteNetworkSwitchStack x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/stacks/{switchStackId}/add method: post operationId: addNetworkSwitchStack x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/stacks/{switchStackId}/remove method: post operationId: removeNetworkSwitchStack x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/stacks/{switchStackId}/routing/interfaces method: get operationId: getNetworkSwitchStackRoutingInterfaces x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/stacks/{switchStackId}/routing/interfaces method: post operationId: createNetworkSwitchStackRoutingInterface x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/stacks/{switchStackId}/routing/interfaces/{interfaceId} method: get operationId: getNetworkSwitchStackRoutingInterface x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/stacks/{switchStackId}/routing/interfaces/{interfaceId} method: put operationId: updateNetworkSwitchStackRoutingInterface x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/stacks/{switchStackId}/routing/interfaces/{interfaceId} method: delete operationId: deleteNetworkSwitchStackRoutingInterface x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/stacks/{switchStackId}/routing/interfaces/{interfaceId}/dhcp method: get operationId: getNetworkSwitchStackRoutingInterfaceDhcp x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/stacks/{switchStackId}/routing/interfaces/{interfaceId}/dhcp method: put operationId: updateNetworkSwitchStackRoutingInterfaceDhcp x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/stacks/{switchStackId}/routing/staticRoutes method: get operationId: getNetworkSwitchStackRoutingStaticRoutes x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/stacks/{switchStackId}/routing/staticRoutes method: post operationId: createNetworkSwitchStackRoutingStaticRoute x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/stacks/{switchStackId}/routing/staticRoutes/{staticRouteId} method: get operationId: getNetworkSwitchStackRoutingStaticRoute x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/stacks/{switchStackId}/routing/staticRoutes/{staticRouteId} method: put operationId: updateNetworkSwitchStackRoutingStaticRoute x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/stacks/{switchStackId}/routing/staticRoutes/{staticRouteId} method: delete operationId: deleteNetworkSwitchStackRoutingStaticRoute x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/switch/stormControl method: get operationId: getNetworkSwitchStormControl x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/stormControl method: put operationId: updateNetworkSwitchStormControl x-agentic-access: action-class: acting consequence: safety-critical subject: required scope: - switch:config:write audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /networks/{networkId}/switch/stp method: get operationId: getNetworkSwitchStp x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/switch/stp method: put operationId: updateNetworkSwitchStp x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/configTemplates/{configTemplateId}/switch/profiles method: get operationId: getOrganizationConfigTemplateSwitchProfiles x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/configTemplates/{configTemplateId}/switch/profiles/{profileId}/ports method: get operationId: getOrganizationConfigTemplateSwitchProfilePorts x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/configTemplates/{configTemplateId}/switch/profiles/{profileId}/ports/{portId} method: get operationId: getOrganizationConfigTemplateSwitchProfilePort x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/configTemplates/{configTemplateId}/switch/profiles/{profileId}/ports/{portId} method: put operationId: updateOrganizationConfigTemplateSwitchProfilePort x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/summary/switch/power/history method: get operationId: getOrganizationSummarySwitchPowerHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/switch/devices/clone method: post operationId: cloneOrganizationSwitchDevices x-agentic-access: action-class: acting consequence: write subject: required scope: - switch:config:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/switch/ports/bySwitch method: get operationId: getOrganizationSwitchPortsBySwitch x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/switch/ports/clients/overview/byDevice method: get operationId: getOrganizationSwitchPortsClientsOverviewByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/switch/ports/overview method: get operationId: getOrganizationSwitchPortsOverview x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/switch/ports/statuses/bySwitch method: get operationId: getOrganizationSwitchPortsStatusesBySwitch x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/switch/ports/topology/discovery/byDevice method: get operationId: getOrganizationSwitchPortsTopologyDiscoveryByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/switch/ports/usage/history/byDevice/byInterval method: get operationId: getOrganizationSwitchPortsUsageHistoryByDeviceByInterval x-agentic-access: action-class: connected consequence: read subject: optional scope: - switch:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/wireless/alternateManagementInterface/ipv6 method: put operationId: updateDeviceWirelessAlternateManagementInterfaceIpv6 x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/wireless/bluetooth/settings method: get operationId: getDeviceWirelessBluetoothSettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/wireless/bluetooth/settings method: put operationId: updateDeviceWirelessBluetoothSettings x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/wireless/connectionStats method: get operationId: getDeviceWirelessConnectionStats x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/wireless/electronicShelfLabel method: get operationId: getDeviceWirelessElectronicShelfLabel x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /devices/{serial}/wireless/electronicShelfLabel method: put operationId: updateDeviceWirelessElectronicShelfLabel x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/wireless/latencyStats method: get operationId: getDeviceWirelessLatencyStats x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/wireless/radio/settings method: get operationId: getDeviceWirelessRadioSettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/wireless/radio/settings method: put operationId: updateDeviceWirelessRadioSettings x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/wireless/status method: get operationId: getDeviceWirelessStatus x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /devices/{serial}/wireless/zigbee/enrollments method: post operationId: createDeviceWirelessZigbeeEnrollment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /devices/{serial}/wireless/zigbee/enrollments/{enrollmentId} method: get operationId: getDeviceWirelessZigbeeEnrollment x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/airMarshal method: get operationId: getNetworkWirelessAirMarshal x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/airMarshal/rules method: post operationId: createNetworkWirelessAirMarshalRule x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/airMarshal/rules/{ruleId} method: put operationId: updateNetworkWirelessAirMarshalRule x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/airMarshal/rules/{ruleId} method: delete operationId: deleteNetworkWirelessAirMarshalRule x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/airMarshal/settings method: put operationId: updateNetworkWirelessAirMarshalSettings x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/alternateManagementInterface method: get operationId: getNetworkWirelessAlternateManagementInterface x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/alternateManagementInterface method: put operationId: updateNetworkWirelessAlternateManagementInterface x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/billing method: get operationId: getNetworkWirelessBilling x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/billing method: put operationId: updateNetworkWirelessBilling x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/bluetooth/settings method: get operationId: getNetworkWirelessBluetoothSettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/bluetooth/settings method: put operationId: updateNetworkWirelessBluetoothSettings x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/channelUtilizationHistory method: get operationId: getNetworkWirelessChannelUtilizationHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/clientCountHistory method: get operationId: getNetworkWirelessClientCountHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/clients/connectionStats method: get operationId: getNetworkWirelessClientsConnectionStats x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/clients/latencyStats method: get operationId: getNetworkWirelessClientsLatencyStats x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/clients/{clientId}/connectionStats method: get operationId: getNetworkWirelessClientConnectionStats x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/clients/{clientId}/connectivityEvents method: get operationId: getNetworkWirelessClientConnectivityEvents x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/clients/{clientId}/latencyHistory method: get operationId: getNetworkWirelessClientLatencyHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/clients/{clientId}/latencyStats method: get operationId: getNetworkWirelessClientLatencyStats x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/connectionStats method: get operationId: getNetworkWirelessConnectionStats x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/dataRateHistory method: get operationId: getNetworkWirelessDataRateHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/devices/connectionStats method: get operationId: getNetworkWirelessDevicesConnectionStats x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/devices/latencyStats method: get operationId: getNetworkWirelessDevicesLatencyStats x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/electronicShelfLabel method: get operationId: getNetworkWirelessElectronicShelfLabel x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/electronicShelfLabel method: put operationId: updateNetworkWirelessElectronicShelfLabel x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/electronicShelfLabel/configuredDevices method: get operationId: getNetworkWirelessElectronicShelfLabelConfiguredDevices x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ethernet/ports/profiles method: get operationId: getNetworkWirelessEthernetPortsProfiles x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ethernet/ports/profiles method: post operationId: createNetworkWirelessEthernetPortsProfile x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ethernet/ports/profiles/assign method: post operationId: assignNetworkWirelessEthernetPortsProfiles x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ethernet/ports/profiles/setDefault method: post operationId: setNetworkWirelessEthernetPortsProfilesDefault x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ethernet/ports/profiles/{profileId} method: get operationId: getNetworkWirelessEthernetPortsProfile x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ethernet/ports/profiles/{profileId} method: put operationId: updateNetworkWirelessEthernetPortsProfile x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ethernet/ports/profiles/{profileId} method: delete operationId: deleteNetworkWirelessEthernetPortsProfile x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/failedConnections method: get operationId: getNetworkWirelessFailedConnections x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/latencyHistory method: get operationId: getNetworkWirelessLatencyHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/latencyStats method: get operationId: getNetworkWirelessLatencyStats x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/location/scanning method: put operationId: updateNetworkWirelessLocationScanning x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:telemetry:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/meshStatuses method: get operationId: getNetworkWirelessMeshStatuses x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/radio/rrm method: put operationId: updateNetworkWirelessRadioRrm x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/rfProfiles method: get operationId: getNetworkWirelessRfProfiles x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/rfProfiles method: post operationId: createNetworkWirelessRfProfile