generated: '2026-07-15' method: generated source: openapi/exoscale-openapi.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 338 by_action_class: acting: 219 connected: 119 by_consequence: write: 191 read: 119 safety-critical: 24 physical: 4 human_in_the_loop_required: 24 operations: - path: /load-balancer/{id}/service/{service-id} method: delete operationId: delete-load-balancer-service x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /load-balancer/{id}/service/{service-id} method: put operationId: update-load-balancer-service x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /load-balancer/{id}/service/{service-id} method: get operationId: get-load-balancer-service x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-external-endpoint-opensearch/{endpoint-id} method: delete operationId: delete-dbaas-external-endpoint-opensearch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-endpoint-opensearch/{endpoint-id} method: get operationId: get-dbaas-external-endpoint-opensearch x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-external-endpoint-opensearch/{endpoint-id} method: put operationId: update-dbaas-external-endpoint-opensearch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-opensearch/{name}/acl-config method: get operationId: get-dbaas-opensearch-acl-config x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-opensearch/{name}/acl-config method: put operationId: update-dbaas-opensearch-acl-config x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance-pool/{id}:scale method: put operationId: scale-instance-pool x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance/{id}:create-snapshot method: post operationId: create-snapshot x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-valkey/{name}/migration/stop method: post operationId: stop-dbaas-valkey-migration x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /reverse-dns/elastic-ip/{id} method: get operationId: get-reverse-dns-elastic-ip x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /reverse-dns/elastic-ip/{id} method: post operationId: update-reverse-dns-elastic-ip x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /reverse-dns/elastic-ip/{id} method: delete operationId: delete-reverse-dns-elastic-ip x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /anti-affinity-group method: get operationId: list-anti-affinity-groups x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /anti-affinity-group method: post operationId: create-anti-affinity-group x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ai/ai-api-key method: get operationId: list-ai-api-keys x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ai/ai-api-key method: post operationId: create-ai-api-key x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /usage-report method: get operationId: get-usage-report x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /event method: get operationId: list-events x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /security-group/{id}/rules/{rule-id} method: delete operationId: delete-rule-from-security-group x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-grafana/{name}/maintenance/start method: put operationId: start-dbaas-grafana-maintenance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /kms-key/{id}/disable-key-rotation method: post operationId: disable-kms-key-rotation x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /dbaas-postgres/{service}/upgrade-check method: post operationId: create-dbaas-pg-upgrade-check x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-mysql/{service-name}/user/{username}/password/reset method: put operationId: reset-dbaas-mysql-user-password x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /ai/help/inference-engine-parameters method: get operationId: get-inference-engine-help x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /load-balancer method: post operationId: create-load-balancer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /load-balancer method: get operationId: list-load-balancers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /security-group method: post operationId: create-security-group x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /security-group method: get operationId: list-security-groups x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-postgres/{service-name}/connection-pool method: post operationId: create-dbaas-pg-connection-pool x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-mysql/{name} method: put operationId: update-dbaas-service-mysql x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-mysql/{name} method: get operationId: get-dbaas-service-mysql x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-mysql/{name} method: post operationId: create-dbaas-service-mysql x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-mysql/{name} method: delete operationId: delete-dbaas-service-mysql x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /iam-role/{target-role-id}/assume method: post operationId: assume-iam-role x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /private-network/{id}:attach method: put operationId: attach-instance-to-private-network x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /kms-key/{id} method: get operationId: get-kms-key x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-thanos/{name}/maintenance/start method: put operationId: start-dbaas-thanos-maintenance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-endpoint-elasticsearch/{endpoint-id} method: delete operationId: delete-dbaas-external-endpoint-elasticsearch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-endpoint-elasticsearch/{endpoint-id} method: get operationId: get-dbaas-external-endpoint-elasticsearch x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-external-endpoint-elasticsearch/{endpoint-id} method: put operationId: update-dbaas-external-endpoint-elasticsearch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ai/model method: post operationId: create-model x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ai/model method: get operationId: list-models x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-mysql/{service-name}/user method: post operationId: create-dbaas-mysql-user x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-service-type method: get