generated: '2026-07-15' method: generated source: openapi/hatchet-openapi.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 141 by_action_class: connected: 82 acting: 59 by_consequence: read: 82 write: 58 safety-critical: 1 human_in_the_loop_required: 1 operations: - path: /api/v1/stable/tasks/{task} method: get operationId: v1-task:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tasks/{task}/task-events method: get operationId: v1-task-event:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tasks/{task}/logs method: get operationId: v1-log-line:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/tasks/cancel method: post operationId: v1-task:cancel x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/stable/tenants/{tenant}/logs method: get operationId: v1-tenant-log-line:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/log-point-metrics method: get operationId: v1-tenant-log-line:get:point-metrics x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/tasks/replay method: post operationId: v1-task:replay x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/stable/tasks/{task}/restore method: post operationId: v1-task:restore x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/stable/dags/tasks method: get operationId: v1-dag:list:tasks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/workflow-runs method: get operationId: v1-workflow-run:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/workflow-runs/display-names method: get operationId: v1-workflow-run:display-names:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/workflow-runs/external-ids method: get operationId: v1-workflow-run:external-ids:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/workflow-runs/trigger method: post operationId: v1-workflow-run:create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/stable/tenants/{tenant}/durable-tasks/branch method: post operationId: v1-durable-task:branch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/stable/durable-tasks/{durable-task} method: get operationId: v1-durable-task:event-log:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/workflow-runs/{v1-workflow-run} method: get operationId: v1-workflow-run:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/workflow-runs/{v1-workflow-run}/status method: get operationId: v1-workflow-run:get-status x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/workflow-runs/{v1-workflow-run}/task-events method: get operationId: v1-workflow-run:task-events:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/traces method: get operationId: v1-observability:get-trace x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/workflow-runs/{v1-workflow-run}/task-timings method: get operationId: v1-workflow-run:get:timings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/task-metrics method: get operationId: v1-task:list:status-metrics x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/task-point-metrics method: get operationId: v1-task:get:point-metrics x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/events method: get operationId: v1-event:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/events/{v1-event} method: get operationId: v1-event:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/events/keys method: get operationId: v1:event-key:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/filters method: get operationId: v1-filter:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/filters method: post operationId: v1-filter:create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/stable/tenants/{tenant}/filters/{v1-filter} method: get operationId: v1-filter:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/filters/{v1-filter} method: delete operationId: v1-filter:delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/stable/tenants/{tenant}/filters/{v1-filter} method: patch operationId: v1-filter:update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/stable/tenants/{tenant}/webhooks method: get operationId: v1-webhook:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/webhooks method: post operationId: v1-webhook:create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/stable/tenants/{tenant}/webhooks/{v1-webhook} method: get operationId: v1-webhook:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/stable/tenants/{tenant}/webhooks/{v1-webhook} method: delete operationId: v1-webhook:delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/stable/tenants/{tenant}/webhooks/{v1-webhook} method: post operationId: v1-webhook:receive x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/stable/tenants/{tenant}/webhooks/{v1-webhook} method: patch operationId: v1-webhook:update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/stable/tenants/{tenant}/cel/debug method: post operationId: v1-cel:debug x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/ready method: get operationId: readiness:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/live method: get operationId: liveness:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/meta method: get operationId: metadata:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/cloud/metadata method: get operationId: cloudMetadata::get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/meta/integrations method: get operationId: metadata:list:integrations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/users/login method: post operationId: user:update:login x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/users/google/start method: get operationId: user:update:google-oauth-start x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/users/google/callback method: get operationId: user:update:google-oauth-callback x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/users/github/start method: get operationId: user:update:github-oauth-start x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/users/github/callback method: get operationId: user:update:github-oauth-callback x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/slack/start method: get operationId: user:update:slack-oauth-start x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/users/slack/callback method: get operationId: user:update:slack-oauth-callback x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/sns/{tenant}/{event} method: post operationId: sns:update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/sns method: get operationId: sns:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/sns method: post operationId: sns:create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/alerting-email-groups method: post operationId: alert-email-group:create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/alerting-email-groups method: get operationId: alert-email-group:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/resource-policy method: get operationId: tenant-resource-policy:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/alerting-email-groups/{alert-email-group} method: patch operationId: alert-email-group:update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/alerting-email-groups/{alert-email-group} method: delete operationId: alert-email-group:delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/sns/{sns} method: delete operationId: sns:delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/slack method: get operationId: slack-webhook:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/slack/{slack} method: delete operationId: slack-webhook:delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/users/current method: get operationId: user:get:current x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/users/password method: post operationId: user:update:password x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/users/register method: post operationId: user:create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/users/logout method: post operationId: user:update:logout x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/users/memberships method: get operationId: tenant-memberships:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/users/invites method: get operationId: user:list:tenant-invites x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/users/invites/accept method: post operationId: tenant-invite:accept x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/users/invites/reject method: post operationId: tenant-invite:reject x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants method: post operationId: tenant:create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant} method: patch operationId: tenant:update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant} method: get operationId: tenant:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/alerting/settings method: get operationId: tenant-alerting-settings:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/invites method: post operationId: tenant-invite:create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/invites method: get operationId: tenant-invite:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/invites/{tenant-invite} method: patch operationId: tenant-invite:update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/invites/{tenant-invite} method: delete operationId: tenant-invite:delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/api-tokens method: post operationId: api-token:create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/api-tokens method: get operationId: api-token:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/api-tokens/{api-token} method: post operationId: api-token:update:revoke x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/v1/tenants/{tenant}/queue-metrics method: get operationId: tenant:get:queue-metrics x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/step-run-queue-metrics method: get operationId: tenant:get:step-run-queue-metrics x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/events method: get operationId: event:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/events method: post operationId: event:create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/events/bulk method: post operationId: event:create:bulk x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/events/replay method: post operationId: event:update:replay x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/events/cancel method: post operationId: event:update:cancel x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/rate-limits method: get operationId: rate-limit:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/rate-limits method: delete operationId: rate-limit:delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/members method: get operationId: tenant-member:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/members/{member} method: patch operationId: tenant-member:update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/members/{member} method: delete operationId: tenant-member:delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/events/{event} method: get operationId: event:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/events/{event}/data method: get operationId: event-data:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/events/{event-with-tenant}/data method: get operationId: event-data:get-with-tenant x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/events/keys method: get operationId: event-key:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/workflows method: get operationId: workflow:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/workflows/{workflow}/scheduled method: post operationId: scheduled-workflow-run:create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/workflows/scheduled method: get operationId: workflow-scheduled:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/workflows/scheduled/{scheduled-workflow-run} method: get operationId: workflow-scheduled:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/workflows/scheduled/{scheduled-workflow-run} method: delete operationId: workflow-scheduled:delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/workflows/scheduled/{scheduled-workflow-run} method: patch operationId: workflow-scheduled:update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/workflows/scheduled/bulk-delete method: post operationId: workflow-scheduled:bulk-delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/workflows/scheduled/bulk-update method: post operationId: workflow-scheduled:bulk-update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/workflows/{workflow}/crons method: post operationId: cron-workflow-trigger:create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/workflows/crons method: get operationId: cron-workflow:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/workflows/crons/{cron-workflow} method: get operationId: workflow-cron:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/workflows/crons/{cron-workflow} method: delete operationId: workflow-cron:delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/workflows/crons/{cron-workflow} method: patch operationId: workflow-cron:update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/workflows/cancel method: post operationId: workflow-run:cancel x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflows/{workflow} method: get operationId: workflow:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/workflows/{workflow} method: delete operationId: workflow:delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflows/{workflow} method: patch operationId: workflow:update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflows/{workflow}/versions method: get operationId: workflow-version:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/workflows/{workflow}/trigger method: post operationId: workflow-run:create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workflows/{workflow}/metrics method: get operationId: workflow:get:metrics x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/step-runs/{step-run}/events method: get operationId: step-run:list:events x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/workflow-runs/{workflow-run}/step-run-events method: get operationId: workflow-run:list:step-run-events x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/step-runs/{step-run}/archives method: get operationId: step-run:list:archives x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/workflows/{workflow}/worker-count method: get operationId: workflow:get:workers-count x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/workflows/runs method: get operationId: workflow-run:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/workflow-runs/replay method: post operationId: workflow-run:update:replay x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/workflows/runs/metrics method: get operationId: workflow-run:get:metrics x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/workflow-runs/{workflow-run} method: get operationId: workflow-run:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/workflow-runs/{workflow-run}/shape method: get operationId: workflow-run:get:shape x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/step-runs/{step-run} method: get operationId: step-run:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/step-runs/{step-run}/rerun method: post operationId: step-run:update:rerun x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/step-runs/{step-run}/cancel method: post operationId: step-run:update:cancel x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/tenants/{tenant}/step-runs/{step-run}/schema method: get operationId: step-run:get:schema x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/worker method: get operationId: worker:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/workers/{worker} method: patch operationId: worker:update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/workers/{worker} method: get operationId: worker:get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/webhook-workers method: get operationId: webhook:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/webhook-workers method: post operationId: webhook:create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/webhook-workers/{webhook} method: delete operationId: webhook:delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/webhook-workers/{webhook}/requests method: get operationId: webhook-requests:list x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/workflow-runs/{workflow-run}/input method: get operationId: workflow-run:get:input x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/monitoring/{tenant}/probe method: post operationId: monitoring:post:runProbe x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/v1/version method: get operationId: info:get:version x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/prometheus-metrics method: get operationId: tenant:get:prometheus-metrics x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/task-stats method: get operationId: tenant:get:task-stats x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/v1/tenants/{tenant}/feature-flags method: get operationId: tenant:feature-flag:evaluate x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none