generated: '2026-10-18' method: generated source: openapi/hasmcp-openapi.yaml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 41 by_action_class: connected: 15 acting: 26 by_consequence: read: 15 write: 26 human_in_the_loop_required: 0 operations: - path: /variables method: get operationId: listVariables x-agentic-access: action-class: connected consequence: read subject: optional scope: - variable:list token: max-ttl: 3600 audit: none - path: /variables method: post operationId: createVariable x-agentic-access: action-class: acting consequence: write subject: required scope: - variable:create audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /variables/{id} method: patch operationId: updateVariable x-agentic-access: action-class: acting consequence: write subject: required scope: - variable:update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /variables/{id} method: delete operationId: deleteVariable x-agentic-access: action-class: acting consequence: write subject: required scope: - variable:delete audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /providers method: get operationId: listProviders x-agentic-access: action-class: connected consequence: read subject: optional scope: - provider:list token: max-ttl: 3600 audit: none - path: /providers method: post operationId: createProvider x-agentic-access: action-class: acting consequence: write subject: required scope: - provider:create audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /providers/{id} method: get operationId: getProvider x-agentic-access: action-class: connected consequence: read subject: optional scope: - provider:read token: max-ttl: 3600 audit: none - path: /providers/{id} method: patch operationId: updateProvider x-agentic-access: action-class: acting consequence: write subject: required scope: - provider:update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /providers/{id} method: delete operationId: deleteProvider x-agentic-access: action-class: acting consequence: write subject: required scope: - provider:delete audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /providers/{id}/tools method: get operationId: listProviderTools x-agentic-access: action-class: connected consequence: read subject: optional scope: - provider:list token: max-ttl: 3600 audit: none - path: /providers/{id}/tools method: post operationId: createProviderTool x-agentic-access: action-class: acting consequence: write subject: required scope: - provider:create audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /providers/{id}/tools/{toolID} method: get operationId: getProviderTool x-agentic-access: action-class: connected consequence: read subject: optional scope: - provider:read token: max-ttl: 3600 audit: none - path: /providers/{id}/tools/{toolID} method: patch operationId: updateProviderTool x-agentic-access: action-class: acting consequence: write subject: required scope: - provider:update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /providers/{id}/tools/{toolID} method: delete operationId: deleteProviderTool x-agentic-access: action-class: acting consequence: write subject: required scope: - provider:delete audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /servers method: get operationId: listServers x-agentic-access: action-class: connected consequence: read subject: optional scope: - server:list token: max-ttl: 3600 audit: none - path: /servers method: post operationId: createServer x-agentic-access: action-class: acting consequence: write subject: required scope: - server:create audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /servers/import method: post operationId: importServer x-agentic-access: action-class: acting consequence: write subject: required scope: - server:update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /servers/{id} method: get operationId: getServer x-agentic-access: action-class: connected consequence: read subject: optional scope: - server:read token: max-ttl: 3600 audit: none - path: /servers/{id} method: patch operationId: updateServer x-agentic-access: action-class: acting consequence: write subject: required scope: - server:update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /servers/{id} method: delete operationId: deleteServer x-agentic-access: action-class: acting consequence: write subject: required scope: - server:delete audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /servers/{id}/export method: get operationId: exportServer x-agentic-access: action-class: connected consequence: read subject: optional scope: - server:read token: max-ttl: 3600 audit: none - path: /servers/{id}/tokens method: post operationId: createServerToken x-agentic-access: action-class: acting consequence: write subject: required scope: - server:create_token audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /servers/{id}/tools method: get operationId: listServerTools x-agentic-access: action-class: connected consequence: read subject: optional scope: - server:read token: max-ttl: 3600 audit: none - path: /servers/{id}/tools method: post operationId: createServerTool x-agentic-access: action-class: acting consequence: write subject: required scope: - server:update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /servers/{id}/tools/{toolID} method: delete operationId: deleteServerTool x-agentic-access: action-class: acting consequence: write subject: required scope: - server:update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /providers/{id}/resources method: get operationId: listProviderResources x-agentic-access: action-class: connected consequence: read subject: optional scope: - provider:list token: max-ttl: 3600 audit: none - path: /providers/{id}/resources method: post operationId: createProviderResource x-agentic-access: action-class: acting consequence: write subject: required scope: - provider:create audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /providers/{id}/resources/{resourceID} method: get operationId: getProviderResource x-agentic-access: action-class: connected consequence: read subject: optional scope: - provider:read token: max-ttl: 3600 audit: none - path: /providers/{id}/resources/{resourceID} method: patch operationId: updateProviderResource x-agentic-access: action-class: acting consequence: write subject: required scope: - provider:update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /providers/{id}/resources/{resourceID} method: delete operationId: deleteProviderResource x-agentic-access: action-class: acting consequence: write subject: required scope: - provider:delete audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /providers/{id}/prompts method: get operationId: listProviderPrompts x-agentic-access: action-class: connected consequence: read subject: optional scope: - provider:read token: max-ttl: 3600 audit: none - path: /providers/{id}/prompts method: post operationId: createProviderPrompt x-agentic-access: action-class: acting consequence: write subject: required scope: - provider:update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /providers/{id}/prompts/{promptID} method: get operationId: getProviderPrompt x-agentic-access: action-class: connected consequence: read subject: optional scope: - provider:read token: max-ttl: 3600 audit: none - path: /providers/{id}/prompts/{promptID} method: patch operationId: updateProviderPrompt x-agentic-access: action-class: acting consequence: write subject: required scope: - provider:update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /providers/{id}/prompts/{promptID} method: delete operationId: deleteProviderPrompt x-agentic-access: action-class: acting consequence: write subject: required scope: - provider:update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /servers/{id}/resources method: get operationId: listServerResources x-agentic-access: action-class: connected consequence: read subject: optional scope: - server:list token: max-ttl: 3600 audit: none - path: /servers/{id}/resources method: post operationId: createServerResource x-agentic-access: action-class: acting consequence: write subject: required scope: - server:update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /servers/{id}/resources/{resourceID} method: delete operationId: deleteServerResource x-agentic-access: action-class: acting consequence: write subject: required scope: - server:update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /servers/{id}/prompts method: get operationId: listServerPrompts x-agentic-access: action-class: connected consequence: read subject: optional scope: - server:read token: max-ttl: 3600 audit: none - path: /servers/{id}/prompts method: post operationId: createServerPrompt x-agentic-access: action-class: acting consequence: write subject: required scope: - server:update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /servers/{id}/prompts/{promptID} method: delete operationId: deleteServerPrompt x-agentic-access: action-class: acting consequence: write subject: required scope: - server:update audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required