operationId: list-dbaas-service-types x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ai/deployment/{id}/scale method: post operationId: scale-deployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance-type/{id} method: get operationId: get-instance-type x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /instance/{id}:password method: get operationId: reveal-instance-password x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /sks-template/{kube-version}/{variant} method: get operationId: get-active-nodepool-template x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /instance/{id}:resize-disk method: put operationId: resize-instance-disk x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-service method: get operationId: list-dbaas-services x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /elastic-ip method: post operationId: create-elastic-ip x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /elastic-ip method: get operationId: list-elastic-ips x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /zone method: get operationId: list-zones x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /instance-pool method: get operationId: list-instance-pools x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /instance-pool method: post operationId: create-instance-pool x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-endpoint-rsyslog/{name} method: post operationId: create-dbaas-external-endpoint-rsyslog x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /sks-cluster-kubeconfig/{id} method: post operationId: generate-sks-cluster-kubeconfig x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dns-domain/{domain-id}/record method: get operationId: list-dns-domain-records x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dns-domain/{domain-id}/record method: post operationId: create-dns-domain-record x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-ca-certificate method: get operationId: get-dbaas-ca-certificate x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-settings-grafana method: get operationId: get-dbaas-settings-grafana x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /deploy-target method: get operationId: list-deploy-targets x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /instance-type method: get operationId: list-instance-types x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ai/deployment method: post operationId: create-deployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ai/deployment method: get operationId: list-deployments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-postgres/{service-name}/database/{database-name} method: delete operationId: delete-dbaas-pg-database x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /block-storage/{id}:attach method: put operationId: attach-block-storage-volume-to-instance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /kms-key/{id}/enable method: post operationId: enable-kms-key x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-postgres/{name}/migration/stop method: post operationId: stop-dbaas-pg-migration x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /dbaas-kafka/{name} method: get operationId: get-dbaas-service-kafka x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-kafka/{name} method: post operationId: create-dbaas-service-kafka x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-kafka/{name} method: put operationId: update-dbaas-service-kafka x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-kafka/{name} method: delete operationId: delete-dbaas-service-kafka x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance/{id}:reset-password method: put operationId: reset-instance-password x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /dbaas-kafka/{name}/schema-registry/acl-config method: post operationId: create-dbaas-kafka-schema-registry-acl-config x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /private-network/{id}:update-ip method: put operationId: update-private-network-instance-ip x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /sks-cluster/{id}/nodepool/{sks-nodepool-id} method: put operationId: update-sks-nodepool x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /sks-cluster/{id}/nodepool/{sks-nodepool-id} method: get operationId: get-sks-nodepool x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /sks-cluster/{id}/nodepool/{sks-nodepool-id} method: delete operationId: delete-sks-nodepool x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /block-storage-snapshot/{id} method: delete operationId: delete-block-storage-snapshot x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /block-storage-snapshot/{id} method: put operationId: update-block-storage-snapshot x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /block-storage-snapshot/{id} method: get operationId: get-block-storage-snapshot x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /kms-key/{id}/list-key-rotations method: get operationId: list-kms-key-rotations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-postgres/{service-name}/user method: post operationId: create-dbaas-postgres-user x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-integrations/{service-name} method: get operationId: list-dbaas-external-integrations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-external-integration/{integration-id} method: get operationId: get-dbaas-external-integration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /instance-pool/{id} method: delete operationId: delete-instance-pool x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance-pool/{id} method: get operationId: get-instance-pool x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /instance-pool/{id} method: put operationId: update-instance-pool x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-endpoint-types method: get operationId: list-dbaas-external-endpoint-types x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /private-network method: get operationId: list-private-networks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /private-network method: post operationId: create-private-network x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance/{id}:start method: put operationId: start-instance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance/{id}:enable-tpm