x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/rfProfiles/{rfProfileId} method: put operationId: updateNetworkWirelessRfProfile x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/rfProfiles/{rfProfileId} method: delete operationId: deleteNetworkWirelessRfProfile x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/rfProfiles/{rfProfileId} method: get operationId: getNetworkWirelessRfProfile x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/settings method: get operationId: getNetworkWirelessSettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/settings method: put operationId: updateNetworkWirelessSettings x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/signalQualityHistory method: get operationId: getNetworkWirelessSignalQualityHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ssids method: get operationId: getNetworkWirelessSsids x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ssids/{number} method: get operationId: getNetworkWirelessSsid x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ssids/{number} method: put operationId: updateNetworkWirelessSsid x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ssids/{number}/bonjourForwarding method: get operationId: getNetworkWirelessSsidBonjourForwarding x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ssids/{number}/bonjourForwarding method: put operationId: updateNetworkWirelessSsidBonjourForwarding x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ssids/{number}/deviceTypeGroupPolicies method: get operationId: getNetworkWirelessSsidDeviceTypeGroupPolicies x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ssids/{number}/deviceTypeGroupPolicies method: put operationId: updateNetworkWirelessSsidDeviceTypeGroupPolicies x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ssids/{number}/eapOverride method: get operationId: getNetworkWirelessSsidEapOverride x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ssids/{number}/eapOverride method: put operationId: updateNetworkWirelessSsidEapOverride x-agentic-access: action-class: acting consequence: safety-critical subject: required scope: - wireless:config:write audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /networks/{networkId}/wireless/ssids/{number}/firewall/l3FirewallRules method: get operationId: getNetworkWirelessSsidFirewallL3FirewallRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ssids/{number}/firewall/l3FirewallRules method: put operationId: updateNetworkWirelessSsidFirewallL3FirewallRules x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ssids/{number}/firewall/l7FirewallRules method: get operationId: getNetworkWirelessSsidFirewallL7FirewallRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ssids/{number}/firewall/l7FirewallRules method: put operationId: updateNetworkWirelessSsidFirewallL7FirewallRules x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ssids/{number}/hotspot20 method: get operationId: getNetworkWirelessSsidHotspot20 x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ssids/{number}/hotspot20 method: put operationId: updateNetworkWirelessSsidHotspot20 x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ssids/{number}/identityPsks method: get operationId: getNetworkWirelessSsidIdentityPsks x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ssids/{number}/identityPsks method: post operationId: createNetworkWirelessSsidIdentityPsk x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ssids/{number}/identityPsks/{identityPskId} method: get operationId: getNetworkWirelessSsidIdentityPsk x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ssids/{number}/identityPsks/{identityPskId} method: put operationId: updateNetworkWirelessSsidIdentityPsk x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ssids/{number}/identityPsks/{identityPskId} method: delete operationId: deleteNetworkWirelessSsidIdentityPsk x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ssids/{number}/openRoaming method: put operationId: updateNetworkWirelessSsidOpenRoaming x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ssids/{number}/schedules method: get operationId: getNetworkWirelessSsidSchedules x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ssids/{number}/schedules method: put operationId: updateNetworkWirelessSsidSchedules x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ssids/{number}/splash/settings method: get operationId: getNetworkWirelessSsidSplashSettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ssids/{number}/splash/settings method: put operationId: updateNetworkWirelessSsidSplashSettings x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ssids/{number}/trafficShaping/rules method: put operationId: updateNetworkWirelessSsidTrafficShapingRules x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/ssids/{number}/trafficShaping/rules method: get operationId: getNetworkWirelessSsidTrafficShapingRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ssids/{number}/vpn method: get operationId: getNetworkWirelessSsidVpn x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/ssids/{number}/vpn method: put operationId: updateNetworkWirelessSsidVpn x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /networks/{networkId}/wireless/usageHistory method: get operationId: getNetworkWirelessUsageHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /networks/{networkId}/wireless/zigbee method: put operationId: updateNetworkWirelessZigbee x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/assurance/impactedDevice/wireless/byNetwork method: get operationId: getOrganizationAssuranceImpactedDeviceWirelessByNetwork x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/airMarshal/rules method: get operationId: getOrganizationWirelessAirMarshalRules x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/airMarshal/settings/byNetwork method: get operationId: getOrganizationWirelessAirMarshalSettingsByNetwork x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/clients/connections/impacted/byNetwork/bySsid method: get operationId: getOrganizationWirelessClientsConnectionsImpactedByNetworkBySsid x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/clients/overview/byDevice method: get operationId: getOrganizationWirelessClientsOverviewByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/clients/usage/byNetwork method: get operationId: getOrganizationWirelessClientsUsageByNetwork