generated: '2026-07-15' method: generated source: openapi/kuma-api-openapi.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 141 by_action_class: connected: 79 acting: 62 by_consequence: read: 79 write: 62 human_in_the_loop_required: 0 operations: - path: / method: get operationId: index x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /_resources method: get operationId: get-resource-type-description x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /global-insight method: get operationId: get-global-insight x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/{resourceType}/{resourceName}/_rules method: get operationId: inspect-dataplanes-rules x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/dataplanes/{name}/_config method: get operationId: get-dataplanes-xds-config x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/dataplanes/{name}/_layout method: get operationId: get-dataplanes-layout x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/dataplanes/{name}/_policies method: get operationId: get-proxy-policy-conf x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/dataplanes/{name}/_inbounds/{inbound-kri}/_policies method: get operationId: get-inbound-policy-conf x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/dataplanes/{name}/_outbounds/{kri}/_policies method: get operationId: get-outbound-policy-conf x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/dataplanes/{name}/_outbounds/{kri}/_routes method: get operationId: get-outbound-routes x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/dataplanes/{name}/_outbounds/{outbound-kri}/_routes/{route-kri}/_policies method: get operationId: get-route-policy-conf x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/{policyType}/{policyName}/_resources/dataplanes method: get operationId: inspect-resources x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshservices/{name}/_dataplanes method: get operationId: inspect-meshservices-dataplanes x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/{serviceType}/{serviceName}/_hostnames method: get operationId: inspect-hostnames x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /_kri/{kri} method: get operationId: getByKri x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshaccesslogs/{name} method: get operationId: getMeshAccessLog x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshaccesslogs/{name} method: put operationId: putMeshAccessLog x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshaccesslogs/{name} method: delete operationId: deleteMeshAccessLog x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshaccesslogs method: get operationId: getMeshAccessLogList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshcircuitbreakers/{name} method: get operationId: getMeshCircuitBreaker x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshcircuitbreakers/{name} method: put operationId: putMeshCircuitBreaker x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshcircuitbreakers/{name} method: delete operationId: deleteMeshCircuitBreaker x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshcircuitbreakers method: get operationId: getMeshCircuitBreakerList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshfaultinjections/{name} method: get operationId: getMeshFaultInjection x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshfaultinjections/{name} method: put operationId: putMeshFaultInjection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshfaultinjections/{name} method: delete operationId: deleteMeshFaultInjection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshfaultinjections method: get operationId: getMeshFaultInjectionList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshhealthchecks/{name} method: get operationId: getMeshHealthCheck x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshhealthchecks/{name} method: put operationId: putMeshHealthCheck x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshhealthchecks/{name} method: delete operationId: deleteMeshHealthCheck x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshhealthchecks method: get operationId: getMeshHealthCheckList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshhttproutes/{name} method: get operationId: getMeshHTTPRoute x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshhttproutes/{name} method: put operationId: putMeshHTTPRoute x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshhttproutes/{name} method: delete operationId: deleteMeshHTTPRoute x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshhttproutes method: get operationId: getMeshHTTPRouteList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshloadbalancingstrategies/{name} method: get operationId: getMeshLoadBalancingStrategy x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshloadbalancingstrategies/{name} method: put operationId: putMeshLoadBalancingStrategy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshloadbalancingstrategies/{name} method: delete operationId: deleteMeshLoadBalancingStrategy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshloadbalancingstrategies method: get operationId: getMeshLoadBalancingStrategyList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshmetrics/{name} method: get operationId: getMeshMetric x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshmetrics/{name} method: put operationId: putMeshMetric x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshmetrics/{name} method: delete operationId: deleteMeshMetric x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshmetrics method: get operationId: getMeshMetricList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshpassthroughs/{name} method: get operationId: getMeshPassthrough x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshpassthroughs/{name} method: put operationId: putMeshPassthrough x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshpassthroughs/{name} method: delete operationId: deleteMeshPassthrough x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshpassthroughs method: get operationId: getMeshPassthroughList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshproxypatches/{name} method: get operationId: getMeshProxyPatch x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshproxypatches/{name} method: put operationId: putMeshProxyPatch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshproxypatches/{name} method: delete operationId: deleteMeshProxyPatch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshproxypatches method: get operationId: getMeshProxyPatchList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshratelimits/{name} method: get operationId: getMeshRateLimit x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshratelimits/{name} method: put operationId: putMeshRateLimit x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshratelimits/{name} method: delete operationId: deleteMeshRateLimit x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshratelimits method: get operationId: getMeshRateLimitList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshretries/{name} method: get operationId: getMeshRetry x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshretries/{name} method: put operationId: putMeshRetry x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshretries/{name} method: delete operationId: deleteMeshRetry x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshretries method: get operationId: getMeshRetryList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshtcproutes/{name} method: get operationId: getMeshTCPRoute x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshtcproutes/{name} method: put operationId: putMeshTCPRoute x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshtcproutes/{name} method: delete operationId: deleteMeshTCPRoute x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshtcproutes method: get operationId: getMeshTCPRouteList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshtimeouts/{name} method: get operationId: getMeshTimeout x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshtimeouts/{name} method: put operationId: putMeshTimeout x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshtimeouts/{name} method: delete operationId: deleteMeshTimeout x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshtimeouts method: get operationId: getMeshTimeoutList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshtlses/{name} method: get operationId: getMeshTLS x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshtlses/{name} method: put operationId: putMeshTLS x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshtlses/{name} method: delete operationId: deleteMeshTLS x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshtlses method: get operationId: getMeshTLSList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshtraces/{name} method: get operationId: getMeshTrace x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshtraces/{name} method: put operationId: putMeshTrace x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshtraces/{name} method: delete operationId: deleteMeshTrace x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshtraces method: get operationId: getMeshTraceList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshtrafficpermissions/{name} method: get operationId: getMeshTrafficPermission x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshtrafficpermissions/{name} method: put operationId: putMeshTrafficPermission x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshtrafficpermissions/{name} method: delete operationId: deleteMeshTrafficPermission x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshtrafficpermissions method: get operationId: getMeshTrafficPermissionList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/dataplanes method: get operationId: getDataplaneList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/dataplanes/{name} method: delete operationId: deleteDataplane x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/dataplanes/{name} method: get operationId: getDataplane x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/dataplanes/{name} method: put operationId: putDataplane x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/dataplanes/{name}/_overview method: get operationId: getDataplaneOverview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/dataplanes/_overview method: get operationId: getDataplaneOverviewList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes method: get operationId: getMeshList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{name} method: delete operationId: deleteMesh x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{name} method: get operationId: getMesh x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{name} method: put operationId: putMesh x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshgateways method: get operationId: getMeshGatewayList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshgateways/{name} method: delete operationId: deleteMeshGateway x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshgateways/{name} method: get operationId: getMeshGateway x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshgateways/{name} method: put operationId: putMeshGateway x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/secrets method: get operationId: getSecretList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/secrets/{name} method: delete operationId: deleteSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/secrets/{name} method: get operationId: getSecret x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/secrets/{name} method: put operationId: putSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /zoneegresses method: get operationId: getZoneEgressList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /zoneegresses/{name} method: delete operationId: deleteZoneEgress x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /zoneegresses/{name} method: get operationId: getZoneEgress x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /zoneegresses/{name} method: put operationId: putZoneEgress x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /zoneingresses method: get operationId: getZoneIngressList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /zoneingresses/{name} method: delete operationId: deleteZoneIngress x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /zoneingresses/{name} method: get operationId: getZoneIngress x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /zoneingresses/{name} method: put operationId: putZoneIngress x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /hostnamegenerators/{name} method: get operationId: getHostnameGenerator x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /hostnamegenerators/{name} method: put operationId: putHostnameGenerator x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /hostnamegenerators/{name} method: delete operationId: deleteHostnameGenerator x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /hostnamegenerators method: get operationId: getHostnameGeneratorList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshexternalservices/{name} method: get operationId: getMeshExternalService x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshexternalservices/{name} method: put operationId: putMeshExternalService x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshexternalservices/{name} method: delete operationId: deleteMeshExternalService x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshexternalservices method: get operationId: getMeshExternalServiceList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshidentities/{name} method: get operationId: getMeshIdentity x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshidentities/{name} method: put operationId: putMeshIdentity x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshidentities/{name} method: delete operationId: deleteMeshIdentity x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshidentities method: get operationId: getMeshIdentityList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshmultizoneservices/{name} method: get operationId: getMeshMultiZoneService x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshmultizoneservices/{name} method: put operationId: putMeshMultiZoneService x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshmultizoneservices/{name} method: delete operationId: deleteMeshMultiZoneService x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshmultizoneservices method: get operationId: getMeshMultiZoneServiceList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshopentelemetrybackends/{name} method: get operationId: getMeshOpenTelemetryBackend x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshopentelemetrybackends/{name} method: put operationId: putMeshOpenTelemetryBackend x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshopentelemetrybackends/{name} method: delete operationId: deleteMeshOpenTelemetryBackend x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshopentelemetrybackends method: get operationId: getMeshOpenTelemetryBackendList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshservices/{name} method: get operationId: getMeshService x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshservices/{name} method: put operationId: putMeshService x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshservices/{name} method: delete operationId: deleteMeshService x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshservices method: get operationId: getMeshServiceList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshtrusts/{name} method: get operationId: getMeshTrust x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshtrusts/{name} method: put operationId: putMeshTrust x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshtrusts/{name} method: delete operationId: deleteMeshTrust x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshtrusts method: get operationId: getMeshTrustList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshzoneaddresses/{name} method: get operationId: getMeshZoneAddress x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/meshzoneaddresses/{name} method: put operationId: putMeshZoneAddress x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshzoneaddresses/{name} method: delete operationId: deleteMeshZoneAddress x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/meshzoneaddresses method: get operationId: getMeshZoneAddressList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/workloads/{name} method: get operationId: getWorkload x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /meshes/{mesh}/workloads/{name} method: put operationId: putWorkload x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/workloads/{name} method: delete operationId: deleteWorkload x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /meshes/{mesh}/workloads method: get operationId: getWorkloadList x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none