generated: '2026-07-19' method: generated source: openapi/horizoniq-compass-openapi-original.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 54 by_action_class: acting: 21 connected: 33 by_consequence: write: 18 read: 33 safety-critical: 2 physical: 1 human_in_the_loop_required: 2 operations: - path: /users/{userUUID} method: delete operationId: deleteUsersByUserUUID x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /users/{userUUID} method: get operationId: getUsersByUserUUID x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /users/{userUUID} method: patch operationId: updateUsersByUserUUID x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /action-items/{actionItemUUID} method: get operationId: getActionItemsByActionItemUUID x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /action-items method: get operationId: getActionItems x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /billing/credits method: get operationId: getBillingCredits x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /billing/invoices/{invoiceUUID}/csv method: get operationId: getBillingInvoicesByInvoiceUUIDCsv x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /billing/invoices/{invoiceUUID}/pdf method: get operationId: getBillingInvoicesByInvoiceUUIDPdf x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /billing/invoices/{invoiceUUID} method: get operationId: getBillingInvoicesByInvoiceUUID x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /billing/invoices method: get operationId: getBillingInvoices x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /billing/services/active method: get operationId: getBillingServicesActive x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /billing/services/cancelled method: get operationId: getBillingServicesCancelled x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /devices/{deviceUUID} method: get operationId: getDevicesByDeviceUUID x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /devices method: get operationId: getDevices x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /firewalls/{firewallUUID} method: get operationId: getFirewallsByFirewallUUID x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /firewalls method: get operationId: getFirewalls x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /images method: get operationId: getImages x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /images method: post operationId: createImages x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /servers/{serverUUID}/action-items/inactive method: get operationId: getServersByServerUUIDActionItemsInactive x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /servers/{serverUUID}/action-items method: get operationId: getServersByServerUUIDActionItems x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /servers/{serverUUID}/images method: get operationId: getServersByServerUUIDImages x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /servers/{serverUUID}/install-progress method: get operationId: getServersByServerUUIDInstallProgress x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /servers/{serverUUID}/networks method: get operationId: getServersByServerUUIDNetworks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /servers/{serverUUID}/rdns method: get operationId: getServersByServerUUIDRdns x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /servers/{serverUUID}/root-password method: get operationId: getServersByServerUUIDRootPassword x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /servers/{serverUUID}/root-password method: patch operationId: updateServersByServerUUIDRootPassword x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /servers/{serverUUID} method: get operationId: getServersByServerUUID x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /servers method: get operationId: getServers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ssl-certificates/{certificateId} method: get operationId: getSslCertificatesByCertificateId x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /ssl-certificates method: get operationId: getSslCertificates x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /support-cases/{caseId}/attachments/{attachmentId} method: get operationId: getSupportCasesByCaseIdAttachmentsByAttachmentId x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /support-cases/{caseId}/attachments method: get operationId: getSupportCasesByCaseIdAttachments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /support-cases/{caseId}/attachments method: post operationId: createSupportCasesByCaseIdAttachments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /support-cases/{caseId}/comments method: get operationId: getSupportCasesByCaseIdComments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /support-cases/{caseId}/comments method: post operationId: createSupportCasesByCaseIdComments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /support-cases/{caseId} method: get operationId: getSupportCasesByCaseId x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /support-cases/{caseId} method: patch operationId: updateSupportCasesByCaseId x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /support-cases method: get operationId: getSupportCases x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /support-cases method: post operationId: createSupportCases x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /users/roles method: get operationId: getUsersRoles x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /users method: get operationId: getUsers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /users method: post operationId: createUsers x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /action-items/acknowledgment method: patch operationId: updateActionItemsAcknowledgment x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /servers/maintenance method: patch operationId: updateServersMaintenance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /servers/{serverUUID}/rdns/{rdnsRecUUID} method: patch operationId: updateServersByServerUUIDRdnsByRdnsRecUUID x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /users/{userUUID}/admin-disabled method: patch operationId: updateUsersByUserUUIDAdminDisabled x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /users/{userUUID}/admin-enabled method: patch operationId: updateUsersByUserUUIDAdminEnabled x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /users/{userUUID}/roles/{roleUUID} method: patch operationId: updateUsersByUserUUIDRolesByRoleUUID x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /users/{userUUID}/roles method: patch operationId: updateUsersByUserUUIDRoles x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /servers/{serverUUID}/reboot method: post operationId: createServersByServerUUIDReboot x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /servers/{serverUUID}/reinstall method: post operationId: createServersByServerUUIDReinstall x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ssl-certificates/{certificateId}/finalize method: post operationId: createSslCertificatesByCertificateIdFinalize x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ssl-certificates/{certificateId}/resend-approval method: post operationId: createSslCertificatesByCertificateIdResendApproval x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /ssl-certificates/initialize method: post operationId: createSslCertificatesInitialize x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required