x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/clients/usage/byNetwork/bySsid method: get operationId: getOrganizationWirelessClientsUsageByNetworkBySsid x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/clients/usage/bySsid method: get operationId: getOrganizationWirelessClientsUsageBySsid x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/devices/channelUtilization/byDevice method: get operationId: getOrganizationWirelessDevicesChannelUtilizationByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/devices/channelUtilization/byNetwork method: get operationId: getOrganizationWirelessDevicesChannelUtilizationByNetwork x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/devices/channelUtilization/history/byDevice/byInterval method: get operationId: getOrganizationWirelessDevicesChannelUtilizationHistoryByDeviceByInterval x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/devices/channelUtilization/history/byNetwork/byInterval method: get operationId: getOrganizationWirelessDevicesChannelUtilizationHistoryByNetworkByInterval x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/devices/ethernet/statuses method: get operationId: getOrganizationWirelessDevicesEthernetStatuses x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/devices/packetLoss/byClient method: get operationId: getOrganizationWirelessDevicesPacketLossByClient x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/devices/packetLoss/byDevice method: get operationId: getOrganizationWirelessDevicesPacketLossByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/devices/packetLoss/byNetwork method: get operationId: getOrganizationWirelessDevicesPacketLossByNetwork x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/devices/power/mode/history method: get operationId: getOrganizationWirelessDevicesPowerModeHistory x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/devices/provisioning/deployments method: get operationId: getOrganizationWirelessDevicesProvisioningDeployments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/devices/provisioning/deployments method: post operationId: createOrganizationWirelessDevicesProvisioningDeployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/devices/provisioning/deployments method: put operationId: updateOrganizationWirelessDevicesProvisioningDeployments x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/devices/provisioning/deployments/{deploymentId} method: delete operationId: deleteOrganizationWirelessDevicesProvisioningDeployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/devices/radsec/certificates/authorities method: get operationId: getOrganizationWirelessDevicesRadsecCertificatesAuthorities x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:iam:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/devices/radsec/certificates/authorities method: put operationId: updateOrganizationWirelessDevicesRadsecCertificatesAuthorities x-agentic-access: action-class: acting consequence: physical subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/devices/radsec/certificates/authorities method: post operationId: createOrganizationWirelessDevicesRadsecCertificatesAuthority x-agentic-access: action-class: acting consequence: physical subject: required scope: - dashboard:iam:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/devices/radsec/certificates/authorities/crls method: get operationId: getOrganizationWirelessDevicesRadsecCertificatesAuthoritiesCrls x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:iam:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/devices/radsec/certificates/authorities/crls/deltas method: get operationId: getOrganizationWirelessDevicesRadsecCertificatesAuthoritiesCrlsDeltas x-agentic-access: action-class: connected consequence: read subject: optional scope: - dashboard:iam:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/devices/system/cpu/load/history method: get operationId: getOrganizationWirelessDevicesSystemCpuLoadHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/devices/wirelessControllers/byDevice method: get operationId: getOrganizationWirelessDevicesWirelessControllersByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/location/scanning/byNetwork method: get operationId: getOrganizationWirelessLocationScanningByNetwork x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/location/scanning/receivers method: get operationId: getOrganizationWirelessLocationScanningReceivers x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/location/scanning/receivers method: post operationId: createOrganizationWirelessLocationScanningReceiver x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:telemetry:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/location/scanning/receivers/{receiverId} method: put operationId: updateOrganizationWirelessLocationScanningReceiver x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:telemetry:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/location/scanning/receivers/{receiverId} method: delete operationId: deleteOrganizationWirelessLocationScanningReceiver x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:telemetry:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/mqtt/settings method: get operationId: getOrganizationWirelessMqttSettings x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/mqtt/settings method: put operationId: updateOrganizationWirelessMqttSettings x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:telemetry:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/radio/autoRf/channels/recalculate method: post operationId: recalculateOrganizationWirelessRadioAutoRfChannels x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/radio/rrm/byNetwork method: get operationId: getOrganizationWirelessRadioRrmByNetwork x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/rfProfiles/assignments/byDevice method: get operationId: getOrganizationWirelessRfProfilesAssignmentsByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/ssids/firewall/isolation/allowlist/entries method: get operationId: getOrganizationWirelessSsidsFirewallIsolationAllowlistEntries x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/ssids/firewall/isolation/allowlist/entries method: post operationId: createOrganizationWirelessSsidsFirewallIsolationAllowlistEntry x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/ssids/firewall/isolation/allowlist/entries/{entryId} method: