generated: '2026-07-15' method: generated source: openapi/freestyle-cron-api-openapi.yml, openapi/freestyle-domains-api-openapi.yml, openapi/freestyle-execute-api-openapi.yml, openapi/freestyle-git-api-openapi.yml, openapi/freestyle-identity-api-openapi.yml, openapi/freestyle-observability-api-openapi.yml, openapi/freestyle-vm-api-openapi.yml, openapi/freestyle-web-api-openapi.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 128 by_action_class: connected: 66 acting: 62 by_consequence: read: 66 write: 50 physical: 6 safety-critical: 6 human_in_the_loop_required: 6 operations: - path: /v1/cron/schedules method: get operationId: handle_list_schedules x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/cron/schedules method: post operationId: handle_create_schedule x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/cron/schedules/{id} method: get operationId: handle_get_schedule x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/cron/schedules/{id} method: delete operationId: handle_delete_schedule x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/cron/schedules/{id} method: patch operationId: handle_update_schedule x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/cron/schedules/{id}/executions method: get operationId: handle_list_schedule_executions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/cron/schedules/{id}/metrics-timeline method: get operationId: handle_get_metrics_timeline x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/cron/schedules/{id}/success-rate method: get operationId: handle_get_schedule_success_rate x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dns/v1/records method: get operationId: handle_list_records x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /dns/v1/records method: post operationId: handle_create_record x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /dns/v1/records method: delete operationId: handle_delete_record x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /domains/v1/certs/{domain}/wildcard method: post operationId: handle_verify_wildcard x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /domains/v1/domains method: get operationId: handle_list_domains x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /domains/v1/mappings method: get operationId: handle_list_domain_mappings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /domains/v1/mappings/{domain} method: post operationId: handle_insert_domain_mapping x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /domains/v1/mappings/{domain} method: delete operationId: handle_delete_domain_mapping x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /domains/v1/verifications method: get operationId: handle_list_domain_verification_requests x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /domains/v1/verifications method: put operationId: handle_verify_domain x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /domains/v1/verifications method: post operationId: handle_create_domain_verification x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /domains/v1/verifications method: delete operationId: handle_delete_domain_verification x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /execute/v1/deployments method: get operationId: handle_list_execute_runs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /execute/v1/deployments/{deployment} method: get operationId: handle_get_execute_run x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /execute/v1/deployments/{deployment}/output method: get operationId: handle_get_execute_run_output x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /execute/v3/script method: post operationId: handle_execute_script_v3 x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /git/v1/repo method: get operationId: handle_list_repositories x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo method: post operationId: handle_create_repo x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /git/v1/repo/{repo_id}/default-branch method: get operationId: handle_get_default_branch x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo_id}/default-branch method: put operationId: handle_set_default_branch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /git/v1/repo/{repo_id}/github-sync method: get operationId: get_github_sync x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo_id}/github-sync method: post operationId: configure_github_sync x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /git/v1/repo/{repo_id}/github-sync method: delete operationId: remove_github_sync x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /git/v1/repo/{repo_id}/visibility method: get operationId: handle_get_visibility x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo_id}/visibility method: put operationId: handle_set_visibility x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /git/v1/repo/{repo} method: get operationId: handle_get_repo_info x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo} method: delete operationId: handle_delete_repo x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /git/v1/repo/{repo}/commits method: post operationId: handle_create_commit x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /git/v1/repo/{repo}/compare method: get operationId: handle_compare_commits x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/contents/{path} method: get operationId: handle_get_contents x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/git/blobs/{hash} method: get operationId: handle_get_blob x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/git/commits method: get operationId: handle_list_commits x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/git/commits method: post operationId: handle_create_odb_commit x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /git/v1/repo/{repo}/git/commits/{hash} method: get operationId: handle_get_commit x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/git/refs/heads/ method: get operationId: handle_list_branches x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/git/refs/heads/{*branch} method: post operationId: handle_create_branch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /git/v1/repo/{repo}/git/refs/heads/{branch} method: get operationId: handle_get_ref_branch x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/git/refs/tags/ method: get operationId: handle_list_tags x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/git/refs/tags/{tag} method: get operationId: handle_get_ref_tag x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/git/tags/{hash} method: get operationId: handle_get_tag x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/git/trees/{hash} method: get operationId: handle_get_tree x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/repair method: get operationId: handle_list_repair_jobs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/repair method: post operationId: handle_schedule_repair x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /git/v1/repo/{repo}/repair/{job_id} method: get operationId: handle_get_repair_job x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/repair/{job_id} method: delete operationId: handle_cancel_repair_job x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /git/v1/repo/{repo}/search method: get operationId: handle_search x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/search/commits method: get operationId: handle_search_commits x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/search/diffs method: get operationId: handle_search_diffs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/search/files method: get operationId: handle_search_files x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/tarball method: get operationId: handle_download_tarball x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/trigger method: get operationId: handle_list_git_triggers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /git/v1/repo/{repo}/trigger method: post operationId: handle_create_git_trigger x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /git/v1/repo/{repo}/trigger/{trigger} method: delete operationId: handle_delete_git_trigger x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /git/v1/repo/{repo}/zip method: get operationId: handle_download_zip x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /auth/v1/background-requests/{request_id} method: get operationId: handle_get_background_request