generated: '2026-07-15' method: generated source: openapi/pulumi-openapi.json description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 586 by_action_class: acting: 316 connected: 270 by_consequence: write: 283 read: 270 safety-critical: 4 physical: 29 human_in_the_loop_required: 4 operations: - path: /api/ai/template method: post operationId: AITemplate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/capabilities method: get operationId: Capabilities x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/change-gates/{orgName} method: get operationId: ListGates x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/change-gates/{orgName} method: post operationId: CreateGate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/change-gates/{orgName}/{gateID} method: delete operationId: DeleteGate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/change-gates/{orgName}/{gateID} method: get operationId: ReadGate x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/change-gates/{orgName}/{gateID} method: put operationId: UpdateGate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/change-requests/{orgName} method: get operationId: List_change_requests x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/change-requests/{orgName}/{changeRequestID} method: get operationId: Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/change-requests/{orgName}/{changeRequestID} method: patch operationId: Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/change-requests/{orgName}/{changeRequestID}/apply method: post operationId: Apply x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/change-requests/{orgName}/{changeRequestID}/approve method: delete operationId: Unapprove x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/change-requests/{orgName}/{changeRequestID}/approve method: post operationId: Approve x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/change-requests/{orgName}/{changeRequestID}/close method: post operationId: Close x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/change-requests/{orgName}/{changeRequestID}/comments method: post operationId: AddComment x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/change-requests/{orgName}/{changeRequestID}/events method: get operationId: ListEvents x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/change-requests/{orgName}/{changeRequestID}/submit method: post operationId: Submit x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/cli/version method: get operationId: Version x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations method: get operationId: ListAllVCSIntegrations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/azure-devops method: get operationId: ListAzureDevOpsIntegrations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/azure-devops method: post operationId: CreateAzureDevOpsSetup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/azure-devops/access-status method: get operationId: GetAzureDevOpsAccessStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/azure-devops/oauth/complete method: post operationId: CompleteAzureDevOpsOAuth x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/azure-devops/oauth/initiate method: post operationId: InitiateAzureDevOpsOAuth x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/azure-devops/setup/organizations method: get operationId: ListAzureDevOpsOrganizations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/azure-devops/setup/organizations/{adoOrgName}/projects method: get operationId: ListAzureDevOpsProjects x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/azure-devops/{integrationId} method: delete operationId: DeleteAzureDevOpsIntegration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/azure-devops/{integrationId} method: get operationId: GetAzureDevOpsIntegration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/azure-devops/{integrationId} method: patch operationId: UpdateAzureDevOpsIntegration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/bitbucket method: get operationId: ListBitBucketIntegrations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/bitbucket method: post operationId: CreateBitBucketSetup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/bitbucket/access-status method: get operationId: GetBitBucketAccessStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/bitbucket/{integrationId} method: delete operationId: DeleteBitBucketIntegration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/bitbucket/{integrationId} method: get operationId: GetBitBucketIntegration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/bitbucket/{integrationId} method: patch operationId: UpdateBitBucketIntegration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/custom method: get operationId: ListCustomVCSIntegrations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/custom method: post operationId: CreateCustomVCSIntegration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/custom/{integrationId} method: delete operationId: DeleteCustomVCSIntegration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/custom/{integrationId} method: get operationId: GetCustomVCSIntegration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/custom/{integrationId} method: patch operationId: UpdateCustomVCSIntegration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/custom/{integrationId}/repos method: delete operationId: RemoveCustomVCSRepository x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/custom/{integrationId}/repos method: post operationId: AddCustomVCSRepository x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/github method: get operationId: ListGitHubIntegrations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/github method: post operationId: StartGitHubSetup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/github-enterprise method: get operationId: ListGitHubEnterpriseIntegrations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/github-enterprise/{integrationId} method: delete operationId: DeleteGitHubEnterpriseIntegration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/github-enterprise/{integrationId} method: get operationId: GetGitHubEnterpriseIntegration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/github-enterprise/{integrationId} method: patch operationId: UpdateGitHubEnterpriseIntegration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/github/access-status method: get operationId: GetGitHubAccess x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/github/{integrationId} method: delete operationId: DeleteGitHubIntegration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/github/{integrationId} method: get operationId: GetGitHubIntegration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/github/{integrationId} method: patch operationId: UpdateGitHubIntegration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/gitlab method: get operationId: ListGitLabIntegrations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/gitlab method: post operationId: CreateGitLabSetup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/gitlab/access-status method: get operationId: GetGitLabAccessStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/gitlab/{integrationId} method: delete operationId: DeleteGitLabIntegration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/gitlab/{integrationId} method: get operationId: GetGitLabIntegration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/gitlab/{integrationId} method: patch operationId: UpdateGitLabIntegration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/orgs/{orgName}/integrations/{provider}/{integrationId}/repos method: get operationId: ListVCSRepos x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/{provider}/{integrationId}/repos/destinations method: get operationId: ListVCSRepoDestinations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/integrations/{provider}/{integrationId}/repos/{repoId}/branches method: get operationId: ListVCSBranches x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/members/{userLogin}/stacks/{projectName}/{stackName} method: get operationId: ListMemberStackPermissions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/orgs/{orgName}/stacks/search method: post operationId: SearchStacks x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/stacks/{orgName}/{projectName}/{stackName}/overview method: get operationId: GetStackOverview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/stacks/{orgName}/{projectName}/{stackName}/teams/{teamName} method: patch operationId: UpdateTeamStackPermissions x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/console/stacks/{orgName}/{projectName}/{stackName}/updates/latest/summary method: get operationId: UpdateSummaryHandlerLatest x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/console/stacks/{orgName}/{projectName}/{stackName}/updates/{updateID}/summary method: get operationId: UpdateSummary x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/deployments/executor method: get operationId: GetPulumiDeployExecutor x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/deployments/poll method: get operationId: PollDeploymentsQueue x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/deployments/{deploymentId}/status method: get operationId: GetDeploymentsStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/cloudsetup/{orgName}/aws/setup method: post operationId: AWSSetup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/cloudsetup/{orgName}/aws/sso/accounts method: get operationId: AWSSSOListAccounts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/cloudsetup/{orgName}/aws/sso/initiate method: post operationId: AWSSSOInitiate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/cloudsetup/{orgName}/aws/sso/setup method: post operationId: AWSSSOSetup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/cloudsetup/{orgName}/oauth/azure/accounts method: get operationId: AzureListAccounts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/cloudsetup/{orgName}/oauth/azure/setup method: post operationId: AzureSetup x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/esc/cloudsetup/{orgName}/oauth/complete method: post operationId: CompleteOAuth x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/cloudsetup/{orgName}/oauth/gcp/accounts method: get operationId: GCPListAccounts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/cloudsetup/{orgName}/oauth/gcp/setup method: post operationId: GCPSetup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/cloudsetup/{orgName}/oauth/initiate method: post operationId: InitiateOAuth x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments method: get operationId: ListEnvironments_esc x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName} method: get operationId: ListOrgEnvironments_esc x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName} method: post operationId: CreateEnvironment_esc_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/restore method: get operationId: ListDeletedEnvironments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/restore method: put operationId: RestoreEnvironment x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/tags method: get operationId: ListAllEnvironmentTags_esc x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/yaml/check method: post operationId: CheckYAML_esc x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/yaml/open method: post operationId: OpenYAML_esc x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/yaml/open/{openSessionID} method: get operationId: ReadAnonymousOpenEnvironment_esc x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName} method: delete operationId: DeleteEnvironment_esc_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName} method: get operationId: ReadEnvironment_esc_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName} method: head operationId: HeadEnvironment_esc_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName} method: patch operationId: UpdateEnvironment_esc_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/check method: post operationId: CheckEnvironment_esc_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/clone method: post operationId: CloneEnvironment x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/decrypt method: get operationId: DecryptEnvironment_esc_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/decrypt-secrets method: post operationId: DecryptEnvironmentSecrets x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/drafts method: post operationId: CreateEnvironmentDraft x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/drafts/{changeRequestID} method: get operationId: ReadEnvironmentDraft x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/drafts/{changeRequestID} method: patch operationId: UpdateEnvironmentDraft x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/drafts/{changeRequestID}/open method: post operationId: OpenEnvironmentDraft x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/encrypt-secrets method: post operationId: EncryptEnvironmentSecrets x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/hooks method: get operationId: ListWebhooks_esc_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/hooks method: post operationId: CreateWebhook_esc_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/hooks/{hookName} method: delete operationId: DeleteWebhook_esc_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/hooks/{hookName} method: get operationId: GetWebhook_esc_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/hooks/{hookName} method: patch operationId: UpdateWebhook_esc_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/hooks/{hookName}/deliveries method: get operationId: GetWebhookDeliveries_esc_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/hooks/{hookName}/deliveries/{event}/redeliver method: post operationId: RedeliverWebhookEvent_esc_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/hooks/{hookName}/ping method: post operationId: PingWebhook_esc_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/metadata method: get operationId: GetEnvironmentMetadata_esc_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/open method: post operationId: OpenEnvironment_esc_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/open/request method: post operationId: CreateOpenEnvironmentRequest x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/open/request/{changeRequestID} method: get operationId: ReadOpenEnvironmentRequest x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/open/request/{changeRequestID} method: put operationId: UpdateOpenEnvironmentRequest x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/open/{openSessionID} method: get operationId: ReadOpenEnvironment_esc_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/ownership method: post operationId: ReassignEnvironmentOwnership x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/referrers method: get operationId: ListEnvironmentReferrers_esc_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/rotate method: post operationId: RotateEnvironment x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/rotate/history method: get operationId: ListEnvironmentSecretRotationHistory x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/schedules method: get operationId: ListEnvironmentSchedule x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/schedules method: post operationId: CreateEnvironmentSchedule x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/schedules/{scheduleID} method: delete operationId: DeleteEnvironmentSchedule x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/schedules/{scheduleID} method: get operationId: ReadEnvironmentSchedule x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/schedules/{scheduleID} method: patch operationId: UpdateEnvironmentSchedule x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/schedules/{scheduleID}/history method: get operationId: ListEnvironmentScheduleHistory x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/schedules/{scheduleID}/pause method: post operationId: PauseEnvironmentSchedule x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/schedules/{scheduleID}/resume method: post operationId: ResumeEnvironmentSchedule x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/settings method: get operationId: GetEnvironmentSettings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/settings method: patch operationId: PatchEnvironmentSettings x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/tags method: get operationId: ListEnvironmentTags_esc_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/tags method: post operationId: CreateEnvironmentTag_esc_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/tags/{tagName} method: delete operationId: DeleteEnvironmentTag_esc_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/tags/{tagName} method: get operationId: GetEnvironmentTag_esc_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/tags/{tagName} method: patch operationId: UpdateEnvironmentTag_esc_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/versions method: get operationId: ListEnvironmentRevisions_esc_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/versions/tags method: get operationId: ListRevisionTags_esc_environments_versions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/versions/tags method: post operationId: CreateRevisionTag_esc_environments_versions_tags x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/versions/tags/{tagName} method: delete operationId: DeleteRevisionTag_esc_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/versions/tags/{tagName} method: get operationId: ReadRevisionTag_esc_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/versions/tags/{tagName} method: patch operationId: UpdateRevisionTag_esc_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/versions/{version} method: get operationId: ReadEnvironment_esc_environments_versions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/versions/{version}/check method: post operationId: CheckEnvironment_esc_environments_versions x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/versions/{version}/decrypt method: get operationId: DecryptEnvironment_esc_environments_versions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/versions/{version}/open method: post operationId: OpenEnvironment_esc_environments_versions x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/versions/{version}/referrers method: get operationId: ListEnvironmentReferrers_esc_environments_versions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/environments/{orgName}/{projectName}/{envName}/versions/{version}/retract method: post operationId: RetractEnvironmentRevision_esc_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/esc/environments/{orgName}/{projectName}/{envName}/versions/{version}/tags method: get operationId: ListRevisionTags_esc_environments_versions2 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/providers method: get operationId: ListProviders_esc x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/providers/{providerName}/schema method: get operationId: GetProviderSchema_esc x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/rotators method: get operationId: ListRotators x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/esc/rotators/{rotatorName}/schema method: get operationId: GetRotatorSchema x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/oauth/token method: post operationId: Token x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/openapi/pulumi-spec.json method: get operationId: FetchRestSpecification x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName} method: get operationId: GetOrganization x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName} method: patch operationId: UpdateOrganizationSettings x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/agent-pools method: get operationId: ListOrgAgentPool x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/agent-pools method: post operationId: