generated: '2026-07-15'
method: generated
source: openapi/kubecost-allocation-openapi.yml, openapi/kubecost-assets-openapi.yml, openapi/kubecost-budget-openapi.yml,
  openapi/kubecost-cloud-cost-openapi.yml, openapi/kubecost-forecast-openapi.yml, openapi/kubecost-savings-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 18
  by_action_class:
    connected: 15
    acting: 3
  by_consequence:
    read: 15
    write: 3
  human_in_the_loop_required: 0
operations:
- path: /model/allocation
  method: get
  operationId: getAllocation
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /model/allocation/totals
  method: get
  operationId: getAllocationTotals
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /model/assets
  method: get
  operationId: getAssets
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /model/assets/totals
  method: get
  operationId: getAssetsTotals
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /model/budget
  method: get
  operationId: listBudgets
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /model/budget
  method: post
  operationId: createBudget
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /model/budget/{id}
  method: get
  operationId: getBudget
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /model/budget/{id}
  method: put
  operationId: updateBudget
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /model/budget/{id}
  method: delete
  operationId: deleteBudget
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /model/cloudCost
  method: get
  operationId: getCloudCost
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /model/cloudCost/view
  method: get
  operationId: getCloudCostView
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /model/cloudCost/top
  method: get
  operationId: getCloudCostTop
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /model/forecast/allocation
  method: get
  operationId: getForecastAllocation
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /model/savings/clusterSizingETL
  method: get
  operationId: getClusterRightSizing
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /model/savings/requestSizingV2
  method: get
  operationId: getContainerRequestRightSizing
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /model/savings/abandonedWorkloads
  method: get
  operationId: getAbandonedWorkloads
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /model/savings/orphanedDisks
  method: get
  operationId: getOrphanedDisks
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /model/savings/orphanedIPs
  method: get
  operationId: getOrphanedIPs
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none