method: post operationId: enable-tpm x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization method: get operationId: get-organization x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /security-group/{id} method: get operationId: get-security-group x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /security-group/{id} method: delete operationId: delete-security-group x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /sks-cluster/{id}/authority/{authority}/cert method: get operationId: get-sks-cluster-authority-cert x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /snapshot/{id}:export method: post operationId: export-snapshot x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ai/deployment/{id} method: get operationId: get-deployment x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ai/deployment/{id} method: patch operationId: update-deployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ai/deployment/{id} method: delete operationId: delete-deployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-kafka/{service-name}/connect/password/reveal method: get operationId: reveal-dbaas-kafka-connect-password x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /kms-key/{id}/enable-key-rotation method: post operationId: enable-kms-key-rotation x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /elastic-ip/{id}/{field} method: delete operationId: reset-elastic-ip-field x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /quota/{entity} method: get operationId: get-quota x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ai/ai-api-key/{id} method: delete operationId: delete-ai-api-key x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ai/ai-api-key/{id} method: get operationId: get-ai-api-key x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ai/ai-api-key/{id} method: patch operationId: update-ai-api-key x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /sks-cluster-deprecated-resources/{id} method: get operationId: list-sks-cluster-deprecated-resources x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /block-storage/{id} method: get operationId: get-block-storage-volume x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /block-storage/{id} method: put operationId: update-block-storage-volume x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /block-storage/{id} method: delete operationId: delete-block-storage-volume x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-opensearch/{service-name}/user/{username} method: delete operationId: delete-dbaas-opensearch-user x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-endpoint-prometheus/{endpoint-id} method: get operationId: get-dbaas-external-endpoint-prometheus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-external-endpoint-prometheus/{endpoint-id} method: delete operationId: delete-dbaas-external-endpoint-prometheus x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-endpoint-prometheus/{endpoint-id} method: put operationId: update-dbaas-external-endpoint-prometheus x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /block-storage/{id}:create-snapshot method: post operationId: create-block-storage-snapshot x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /private-network/{id}:detach method: put operationId: detach-instance-from-private-network x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /private-network/{id} method: put operationId: update-private-network x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /private-network/{id} method: get operationId: get-private-network x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /private-network/{id} method: delete operationId: delete-private-network x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ai/instance-type method: get operationId: list-ai-instance-types x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /load-balancer/{id}/{field} method: delete operationId: reset-load-balancer-field x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /instance/{id}:scale method: put operationId: scale-instance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api-key method: post operationId: create-api-key x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api-key method: get operationId: list-api-keys x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /block-storage-snapshot method: get operationId: list-block-storage-snapshots x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dns-domain method: get operationId: list-dns-domains x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dns-domain method: post operationId: create-dns-domain x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance/{id}:stop method: put operationId: stop-instance x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /dns-domain/{domain-id}/record/{record-id} method: get operationId: get-dns-domain-record x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dns-domain/{domain-id}/record/{record-id} method: put operationId: update-dns-domain-record x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dns-domain/{domain-id}/record/{record-id} method: delete operationId: delete-dns-domain-record x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-kafka/{service-name}/user method: post operationId: create-dbaas-kafka-user x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-valkey/{service-name}/user/{username}/password/reset method: put operationId: reset-dbaas-valkey-user-password x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /dbaas-external-integration-settings-datadog/{integration-id} method: post operationId: update-dbaas-external-integration-settings-datadog x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-integration-settings-datadog/{integration-id} method: get operationId: get-dbaas-external-integration-settings-datadog x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /security-group/{id}:attach method: put operationId: attach-instance-to-security-group x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /snapshot/{id} method: delete operationId: delete-snapshot x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /snapshot/{id} method: get operationId: get-snapshot x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /sks-cluster/{id}/nodepool/{sks-nodepool-id}:scale method: put operationId: scale-sks-nodepool