delete operationId: deleteOrganizationWirelessSsidsFirewallIsolationAllowlistEntry x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/ssids/firewall/isolation/allowlist/entries/{entryId} method: put operationId: updateOrganizationWirelessSsidsFirewallIsolationAllowlistEntry x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/ssids/openRoaming/byNetwork method: get operationId: getOrganizationWirelessSsidsOpenRoamingByNetwork x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:config:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/ssids/profiles method: get operationId: getOrganizationWirelessSsidsProfiles x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/ssids/profiles method: post operationId: createOrganizationWirelessSsidsProfile x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/ssids/profiles/assignments method: get operationId: getOrganizationWirelessSsidsProfilesAssignments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/ssids/profiles/assignments method: post operationId: createOrganizationWirelessSsidsProfilesAssignment x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/ssids/profiles/assignments method: delete operationId: deleteOrganizationWirelessSsidsProfilesAssignments x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/ssids/profiles/assignments/byNetwork method: get operationId: getOrganizationWirelessSsidsProfilesAssignmentsByNetwork x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/ssids/profiles/overviews method: get operationId: getOrganizationWirelessSsidsProfilesOverviews x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/ssids/profiles/{id} method: put operationId: updateOrganizationWirelessSsidsProfile x-agentic-access: action-class: acting consequence: physical subject: required scope: - wireless:config:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/ssids/profiles/{id} method: delete operationId: deleteOrganizationWirelessSsidsProfile x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/ssids/statuses/byDevice method: get operationId: getOrganizationWirelessSsidsStatusesByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/zigbee/byNetwork method: get operationId: getOrganizationWirelessZigbeeByNetwork x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/zigbee/devices method: get operationId: getOrganizationWirelessZigbeeDevices x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/zigbee/devices/{id} method: put operationId: updateOrganizationWirelessZigbeeDevice x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/zigbee/disenrollments method: post operationId: createOrganizationWirelessZigbeeDisenrollment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wireless/zigbee/disenrollments/{disenrollmentId} method: get operationId: getOrganizationWirelessZigbeeDisenrollment x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/zigbee/doorLocks method: get operationId: getOrganizationWirelessZigbeeDoorLocks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wireless/zigbee/doorLocks/{doorLockId} method: put operationId: updateOrganizationWirelessZigbeeDoorLock x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationId}/wirelessController/availabilities/changeHistory method: get operationId: getOrganizationWirelessControllerAvailabilitiesChangeHistory x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wirelessController/clients/overview/history/byDevice/byInterval method: get operationId: getOrganizationWirelessControllerClientsOverviewHistoryByDeviceByInterval x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wirelessController/connections method: get operationId: getOrganizationWirelessControllerConnections x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wirelessController/devices/interfaces/l2/byDevice method: get operationId: getOrganizationWirelessControllerDevicesInterfacesL2ByDevice x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wirelessController/devices/interfaces/l2/statuses/changeHistory/byDevice method: get operationId: getOrganizationWirelessControllerDevicesInterfacesL2StatusesChangeHistoryByDevice x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wirelessController/devices/interfaces/l2/usage/history/byInterval method: get operationId: getOrganizationWirelessControllerDevicesInterfacesL2UsageHistoryByInterval x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wirelessController/devices/interfaces/l3/byDevice method: get operationId: getOrganizationWirelessControllerDevicesInterfacesL3ByDevice x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wirelessController/devices/interfaces/l3/statuses/changeHistory/byDevice method: get operationId: getOrganizationWirelessControllerDevicesInterfacesL3StatusesChangeHistoryByDevice x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wirelessController/devices/interfaces/l3/usage/history/byInterval method: get operationId: getOrganizationWirelessControllerDevicesInterfacesL3UsageHistoryByInterval x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wirelessController/devices/interfaces/packets/overview/byDevice method: get operationId: getOrganizationWirelessControllerDevicesInterfacesPacketsOverviewByDevice x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wirelessController/devices/interfaces/usage/history/byInterval method: get operationId: getOrganizationWirelessControllerDevicesInterfacesUsageHistoryByInterval x-agentic-access: action-class: connected consequence: read subject: optional scope: - wireless:telemetry:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wirelessController/devices/redundancy/failover/history method: get operationId: getOrganizationWirelessControllerDevicesRedundancyFailoverHistory x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wirelessController/devices/redundancy/statuses method: get operationId: getOrganizationWirelessControllerDevicesRedundancyStatuses x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wirelessController/devices/system/utilization/history/byInterval method: get operationId: getOrganizationWirelessControllerDevicesSystemUtilizationHistoryByInterval x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organizations/{organizationId}/wirelessController/overview/byDevice method: get operationId: getOrganizationWirelessControllerOverviewByDevice x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none