CreateOrgAgentPool x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/agent-pools/{poolId} method: delete operationId: DeleteOrgAgentPool x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/agent-pools/{poolId} method: get operationId: GetAgentPool x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/agent-pools/{poolId} method: patch operationId: PatchOrgAgentPool x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/auditlogs method: get operationId: ListAuditLogEventsHandlerV1 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/auditlogs/export method: get operationId: ExportAuditLogEventsHandlerV1 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/auditlogs/export/config method: delete operationId: DeleteAuditLogExportConfiguration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/auditlogs/export/config method: get operationId: GetAuditLogExportConfiguration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/auditlogs/export/config method: post operationId: UpdateAuditLogExportConfiguration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/auditlogs/export/config/force method: post operationId: ForceAuditLogExport x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/auditlogs/export/config/test method: post operationId: TestAuditLogExportConfiguration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/auditlogs/reader-kind method: get operationId: GetAuditLogsReaderKind x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/auditlogs/v2 method: get operationId: ListAuditLogEventsHandlerV2 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/auditlogs/v2/export method: get operationId: ExportAuditLogEventsHandlerV2 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/auth/policies/oidcissuers/{issuerId} method: get operationId: GetAuthPolicy x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/auth/policies/{policyId} method: patch operationId: UpdateAuthPolicy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/bulk-transfer/stacks method: post operationId: TransferAllStacks x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/cmk method: get operationId: ListOrganizationKeys x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/cmk method: post operationId: CreateOrganizationKey x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/cmk/disable method: post operationId: DisableAllOrganizationKeys x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/orgs/{orgName}/cmk/migration method: get operationId: ListOrganizationKeyMigrations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/cmk/migration/retry method: post operationId: RetryOrganizationKeyMigrations x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/cmk/{keyID}/default method: post operationId: SetDefaultOrganizationKey x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/cmk/{keyID}/disable method: post operationId: DisableOrganizationKey x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/orgs/{orgName}/deployments method: get operationId: ListOrgDeployments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/deployments/metadata method: get operationId: OrgDeploymentsMetadata x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/deployments/pause method: post operationId: PauseOrgDeployments x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/deployments/resume method: post operationId: ResumeOrgDeployments x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/deployments/summary method: get operationId: GetUsageSummaryDeployCompute x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/deployments/usagereport method: get operationId: GetDeployUsageReport x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/discovered-resources/summary method: get operationId: GetUsageSummaryDiscoveredResourceHours x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/hooks method: get operationId: ListOrganizationWebhooks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/hooks method: post operationId: CreateOrganizationWebhook x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/hooks/{hookName} method: delete operationId: DeleteOrganizationWebhook x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/hooks/{hookName} method: get operationId: GetOrganizationWebhook x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/hooks/{hookName} method: patch operationId: UpdateOrganizationWebhook x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/hooks/{hookName}/deliveries method: get operationId: GetOrganizationWebhookDeliveries x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/hooks/{hookName}/deliveries/{event}/redeliver method: post operationId: RedeliverOrganizationWebhookEvent x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/hooks/{hookName}/ping method: post operationId: PingOrganizationWebhook x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/insights-scans/summary method: get operationId: GetUsageSummaryInsightsScans x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/members method: get operationId: ListOrganizationMembers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/members/{userLogin} method: delete operationId: DeleteOrganizationMember x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/members/{userLogin} method: patch operationId: UpdateOrganizationMember x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/members/{userLogin} method: post operationId: AddOrganizationMember x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/members/{userLogin}/set-admin method: post operationId: SetSoleOrganizationAdmin x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/metadata method: get operationId: GetOrganizationMetadata x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/oidc/issuers method: get operationId: List_orgs_oidc_issuers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/oidc/issuers method: post operationId: RegisterOidcIssuer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/oidc/issuers/{issuerId} method: delete operationId: DeleteOidcIssuer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/oidc/issuers/{issuerId} method: get operationId: GetOidcIssuer x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/oidc/issuers/{issuerId} method: patch operationId: UpdateOidcIssuer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/oidc/issuers/{issuerId}/regenerate-thumbprints method: post operationId: RegenerateThumbprints x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/packages/usage method: get operationId: GetPackageUsedByStacks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/policygroups method: get operationId: ListPolicyGroups x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/policygroups method: post operationId: