generated: '2026-08-02' method: generated source: openapi/outsystems-asset-configurations-api-v1-openapi.json, openapi/outsystems-asset-repository-api-v1-openapi.json, openapi/outsystems-build-operations-api-v1-openapi.json, openapi/outsystems-code-quality-api-v1-openapi.json, openapi/outsystems-dependency-management-api-v1-openapi.json, openapi/outsystems-deployments-api-v1-openapi.json, openapi/outsystems-environment-configurations-api-v1-openapi.json, openapi/outsystems-external-library-generation-api-v1-openapi.json, openapi/outsystems-native-application-orchestration-service-api-v1-openapi.json, openapi/outsystems-portfolio-api-v1-openapi.json, openapi/outsystems-portfolio-api-v2-openapi.json, openapi/outsystems-subscription-api-v1-openapi.json, openapi/outsystems-user-access-management-api-v1-openapi.json description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 150 by_action_class: connected: 94 acting: 56 by_consequence: read: 94 write: 49 safety-critical: 3 physical: 4 human_in_the_loop_required: 3 operations: - path: /environments/{environmentKey}/agents/{agentKey}/revisions/deployed/configurations method: get operationId: AssetConfiguration_GetAgentDeployedConfiguration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/agents/{agentKey}/revisions/{baselineRevision}/configurations method: get operationId: AssetConfiguration_GetAgentRevisionConfiguration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/applications/{applicationKey}/revisions/deployed/configurations method: get operationId: AssetConfiguration_GetApplicationDeployedConfiguration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/applications/{applicationKey}/revisions/{baselineRevision}/configurations method: get operationId: AssetConfiguration_GetApplicationRevisionConfiguration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/agents/{agentKey}/configurations method: patch operationId: AssetConfiguration_PatchAgent x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environments/{environmentKey}/applications/{applicationKey}/configurations method: patch operationId: AssetConfiguration_PatchApplication x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environments/{environmentKey}/default-system-configurations method: get operationId: EnvironmentConfiguration_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/default-system-configurations method: patch operationId: EnvironmentConfiguration_Patch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /assets method: post operationId: AssetRepository_CreateAssetRevision x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /assets method: get operationId: AssetRepository_ListAssets x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey} method: delete operationId: AssetRepository_DeleteAsset x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /assets/{assetKey} method: get operationId: AssetRepository_GetAsset x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey}/highest-tag-revision method: get operationId: AssetRepository_GetApplicationHighestTagRevision x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey}/latest-revision method: get operationId: AssetRepository_GetAssetLatestRevision x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey}/revisions/{revisionNumber} method: get operationId: AssetRepository_GetAssetRevision x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey}/revisions/{revisionNumber} method: patch operationId: AssetRepository_PatchVersion x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /assets/{assetKey}/revisions/{revisionNumber}/icon method: get operationId: AssetRepository_GetAssetRevisionIcon x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey}/revisions/{revisionNumber}/metadata method: get operationId: AssetRepository_GetAssetRevisionMetadata x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey}/revisions/{revisionNumber}/release-notes method: get operationId: AssetRepository_GetAssetRevisionReleaseNotes x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey}/revisions/{revisionNumber}/signature method: get operationId: AssetRepository_GetAssetRevisionSignature x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey}/revisions/{revisionNumber}/source-code method: get operationId: AssetRepository_GetAssetRevisionSourceCode x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey}/revisions method: get operationId: AssetRepository_ListAssetRevisions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/search method: post operationId: AssetRepository_ListMultipleAssetRevisions x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /uploads method: post operationId: Uploads_CreateUpload x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /build-operations/{operationKey} method: get operationId: BuildV_GetBuild x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /build-operations/{operationKey}/log-messages method: get operationId: BuildV_GetBuildFeedback x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /build-operations/{operationKey}/generated-code method: get operationId: BuildV_GetSourceCode x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /build-operations/{operationKey}/generated-code method: post operationId: BuildV_StartSourceCodeProcess x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /build-operations method: get operationId: BuildV_ListBuilds x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /build-operations method: post operationId: BuildV_StartNewBuildJob x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /code-analyses/{analysisKey} method: get operationId: CodeAnalysisControllerV_GetAnalysisRequestStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /code-analyses method: post operationId: CodeAnalysisControllerV_SubmitCodeAnalysisRequest x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /findings method: get operationId: FindingsControllerV_GetFindings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets-quality-metrics method: get operationId: FindingsOverviewControllerV_GetAppsOverview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey}/revisions/{revision}/analysis-summary method: get operationId: FindingsOverviewControllerV_GetAssetRevisionFindingsSummary x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /findings-summary method: get operationId: FindingsOverviewControllerV_GetFindingsSummary x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /findings-trend method: get operationId: FindingsOverviewControllerV_GetFindingsTrend x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /patterns method: get operationId: PatternsControllerV_GetPatterns x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /patterns/{patternId} method: get operationId: PatternsControllerV_GetPatternsById x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /analysis-status method: get operationId: SyncControllerV_GetAnalysisStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /deletion-analyses/{analysisKey} method: get operationId: DeletionAnalysis_GetResult x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /deletion-analyses method: post operationId: DeletionAnalysis_LaunchDeletionAnalysis x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /deployment-analyses/{analysisKey} method: get operationId: DeploymentAnalysis_GetResult x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /deployment-analyses method: post operationId: DeploymentAnalysis_LaunchDeploymentAnalysis x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /assets/{assetKey}/consumers method: get