x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-settings-mysql method: get operationId: get-dbaas-settings-mysql x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /sks-cluster/{id}/upgrade-service-level method: put operationId: upgrade-sks-cluster-service-level x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-settings-valkey method: get operationId: get-dbaas-settings-valkey x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api-key/{id} method: delete operationId: delete-api-key x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api-key/{id} method: get operationId: get-api-key x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /load-balancer/{id}/service/{service-id}/{field} method: delete operationId: reset-load-balancer-service-field x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /dbaas-postgres/{service-name}/database method: post operationId: create-dbaas-pg-database x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /kms-key/{id}/rotate method: post operationId: rotate-kms-key x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-settings-thanos method: get operationId: get-dbaas-settings-thanos x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /security-group/{id}/rules method: post operationId: add-rule-to-security-group x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-opensearch/{service-name}/user method: post operationId: create-dbaas-opensearch-user x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-integration-types method: get operationId: list-dbaas-integration-types x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /env-impact/{period} method: get operationId: get-env-impact x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-postgres/{service-name}/user/{username} method: delete operationId: delete-dbaas-postgres-user x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance/{id}:add-protection method: put operationId: add-instance-protection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-postgres/{service-name}/user/{username}/allow-replication method: put operationId: update-dbaas-postgres-allow-replication x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /iam-role/{id} method: put operationId: update-iam-role x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /iam-role/{id} method: get operationId: get-iam-role x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /iam-role/{id} method: delete operationId: delete-iam-role x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance/{id}/{field} method: delete operationId: reset-instance-field x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /instance-pool/{id}/{field} method: delete operationId: reset-instance-pool-field x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /instance/{id}:remove-protection method: put operationId: remove-instance-protection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-kafka/{name}/topic/acl-config method: post operationId: create-dbaas-kafka-topic-acl-config x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /snapshot method: get operationId: list-snapshots x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /operation/{id} method: get operationId: get-operation x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dns-domain/{id}/zone method: get operationId: get-dns-domain-zone-file x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-external-endpoint-opensearch/{name} method: post operationId: create-dbaas-external-endpoint-opensearch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-mysql/{service-name}/database/{database-name} method: delete operationId: delete-dbaas-mysql-database x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /security-group/{id}:remove-source method: put operationId: remove-external-source-from-security-group x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /iam-organization-policy method: get operationId: get-iam-organization-policy x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /iam-organization-policy method: put operationId: update-iam-organization-policy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-service-logs/{service-name} method: post operationId: get-dbaas-service-logs x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /kms-key/{id}/decrypt method: post operationId: decrypt x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /template/{id} method: delete operationId: delete-template x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /template/{id} method: post operationId: copy-template x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /template/{id} method: put operationId: update-template x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /template/{id} method: get operationId: get-template x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-postgres/{name}/maintenance/start method: put operationId: start-dbaas-pg-maintenance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /iam-role/{id}:assume-role-policy method: put operationId: update-iam-role-assume-policy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-grafana/{service-name}/user/{username}/password/reveal method: get operationId: reveal-dbaas-grafana-user-password x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /user/{id} method: put operationId: update-user-role x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /user/{id} method: delete operationId: delete-user x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /reverse-dns/instance/{id} method: post operationId: update-reverse-dns-instance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /reverse-dns/instance/{id} method: get operationId: get-reverse-dns-instance x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /reverse-dns/instance/{id} method: delete operationId: delete-reverse-dns-instance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance-pool/{id}:evict method: put operationId: evict-instance-pool-members x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /sks-cluster/{id}/rotate-csi-credentials method: put operationId: rotate-sks-csi-credentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-grafana/{service-name}/user/{username}/password/reset method: put operationId: reset-dbaas-grafana-user-password x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /security-group/{id}:detach method: put