NewPolicyGroup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/policygroups/metadata method: get operationId: GetPolicyGroupMetadata x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/policygroups/{policyGroup} method: delete operationId: DeletePolicyGroup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/policygroups/{policyGroup} method: get operationId: GetPolicyGroup x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/policygroups/{policyGroup} method: patch operationId: UpdatePolicyGroup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/policygroups/{policyGroup}/batch method: patch operationId: BatchUpdatePolicyGroup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/policypacks method: get operationId: ListPolicyPacks_orgs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/policypacks method: post operationId: CreatePolicyPack x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/policypacks/{policyPackName} method: delete operationId: DeletePolicyPack_orgs_policypacks x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/policypacks/{policyPackName}/versions/{version} method: delete operationId: DeletePolicyPackVersion x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/policypacks/{policyPackName}/versions/{version} method: get operationId: GetPolicyPack x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/policypacks/{policyPackName}/versions/{version}/complete method: post operationId: CompletePolicyPack x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/policypacks/{policyPackName}/versions/{version}/schema method: get operationId: GetPolicyPackConfigSchema x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/policyresults/compliance method: post operationId: GetPolicyComplianceResults x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/policyresults/issues method: post operationId: ListPolicyIssues x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/policyresults/issues/export method: post operationId: ExportPolicyIssues x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/policyresults/issues/filters method: post operationId: GetPolicyIssuesFilters x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/policyresults/issues/{issueId} method: get operationId: GetPolicyIssue x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/policyresults/issues/{issueId} method: patch operationId: UpdatePolicyIssue x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/policyresults/metadata method: get operationId: GetPolicyResultsMetadata x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/policyresults/policies method: post operationId: ListPoliciesCompliance x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/policyresults/violationsv2 method: get operationId: ListPolicyViolationsV2 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/registry/policypacks/{policyPackName} method: get operationId: GetOrgRegistryPolicyPack x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/resources/summary method: get operationId: GetUsageSummaryResourceHours x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/restore-stack method: get operationId: ListDeletedStacks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/restore-stack/{programID} method: post operationId: RestoreDeletedStack x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/roles method: get operationId: ListRolesByOrgIDAndUXPurpose x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/roles method: post operationId: CreateRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/roles/scopes method: get operationId: ListAvailableScopes x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/roles/{roleID} method: delete operationId: DeleteRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/roles/{roleID} method: get operationId: GetRole x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/roles/{roleID} method: patch operationId: UpdateRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/roles/{roleID}/default method: patch operationId: UpdateOrganizationDefaultRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/roles/{roleID}/teams method: get operationId: ListTeamsWithRole x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/roles/{roleID}/tokens method: get operationId: ListOrgTokensWithRole x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/roles/{roleID}/users method: get operationId: ListUsersWithRole x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/saml method: get operationId: GetSAMLOrganization x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/saml method: patch operationId: UpdateSAMLOrganization x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/saml/admins method: get operationId: ListSAMLOrganizationAdmins x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/saml/admins/{userLogin} method: post operationId: UpdateSAMLOrganizationAdmins x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/search method: head operationId: SearchClusterAvailable x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/search/column-set method: get operationId: GetResourceColumnFilterSet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/search/resources method: get operationId: GetOrgResourceSearchQuery x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/search/resources/dashboard method: get operationId: GetResourceDashboardAggregations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/search/resources/export method: get operationId: ExportOrgResourceSearchQuery x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/search/resources/parse method: get operationId: GetNaturalLanguageQuery x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/search/resourcesv2 method: get operationId: GetOrgResourceSearchV2Query x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/secrets/summary method: get operationId: GetUsageSummaryEnvironmentSecrets x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/services method: get operationId: ListServices x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/services method: post operationId: CreateService x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/services/{ownerType}/{ownerName}/{serviceName} method: delete operationId: DeleteService x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/services/{ownerType}/{ownerName}/{serviceName} method: get operationId: GetService x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/services/{ownerType}/{ownerName}/{serviceName} method: head operationId: HeadService x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/services/{ownerType}/{ownerName}/{serviceName} method: patch operationId: UpdateService x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/services/{ownerType}/{ownerName}/{serviceName}/items