operationId: DependencyManagement_ListAssetConsumers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey}/revisions/{revisionNumber}/producer-graph method: get operationId: DependencyManagement_ListAssetProducerGraph x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey}/revisions/{revisionNumber}/producers method: get operationId: DependencyManagement_ListAssetProducers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey}/revisions/{revisionNumber}/consumers method: get operationId: DependencyManagement_ListAssetRevisionConsumers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey}/revisions/{revisionNumber}/public-elements method: get operationId: DependencyManagement_ListAssetRevisionPublicElements x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey}/revisions/{revisionNumber}/referenced-elements method: get operationId: DependencyManagement_ListReferencedElements x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /public-elements/search method: post operationId: DependencyManagement_SearchPublicElements x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /deployment-operations method: get operationId: DeploymentOperations_Filter x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /deployment-operations method: post operationId: DeploymentOperations_Post x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /deployment-operations/{operationKey} method: get operationId: DeploymentOperations_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /deployment-operations/{operationKey}/messages method: get operationId: DeploymentOperations_GetMessages x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /publish-operations method: get operationId: PublishOperations_Filter x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /publish-operations method: post operationId: PublishOperations_Post x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /publish-operations/{operationKey} method: get operationId: PublishOperations_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /publish-operations/{operationKey}/messages method: get operationId: PublishOperations_GetMessages x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/domains/{domainKey} method: delete operationId: Domains_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environments/{environmentKey}/domains/{domainKey} method: get operationId: Domains_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/domains/{domainKey} method: patch operationId: Domains_Patch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environments/{environmentKey}/domains method: get operationId: Domains_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/domains method: post operationId: Domains_Post x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environments/{environmentKey}/default-domain method: get operationId: EnvironmentConfigurations_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/default-domain method: patch operationId: EnvironmentConfigurations_Patch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environments/{environmentKey}/ip-filter-groups/{ipFilterGroupKey} method: delete operationId: IpFilterGroups_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environments/{environmentKey}/ip-filter-groups/{ipFilterGroupKey} method: get operationId: IpFilterGroups_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/ip-filter-groups/{ipFilterGroupKey} method: patch operationId: IpFilterGroups_Patch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environments/{environmentKey}/ip-filter-groups method: get operationId: IpFilterGroups_List x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/ip-filter-groups method: post operationId: IpFilterGroups_Post x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environments/{environmentKey}/private-gateway/activation method: post operationId: PrivateGateway_Activation x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environments/{environmentKey}/private-gateway/deactivation method: post operationId: PrivateGateway_Deactivation x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environments/{environmentKey}/private-gateway method: get operationId: PrivateGateway_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/private-gateway/key-rotation method: post operationId: PrivateGateway_KeyRotation x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /generation-operations method: post operationId: GenerationOperations_CreateGenerationOperation x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /generation-operations method: get operationId: GenerationOperations_GetGenerationOperations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /generation-operations/{operationKey} method: delete operationId: GenerationOperations_DeleteGenerationOperationByOperationKey x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /generation-operations/{operationKey} method: get operationId: GenerationOperations_GetGenerationOperationByOperationKey x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /generation-operations/{operationKey}/contents method: get operationId: GenerationOperations_GetGenerationOperationContents x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /generation-operations/{operationKey}/log-messages method: get operationId: GenerationOperations_GetGenerationOperationLogMessages x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /assets/{assetKey}/revisions/{revision}/source-code-download method: post operationId: SourceCodeDownload_CreateDownloadOperation x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /assets/{assetKey}/revisions/{revision}/source-code-download/{operationKey} method: get operationId: SourceCodeDownload_GetDownloadUri x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /uploads method: get operationId: Upload_UploadOperation x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /build-operations/{operationKey} method: get operationId: GET_BuildOperations_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /build-operations/{operationKey}/log-messages method: get operationId: GET_BuildOperations_GetMessages x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /build-operations method: get operationId: GET_BuildOperations_List x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /build-operations method: post operationId: POST_BuildOperations_Post x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /build-operations/version-suggestions method: post operationId: POST_BuildOperations_PostVersionSuggestions x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /build-operations/native-build-validation method: post operationId: POST_BuildOperations_ValidateNativeBuild x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environments/{environmentKey}/applications/{applicationKey}/configurations/android method: get operationId: GET_NativeBuildConfigurations_GetAndroidMobileConfiguration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/applications/{applicationKey}/configurations/android method: patch operationId: PATCH_NativeBuildConfigurations_UpdateMobileAndroidConfiguration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environments/{environmentKey}/applications/{applicationKey}/configurations/ios method: get operationId: GET_NativeBuildConfigurations_GetIosMobileConfiguration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/applications/{applicationKey}/configurations/ios method: patch operationId: PATCH_NativeBuildConfigurations_UpdateMobileIosConfiguration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /native-builder-versions