operationId: detach-instance-from-security-group x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /sks-cluster/{id}/nodepool/{sks-nodepool-id}:evict method: put operationId: evict-sks-nodepool-members x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-valkey/{service-name}/user/{username} method: put operationId: update-dbaas-valkey-user-access-control x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /dbaas-valkey/{service-name}/user/{username} method: delete operationId: delete-dbaas-valkey-user x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /kms-key/{id}/disable method: post operationId: disable-kms-key x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /dbaas-kafka/{name}/schema-registry/acl-config/{acl-id} method: delete operationId: delete-dbaas-kafka-schema-registry-acl-config x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dns-domain/{id} method: delete operationId: delete-dns-domain x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dns-domain/{id} method: get operationId: get-dns-domain x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /block-storage/{id}:resize-volume method: put operationId: resize-block-storage-volume x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-kafka/{service-name}/user/{username} method: delete operationId: delete-dbaas-kafka-user x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-service-type/{service-type-name} method: get operationId: get-dbaas-service-type x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /security-group/{id}:add-source method: put operationId: add-external-source-to-security-group x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-endpoint-datadog/{name} method: post operationId: create-dbaas-external-endpoint-datadog x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-mysql/{name}/maintenance/start method: put operationId: start-dbaas-mysql-maintenance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-opensearch/{service-name}/user/{username}/password/reset method: put operationId: reset-dbaas-opensearch-user-password x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /ai/model/{id} method: delete operationId: delete-model x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ai/model/{id} method: get operationId: get-model x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /sos-buckets-usage method: get operationId: list-sos-buckets-usage x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /instance/{id}:reset method: put operationId: reset-instance x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /dbaas-mysql/{service-name}/user/{username}/password/reveal method: get operationId: reveal-dbaas-mysql-user-password x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ssh-key/{name} method: delete operationId: delete-ssh-key x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ssh-key/{name} method: get operationId: get-ssh-key x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-service-metrics/{service-name} method: post operationId: get-dbaas-service-metrics x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /deploy-target/{id} method: get operationId: get-deploy-target x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /elastic-ip/{id}:detach method: put operationId: detach-instance-from-elastic-ip x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-mysql/{name}/enable/writes method: put operationId: enable-dbaas-mysql-writes x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-kafka/{service-name}/user/{username}/password/reveal method: get operationId: reveal-dbaas-kafka-user-password x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /kms-key/{id}/encrypt method: post operationId: encrypt x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-task-migration-check/{service} method: post operationId: create-dbaas-task-migration-check x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-endpoint-datadog/{endpoint-id} method: delete operationId: delete-dbaas-external-endpoint-datadog x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-endpoint-datadog/{endpoint-id} method: get operationId: get-dbaas-external-endpoint-datadog x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-external-endpoint-datadog/{endpoint-id} method: put operationId: update-dbaas-external-endpoint-datadog x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /load-balancer/{id}/service method: post operationId: add-service-to-load-balancer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ssh-key method: get operationId: list-ssh-keys x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ssh-key method: post operationId: register-ssh-key x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /snapshot/{id}:promote method: post operationId: promote-snapshot-to-template x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /sks-cluster method: post operationId: create-sks-cluster x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /sks-cluster method: get operationId: list-sks-clusters x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /block-storage/{id}:detach method: put operationId: detach-block-storage-volume x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ai/ai-api-key/{id}/rotate method: post operationId: rotate-ai-api-key x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-endpoint-prometheus/{name} method: post operationId: create-dbaas-external-endpoint-prometheus x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /console/{id} method: get operationId: get-console-proxy-url x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-integration/{id} method: delete operationId: delete-dbaas-integration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-integration/{id} method: put operationId: update-dbaas-integration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-integration/{id} method: get operationId: get-dbaas-integration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /elastic-ip/{id}:attach method: put operationId: attach-instance-to-elastic-ip x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /sks-cluster/{id} method: delete operationId: delete-sks-cluster x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /sks-cluster/{id} method: get operationId: get-sks-cluster x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /sks-cluster/{id} method: put operationId: update-sks-cluster x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /quota method: get operationId: list-quotas x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-integration-settings/{integration-type}/{source-type}/{dest-type} method: get operationId: list-dbaas-integration-settings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-thanos/{service-name}/user/{username}/password/reveal method: get operationId: reveal-dbaas-thanos-user-password x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-settings-pg method: get operationId: get-dbaas-settings-pg x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /elastic-ip/{id} method: put operationId: update-elastic-ip x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /elastic-ip/{id} method: get operationId: get-elastic-ip x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /elastic-ip/{id} method: delete operationId: delete-elastic-ip x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /sks-cluster/{id}/inspection method: get operationId: get-sks-cluster-inspection x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-valkey/{name} method: delete operationId: delete-dbaas-service-valkey x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-valkey/{name} method: get operationId: get-dbaas-service-valkey x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-valkey/{name} method: post operationId: create-dbaas-service-valkey x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-valkey/{name} method: put operationId: update-dbaas-service-valkey x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance/{id} method: delete operationId: delete-instance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance/{id} method: put operationId: update-instance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance/{id} method: get operationId: get-instance x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-mysql/{name}/migration/stop method: post operationId: stop-dbaas-mysql-migration x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /dbaas-external-endpoints method: get operationId: list-dbaas-external-endpoints x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-kafka/{name}/maintenance/start method: put operationId: start-dbaas-kafka-maintenance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /sks-cluster/{id}/rotate-ccm-credentials method: put operationId: rotate-sks-ccm-credentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-postgres/{service-name}/connection-pool/{connection-pool-name} method: put operationId: update-dbaas-pg-connection-pool x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-postgres/{service-name}/connection-pool/{connection-pool-name} method: delete operationId: delete-dbaas-pg-connection-pool x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /kms-key method: post operationId: create-kms-key x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /kms-key method: get operationId: list-kms-keys x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-thanos/{name} method: get operationId: get-dbaas-service-thanos x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-thanos/{name} method: post operationId: create-dbaas-service-thanos x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-thanos/{name} method: put operationId: update-dbaas-service-thanos x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-thanos/{name} method: delete operationId: delete-dbaas-service-thanos x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /iam-role/{id}:policy method: put operationId: update-iam-role-policy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-migration-status/{name} method: get operationId: get-dbaas-migration-status x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-mysql/{service-name}/user/{username} method: delete operationId: delete-dbaas-mysql-user x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /load-balancer/{id} method: put operationId: update-load-balancer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /load-balancer/{id} method: delete operationId: delete-load-balancer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /load-balancer/{id} method: get operationId: get-load-balancer x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-service/{name} method: delete operationId: delete-dbaas-service x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-mysql/{service-name}/database method: post operationId: create-dbaas-mysql-database x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /template method: get operationId: list-templates x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /template method: post operationId: register-template x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance/{id}:reboot method: put operationId: reboot-instance x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /dbaas-settings-kafka method: get operationId: get-dbaas-settings-kafka x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-postgres/{service-name}/user/{username}/password/reveal method: get operationId: reveal-dbaas-postgres-user-password x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /iam-organization-policy:reset method: post operationId: reset-iam-organization-policy x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /dbaas-settings-opensearch method: get operationId: get-dbaas-settings-opensearch x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-external-endpoint/{source-service-name}/attach method: put operationId: attach-dbaas-service-to-endpoint x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /kms-key/{id}/schedule-deletion method: post operationId: schedule-kms-key-deletion x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-grafana/{name} method: delete operationId: delete-dbaas-service-grafana x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-grafana/{name} method: get operationId: get-dbaas-service-grafana x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-grafana/{name} method: put operationId: update-dbaas-service-grafana x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-grafana/{name} method: post operationId: create-dbaas-service-grafana x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-endpoint-rsyslog/{endpoint-id} method: delete operationId: delete-dbaas-external-endpoint-rsyslog