generated: '2026-07-15' method: generated source: openapi/expedia-deposit-openapi-original.yml, openapi/expedia-fraud-protection-openapi-original.yml, openapi/expedia-lodging-product-openapi-original.yml, openapi/expedia-loyalty-openapi-original.yml, openapi/expedia-rapid-openapi-original.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 49 by_action_class: connected: 27 acting: 22 by_consequence: read: 27 physical: 7 write: 15 human_in_the_loop_required: 0 operations: - path: /properties/{propertyId}/depositPolicy method: get operationId: getDepositPolicy x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /properties/{propertyId}/depositPolicy method: put operationId: setDepositPolicy x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /properties/{propertyId}/depositPolicy method: delete operationId: deleteDepositPolicy x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/purchase/screen method: post operationId: screen x-agentic-access: action-class: acting consequence: physical subject: required scope: - fraudandrisk.fraud.order-purchase-screen audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /order/purchase/update method: post operationId: update x-agentic-access: action-class: acting consequence: physical subject: required scope: - fraudandrisk.fraud.order-purchase-update audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /products/properties method: get operationId: getProperties x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /products/properties/{propertyId} method: get operationId: getProperty x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /properties/{propertyId}/roomTypes method: get operationId: getRoomTypes x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /properties/{propertyId}/roomTypes method: post operationId: createRoomType x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /properties/{propertyId}/roomTypes/{roomTypeId} method: get operationId: getRoomType x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /properties/{propertyId}/roomTypes/{roomTypeId} method: put operationId: updateRoomType x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /properties/{propertyId}/roomTypes/{roomTypeId} method: patch operationId: patchRoomType x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /properties/{propertyId}/roomTypes/{roomTypeId}/amenities method: get operationId: getRoomTypeAmenities x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /properties/{propertyId}/roomTypes/{roomTypeId}/amenities method: put operationId: setRoomTypeAmenities x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /properties/{propertyId}/roomTypes/{roomTypeId}/ratePlans method: get operationId: getRatePlans x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /properties/{propertyId}/roomTypes/{roomTypeId}/ratePlans method: post operationId: createRatePlan x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /properties/{propertyId}/roomTypes/{roomTypeId}/ratePlans/{ratePlanId} method: get operationId: getRatePlan x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /properties/{propertyId}/roomTypes/{roomTypeId}/ratePlans/{ratePlanId} method: put operationId: updateRatePlan x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /properties/{propertyId}/roomTypes/{roomTypeId}/ratePlans/{ratePlanId} method: delete operationId: deleteRatePlan x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /properties/{propertyId}/roomTypes/{roomTypeId}/ratePlans/{ratePlanId} method: patch operationId: patchRatePlan x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /properties/{propertyId}/roomTypes/{roomTypeId}/rateThresholds method: get operationId: getRateVerificationThresholds x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /loyalty/earn/transactions method: get operationId: loyaltyTransactions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /loyalty/earn/last_update method: get operationId: loyaltyLastUpdate x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /properties/content method: get operationId: getPropertyContent x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /properties/inactive method: get operationId: getInactiveProperties x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /properties/{property_id}/guest-reviews method: get operationId: getPropertyGuestReviews x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /files/properties/catalog method: get operationId: getPropertyCatalogFile x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /files/properties/content method: get operationId: getPropertyContentFile x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /regions method: get operationId: getRegions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /regions/{region_id} method: get operationId: getRegion x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /properties/geography method: post operationId: postGeography x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /properties/availability method: get operationId: getAvailability x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /properties/{property_id}/availability method: get operationId: getAdditionalAvailability x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /properties/{property_id}/rooms/{room_id}/rates/{rate_id} method: get operationId: priceCheck x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /properties/{property_id}/payment-options method: get operationId: getPaymentOptions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /calendars/availability method: get operationId: getCalendarAvailability x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /payment-sessions method: post operationId: postPaymentSessions x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /itineraries method: get operationId: getReservation x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /itineraries method: post operationId: postItinerary x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /itineraries/{itinerary_id} method: get operationId: getReservationByItineraryId x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /itineraries/{itinerary_id} method: put operationId: putResumeBooking x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /itineraries/{itinerary_id} method: delete operationId: deleteHeldBooking x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /itineraries/{itinerary_id}/payment-sessions method: put operationId: putCompletePaymentSession x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /itineraries/{itinerary_id}/rooms/{room_id} method: put operationId: changeRoomDetails x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /itineraries/{itinerary_id}/rooms/{room_id} method: delete operationId: deleteRoom x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /itineraries/{itinerary_id}/rooms/{room_id}/pricing method: put operationId: commitChange x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /chains method: get operationId: getChainReference x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /notifications method: get operationId: requestUndeliveredNotifications x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /notifications method: post operationId: requestTestNotification x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required