method: get operationId: GET_NativeBuilderVersions_List x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/applications/{applicationKey}/configurations/extensibility-settings method: get operationId: GET_NativeBuildExtensibilitySettings_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/applications/{applicationKey}/configurations/extensibility-settings method: patch operationId: PATCH_NativeBuildExtensibilitySettings_Patch x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /deployed-assets method: get operationId: DeployedAssets_ListAssets x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments method: get operationId: Environments_ListEnvironments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /deployed-assets method: get operationId: DeployedAssets_ListAssets x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments method: get operationId: Environments_ListEnvironments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments method: patch operationId: Environments_UpdateEnvironments x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environments/{environmentKey} method: patch operationId: Environments_PatchEnvironment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /libraries method: get operationId: Libraries_ListLibraries x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /portfolios method: get operationId: Portfolios_ListPortfolios x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /portfolios/{portfolioKey} method: patch operationId: Portfolios_PatchPortfolio x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environments/{environmentKey}/entitlements/usage/by-asset method: get operationId: Subscription_GetAssetUsage x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/entitlements method: get operationId: Subscription_GetEnvironmentEntitlements x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environments/{environmentKey}/entitlements/usage method: get operationId: Subscription_GetEnvironmentUsage x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/configurations method: get operationId: Subscription_GetOrganizationConfigurations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/configurations method: patch operationId: Subscription_PatchOrganizationConfigurations x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/entitlements method: get operationId: Subscription_GetOrganizationEntitlements x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/entitlements/usage method: get operationId: Subscription_GetOrganizationUsage x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application-roles method: get operationId: ApplicationRole_QueryApplicationRoles x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application-roles/{key}/users method: get operationId: ApplicationRole_QueryUsersByApplicationRole x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /users/bulk method: post operationId: BulkUserProfile_CreateBulkUserProfilesOperation x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /users/bulk/{key} method: get operationId: BulkUserProfile_GetBulkUserProfileOperationStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /groups/{key}/users method: patch operationId: Group_AddOrRemoveUsersFromGroup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /groups/{key}/users method: get operationId: Group_QueryUsersFromGroup x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /groups method: post operationId: Group_CreateGroup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /groups method: get operationId: Group_QueryGroups x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /groups/{key} method: delete operationId: Group_DeleteGroup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /groups/{key} method: get operationId: Group_ReadGroup x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /groups/{key} method: patch operationId: Group_UpdateGroup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /groups/{key}/application-roles method: patch operationId: Group_ModifyGroupApplicationRoles x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /groups/{key}/application-roles method: get operationId: Group_QueryApplicationRolesGroups x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /groups/{key}/claim-mappings/{mappingKey} method: delete operationId: GroupIdpClaimMapping_DeleteGroupIdpClaimMapping x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /identity-providers method: get operationId: IdentityProvider_QueryIdentityProviders x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /identity-providers/{key} method: get operationId: IdentityProvider_ReadIdentityProvider x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization-roles method: post operationId: OrganizationRole_CreateOrganizationRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization-roles method: get operationId: OrganizationRole_QueryOrganizationRoles x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization-roles/{key} method: delete operationId: OrganizationRole_DeleteOrganizationRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization-roles/{key} method: get operationId: OrganizationRole_ReadOrganizationRole x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization-roles/{key} method: patch operationId: OrganizationRole_UpdateOrganizationRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization-roles/{key}/users method: get operationId: OrganizationRole_QueryUsersByRole x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /permissions method: get operationId: Permission_QueryPermissions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /permissions/{key} method: get operationId: Permission_ReadPermission x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /users/{key}/application-roles/{roleKey} method: post operationId: UserApplicationRoles_GrantApplicationRoleToUser x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /users/{key}/application-roles/{roleKey} method: delete operationId: UserApplicationRoles_RevokeApplicationRoleForUser x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /users/{key}/application-roles method: get operationId: UserApplicationRoles_QueryUserApplicationRoles x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /users/{key}/organization-roles method: get operationId: UserOrganizationRoles_GetUserOrganizationRoles x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /users/{key}/organization-roles/{roleKey} method: post operationId: UserOrganizationRoles_GrantOrganizationRoleToUser x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /users/{key}/organization-roles/{roleKey} method: delete operationId: UserOrganizationRoles_RevokeOrganizationRoleForUser x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /users/count method: get operationId: UserProfile_CountUsers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /users method: post operationId: UserProfile_CreateUser x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /users method: get operationId: UserProfile_QueryUsers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /users/{key} method: delete operationId: UserProfile_DeleteUser x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /users/{key} method: get operationId: UserProfile_GetUser x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /users/{key} method: patch operationId: UserProfile_PatchUser x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /users/{key}/groups method: get operationId: UserProfile_QueryGroupsByUser x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none