generated: '2026-07-15'
method: generated
source: openapi/crossplane-kubernetes-api-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 31
  by_action_class:
    connected: 14
    acting: 17
  by_consequence:
    read: 14
    write: 15
    physical: 2
  human_in_the_loop_required: 0
operations:
- path: /apis/apiextensions.crossplane.io/v1/compositions
  method: get
  operationId: listCompositions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/apiextensions.crossplane.io/v1/compositions
  method: post
  operationId: createComposition
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/apiextensions.crossplane.io/v1/compositions/{name}
  method: get
  operationId: getComposition
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/apiextensions.crossplane.io/v1/compositions/{name}
  method: put
  operationId: replaceComposition
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/apiextensions.crossplane.io/v1/compositions/{name}
  method: delete
  operationId: deleteComposition
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/apiextensions.crossplane.io/v1/compositeresourcedefinitions
  method: get
  operationId: listCompositeResourceDefinitions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/apiextensions.crossplane.io/v1/compositeresourcedefinitions
  method: post
  operationId: createCompositeResourceDefinition
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/apiextensions.crossplane.io/v1/compositeresourcedefinitions/{name}
  method: get
  operationId: getCompositeResourceDefinition
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/apiextensions.crossplane.io/v1/compositeresourcedefinitions/{name}
  method: put
  operationId: replaceCompositeResourceDefinition
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/apiextensions.crossplane.io/v1/compositeresourcedefinitions/{name}
  method: delete
  operationId: deleteCompositeResourceDefinition
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/apiextensions.crossplane.io/v1/environmentconfigs
  method: get
  operationId: listEnvironmentConfigs
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/apiextensions.crossplane.io/v1/environmentconfigs
  method: post
  operationId: createEnvironmentConfig
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/apiextensions.crossplane.io/v1/environmentconfigs/{name}
  method: get
  operationId: getEnvironmentConfig
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/apiextensions.crossplane.io/v1/environmentconfigs/{name}
  method: delete
  operationId: deleteEnvironmentConfig
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/pkg.crossplane.io/v1/providers
  method: get
  operationId: listProviders
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/pkg.crossplane.io/v1/providers
  method: post
  operationId: createProvider
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/pkg.crossplane.io/v1/providers/{name}
  method: get
  operationId: getProvider
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/pkg.crossplane.io/v1/providers/{name}
  method: put
  operationId: replaceProvider
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/pkg.crossplane.io/v1/providers/{name}
  method: delete
  operationId: deleteProvider
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/pkg.crossplane.io/v1/functions
  method: get
  operationId: listFunctions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/pkg.crossplane.io/v1/functions
  method: post
  operationId: createFunction
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/pkg.crossplane.io/v1/functions/{name}
  method: get
  operationId: getFunction
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/pkg.crossplane.io/v1/functions/{name}
  method: delete
  operationId: deleteFunction
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/pkg.crossplane.io/v1/configurations
  method: get
  operationId: listConfigurations
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/pkg.crossplane.io/v1/configurations
  method: post
  operationId: createConfiguration
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/pkg.crossplane.io/v1/configurations/{name}
  method: get
  operationId: getConfiguration
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/pkg.crossplane.io/v1/configurations/{name}
  method: delete
  operationId: deleteConfiguration
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/pkg.crossplane.io/v1beta1/deploymentruntimeconfigs
  method: get
  operationId: listDeploymentRuntimeConfigs
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/pkg.crossplane.io/v1beta1/deploymentruntimeconfigs
  method: post
  operationId: createDeploymentRuntimeConfig
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/pkg.crossplane.io/v1beta1/deploymentruntimeconfigs/{name}
  method: get
  operationId: getDeploymentRuntimeConfig
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/pkg.crossplane.io/v1beta1/deploymentruntimeconfigs/{name}
  method: delete
  operationId: deleteDeploymentRuntimeConfig
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required