x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /auth/v1/whoami method: get operationId: handle_whoami x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /identity/v1/identities method: get operationId: handle_list_identities x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /identity/v1/identities method: post operationId: handle_create_identity x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /identity/v1/identities/{identity} method: delete operationId: handle_delete_identity x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /identity/v1/identities/{identity}/permissions/git method: get operationId: handle_list_git_permissions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /identity/v1/identities/{identity}/permissions/git/{repo} method: get operationId: handle_describe_git_permission x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /identity/v1/identities/{identity}/permissions/git/{repo} method: put operationId: handle_update_git_permission x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /identity/v1/identities/{identity}/permissions/git/{repo} method: post operationId: handle_grant_git_permission x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /identity/v1/identities/{identity}/permissions/git/{repo} method: delete operationId: handle_revoke_git_permission x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /identity/v1/identities/{identity}/permissions/vm method: get operationId: handle_list_vm_permissions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /identity/v1/identities/{identity}/permissions/vm/{vm_id} method: get operationId: handle_describe_vm_permission x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /identity/v1/identities/{identity}/permissions/vm/{vm_id} method: put operationId: handle_update_allowed_users x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /identity/v1/identities/{identity}/permissions/vm/{vm_id} method: post operationId: handle_grant_vm_permission x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /identity/v1/identities/{identity}/permissions/vm/{vm_id} method: delete operationId: handle_revoke_vm_permission x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /identity/v1/identities/{identity}/tokens method: get operationId: handle_list_git_tokens x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /identity/v1/identities/{identity}/tokens method: post operationId: handle_create_git_token x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /identity/v1/identities/{identity}/tokens/{token} method: delete operationId: handle_revoke_git_token x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /observability/v1/logs method: get operationId: handle_get_logs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/vms method: get operationId: list_vms x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/vms method: post operationId: create_vm x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/builds/{build_id} method: get operationId: get_build x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/vms/builds/{build_id}/phases method: get operationId: list_build_phases x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/vms/snapshots method: get operationId: list_snapshots x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/vms/snapshots method: post operationId: create_snapshot x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/snapshots/{snapshot_id} method: get operationId: get_snapshot x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/vms/snapshots/{snapshot_id} method: delete operationId: delete_snapshot x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/snapshots/{snapshot_id} method: patch operationId: update_snapshot x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/{id}/resize method: post operationId: resize_vm x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/{vm_id} method: get operationId: get_vm x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/vms/{vm_id} method: delete operationId: delete_vm x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/{vm_id}/await method: post operationId: wait_vm x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/{vm_id}/build method: get operationId: get_build_for_vm x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/vms/{vm_id}/exec-await method: post operationId: exec_await x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/{vm_id}/files/{filepath} method: get operationId: get_file x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/vms/{vm_id}/files/{filepath} method: put operationId: put_file x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/{vm_id}/fork method: post operationId: fork_vm x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/{vm_id}/kill method: post operationId: kill_vm x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/vms/{vm_id}/optimize method: post operationId: optimize_vm x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/{vm_id}/snapshot method: post operationId: snapshot_vm x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/{vm_id}/start method: post operationId: start_vm x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/{vm_id}/stats/stream method: get operationId: stats_stream x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/vms/{vm_id}/stop method: post operationId: stop_vm x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/vms/{vm_id}/suspend method: post operationId: suspend_vm x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/{vm_id}/systemd/restart method: post operationId: batch_restart_services x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/{vm_id}/systemd/services method: get operationId: list_services x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/vms/{vm_id}/systemd/services method: post operationId: create_service x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/{vm_id}/systemd/services/{service_id} method: delete operationId: delete_service x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/{vm_id}/systemd/services/{service_id}/logs method: get operationId: get_service_logs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/vms/{vm_id}/systemd/services/{service_id}/status method: get operationId: get_service_status x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/vms/{vm_id}/systemd/start method: post operationId: batch_start_services x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/vms/{vm_id}/systemd/stop method: post operationId: batch_stop_services x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/vms/{vm_id}/terminals method: get operationId: list_terminals x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/vms/{vm_id}/terminals/{terminal_id}/logs method: get operationId: get_terminal_logs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/vms/{vm_id}/terminals/{terminal_id}/xterm-256color method: get operationId: get_terminal_xterm x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/vms/{vm_id}/watch-files method: post operationId: watch_files x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /web/v1/deployment method: post operationId: handle_deploy_web_v2 x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /web/v1/deployments method: get operationId: handle_list_web_deploys x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /web/v1/deployments/{deployment_id} method: get operationId: handle_get_web_deploy_details x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /web/v1/deployments/{deployment_id}/fetch method: get operationId: handle_fetch_deployment x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /web/v1/deployments/{deployment_id}/fetch method: put operationId: handle_fetch_deployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /web/v1/deployments/{deployment_id}/fetch method: post operationId: handle_fetch_deployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /web/v1/deployments/{deployment_id}/fetch method: delete operationId: handle_fetch_deployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /web/v1/deployments/{deployment_id}/fetch method: options operationId: handle_fetch_deployment x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /web/v1/deployments/{deployment_id}/fetch method: head operationId: handle_fetch_deployment x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /web/v1/deployments/{deployment_id}/fetch method: patch operationId: handle_fetch_deployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required