generated: '2026-07-15'
method: generated
source: openapi/knative-eventing-api-openapi.yml, openapi/knative-serving-api-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 42
  by_action_class:
    connected: 22
    acting: 20
  by_consequence:
    read: 22
    write: 20
  human_in_the_loop_required: 0
operations:
- path: /apis/eventing.knative.dev/v1/namespaces/{namespace}/brokers
  method: get
  operationId: listBrokers
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/eventing.knative.dev/v1/namespaces/{namespace}/brokers
  method: post
  operationId: createBroker
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/eventing.knative.dev/v1/namespaces/{namespace}/brokers/{name}
  method: get
  operationId: getBroker
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/eventing.knative.dev/v1/namespaces/{namespace}/brokers/{name}
  method: delete
  operationId: deleteBroker
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/eventing.knative.dev/v1/namespaces/{namespace}/triggers
  method: get
  operationId: listTriggers
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/eventing.knative.dev/v1/namespaces/{namespace}/triggers
  method: post
  operationId: createTrigger
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/eventing.knative.dev/v1/namespaces/{namespace}/triggers/{name}
  method: get
  operationId: getTrigger
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/eventing.knative.dev/v1/namespaces/{namespace}/triggers/{name}
  method: delete
  operationId: deleteTrigger
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/messaging.knative.dev/v1/namespaces/{namespace}/channels
  method: get
  operationId: listChannels
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/messaging.knative.dev/v1/namespaces/{namespace}/channels
  method: post
  operationId: createChannel
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/messaging.knative.dev/v1/namespaces/{namespace}/channels/{name}
  method: get
  operationId: getChannel
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/messaging.knative.dev/v1/namespaces/{namespace}/channels/{name}
  method: delete
  operationId: deleteChannel
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/messaging.knative.dev/v1/namespaces/{namespace}/subscriptions
  method: get
  operationId: listSubscriptions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/messaging.knative.dev/v1/namespaces/{namespace}/subscriptions
  method: post
  operationId: createSubscription
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/messaging.knative.dev/v1/namespaces/{namespace}/subscriptions/{name}
  method: get
  operationId: getSubscription
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/messaging.knative.dev/v1/namespaces/{namespace}/subscriptions/{name}
  method: delete
  operationId: deleteSubscription
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/sources.knative.dev/v1/namespaces/{namespace}/apiserversources
  method: get
  operationId: listApiServerSources
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/sources.knative.dev/v1/namespaces/{namespace}/apiserversources
  method: post
  operationId: createApiServerSource
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/sources.knative.dev/v1/namespaces/{namespace}/pingsources
  method: get
  operationId: listPingSources
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/sources.knative.dev/v1/namespaces/{namespace}/pingsources
  method: post
  operationId: createPingSource
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/sources.knative.dev/v1/namespaces/{namespace}/sinkbindings
  method: get
  operationId: listSinkBindings
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/sources.knative.dev/v1/namespaces/{namespace}/sinkbindings
  method: post
  operationId: createSinkBinding
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/eventing.knative.dev/v1beta2/namespaces/{namespace}/eventtypes
  method: get
  operationId: listEventTypes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/eventing.knative.dev/v1beta2/namespaces/{namespace}/eventtypes
  method: post
  operationId: createEventType
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/serving.knative.dev/v1/namespaces/{namespace}/services
  method: get
  operationId: listServices
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/serving.knative.dev/v1/namespaces/{namespace}/services
  method: post
  operationId: createService
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/serving.knative.dev/v1/namespaces/{namespace}/services/{name}
  method: get
  operationId: getService
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/serving.knative.dev/v1/namespaces/{namespace}/services/{name}
  method: put
  operationId: replaceService
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/serving.knative.dev/v1/namespaces/{namespace}/services/{name}
  method: delete
  operationId: deleteService
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/serving.knative.dev/v1/namespaces/{namespace}/routes
  method: get
  operationId: listRoutes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/serving.knative.dev/v1/namespaces/{namespace}/routes
  method: post
  operationId: createRoute
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/serving.knative.dev/v1/namespaces/{namespace}/routes/{name}
  method: get
  operationId: getRoute
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/serving.knative.dev/v1/namespaces/{namespace}/routes/{name}
  method: delete
  operationId: deleteRoute
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/serving.knative.dev/v1/namespaces/{namespace}/configurations
  method: get
  operationId: listConfigurations
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/serving.knative.dev/v1/namespaces/{namespace}/configurations/{name}
  method: get
  operationId: getConfiguration
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/serving.knative.dev/v1/namespaces/{namespace}/revisions
  method: get
  operationId: listRevisions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/serving.knative.dev/v1/namespaces/{namespace}/revisions/{name}
  method: get
  operationId: getRevision
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/serving.knative.dev/v1/namespaces/{namespace}/revisions/{name}
  method: delete
  operationId: deleteRevision
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/serving.knative.dev/v1alpha1/namespaces/{namespace}/domainmappings
  method: get
  operationId: listDomainMappings
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/serving.knative.dev/v1alpha1/namespaces/{namespace}/domainmappings
  method: post
  operationId: createDomainMapping
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /apis/serving.knative.dev/v1alpha1/namespaces/{namespace}/domainmappings/{name}
  method: get
  operationId: getDomainMapping
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /apis/serving.knative.dev/v1alpha1/namespaces/{namespace}/domainmappings/{name}
  method: delete
  operationId: deleteDomainMapping
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required