x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-endpoint-rsyslog/{endpoint-id} method: put operationId: update-dbaas-external-endpoint-rsyslog x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-endpoint-rsyslog/{endpoint-id} method: get operationId: get-dbaas-external-endpoint-rsyslog x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /sks-cluster/{id}/nodepool method: post operationId: create-sks-nodepool x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-endpoint-elasticsearch/{name} method: post operationId: create-dbaas-external-endpoint-elasticsearch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-opensearch/{name}/maintenance/start method: put operationId: start-dbaas-opensearch-maintenance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-kafka/{name}/acl-config method: get operationId: get-dbaas-kafka-acl-config x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-kafka/{service-name}/user/{username}/password/reset method: put operationId: reset-dbaas-kafka-user-password x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /kms-key/{id}/re-encrypt method: post operationId: re-encrypt x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-opensearch/{service-name}/user/{username}/password/reveal method: get operationId: reveal-dbaas-opensearch-user-password x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-valkey/{name}/maintenance/start method: put operationId: start-dbaas-valkey-maintenance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-opensearch/{name} method: post operationId: create-dbaas-service-opensearch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-opensearch/{name} method: get operationId: get-dbaas-service-opensearch x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-opensearch/{name} method: delete operationId: delete-dbaas-service-opensearch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-opensearch/{name} method: put operationId: update-dbaas-service-opensearch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-external-endpoint/{source-service-name}/detach method: put operationId: detach-dbaas-service-from-endpoint x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-valkey/{service-name}/user/{username}/password/reveal method: get operationId: reveal-dbaas-valkey-user-password x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-postgres/{name} method: put operationId: update-dbaas-service-pg x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-postgres/{name} method: get operationId: get-dbaas-service-pg x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dbaas-postgres/{name} method: post operationId: create-dbaas-service-pg x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-postgres/{name} method: delete operationId: delete-dbaas-service-pg x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-valkey/{service-name}/user method: post operationId: create-dbaas-valkey-user x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-valkey/{service-name}/user method: get operationId: list-dbaas-valkey-users x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /sks-cluster/{id}/rotate-karpenter-credentials method: put operationId: rotate-sks-karpenter-credentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-integration method: post operationId: create-dbaas-integration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-task/{service}/{id} method: get operationId: get-dbaas-task x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /sos/{bucket}/presigned-url method: get operationId: get-sos-presigned-url x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /sks-cluster/{id}/rotate-operators-ca method: put operationId: rotate-sks-operators-ca x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ai/deployment/{id}/api-key method: get operationId: reveal-deployment-api-key x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /anti-affinity-group/{id} method: get operationId: get-anti-affinity-group x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /anti-affinity-group/{id} method: delete operationId: delete-anti-affinity-group x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /kms-key/{id}/replicate method: post operationId: replicate-kms-key x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /sks-cluster-version method: get operationId: list-sks-cluster-versions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /instance method: post operationId: create-instance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance method: get operationId: list-instances x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /iam-role method: get operationId: list-iam-roles x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /iam-role method: post operationId: create-iam-role x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /private-network/{id}/{field} method: delete operationId: reset-private-network-field x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /user method: post operationId: create-user x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /user method: get operationId: list-users x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ai/deployment/{id}/logs method: get operationId: get-deployment-logs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /sks-cluster/{id}/upgrade method: put operationId: upgrade-sks-cluster x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /kms-key/{id}/cancel-deletion method: post operationId: cancel-kms-key-deletion x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /kms-key/{id}/generate-data-key method: post operationId: generate-data-key x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /block-storage method: get operationId: list-block-storage-volumes x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /block-storage method: post operationId: create-block-storage-volume x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-kafka/{name}/topic/acl-config/{acl-id} method: delete operationId: delete-dbaas-kafka-topic-acl-config x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /instance/{instance-id}:revert-snapshot method: post operationId: revert-instance-to-snapshot x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dbaas-postgres/{service-name}/user/{username}/password/reset method: put operationId: reset-dbaas-postgres-user-password x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required