method: post operationId: AddServiceItems x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/services/{ownerType}/{ownerName}/{serviceName}/items/{itemType}/{itemName} method: delete operationId: RemoveServiceItem x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/teams method: get operationId: ListTeams x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/teams/github method: post operationId: CreateGitHubTeam x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/teams/pulumi method: post operationId: CreatePulumiTeam x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/teams/{teamName} method: delete operationId: DeleteTeam x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/teams/{teamName} method: get operationId: GetTeam x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/teams/{teamName} method: patch operationId: UpdateTeam x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/teams/{teamName}/enable-team-roles method: post operationId: EnableTeamRoles x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/teams/{teamName}/roles method: get operationId: ListTeamRoles x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/teams/{teamName}/roles/{roleID} method: delete operationId: DeleteTeamRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/teams/{teamName}/roles/{roleID} method: post operationId: UpdateTeamRoles x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/teams/{teamName}/tokens method: get operationId: ListTeamTokens x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/teams/{teamName}/tokens method: post operationId: CreateTeamToken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/teams/{teamName}/tokens/{tokenId} method: delete operationId: DeleteTeamToken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/template method: get operationId: GetProjectTemplate x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/template/configuration method: get operationId: GetProjectTemplateConfiguration x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/template/download method: get operationId: GetOrgTemplateDownload x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/template/readme method: get operationId: GetOrgTemplateReadme x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/templates method: get operationId: GetOrgTemplates x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/templates/sources method: get operationId: GetOrgTemplateCollections x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/templates/sources method: post operationId: CreateOrgTemplateCollection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/templates/sources/{templateID} method: delete operationId: DeleteOrgTemplateCollection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/templates/sources/{templateID} method: patch operationId: UpdateOrgTemplateCollection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/tokens method: get operationId: ListOrgTokens x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/orgs/{orgName}/tokens method: post operationId: CreateOrgToken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/orgs/{orgName}/tokens/{tokenId} method: delete operationId: DeleteOrgToken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/agents/{orgName}/tasks method: get operationId: ListTasks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/agents/{orgName}/tasks method: post operationId: CreateTasks x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/agents/{orgName}/tasks/{taskID} method: get operationId: GetTask x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/agents/{orgName}/tasks/{taskID} method: patch operationId: UpdateTask x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/agents/{orgName}/tasks/{taskID} method: post operationId: RespondToTask x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/agents/{orgName}/tasks/{taskID}/cancel method: post operationId: CancelTask x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/agents/{orgName}/tasks/{taskID}/events method: get operationId: GetTaskEvents x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/agents/{orgName}/tasks/{taskID}/events/stream method: get operationId: StreamTaskEvents x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments method: get operationId: ListEnvironments_preview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/providers method: get operationId: ListProviders_preview_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/providers/{providerName}/schema method: get operationId: GetProviderSchema_preview_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName} method: get operationId: ListOrgEnvironments_preview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/tags method: get operationId: ListAllEnvironmentTags_preview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/yaml/check method: post operationId: CheckYAML_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/yaml/open method: post operationId: OpenYAML_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/yaml/open/{openSessionID} method: get operationId: ReadAnonymousOpenEnvironment_preview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName} method: delete operationId: DeleteEnvironment_preview_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName} method: get operationId: ReadEnvironment_preview_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName} method: head operationId: HeadEnvironment_preview_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName} method: patch operationId: UpdateEnvironment_preview_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName} method: post operationId: CreateEnvironment_preview_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/check method: post operationId: CheckEnvironment_preview_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/decrypt method: get operationId: DecryptEnvironment_preview_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName}/hooks method: get operationId: ListWebhooks_preview_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName}/hooks method: post operationId: CreateWebhook_preview_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/hooks/{hookName} method: delete operationId: DeleteWebhook_preview_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/hooks/{hookName} method: get operationId: GetWebhook_preview_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName}/hooks/{hookName} method: patch operationId: UpdateWebhook_preview_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/hooks/{hookName}/deliveries method: get operationId: GetWebhookDeliveries_preview_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName}/hooks/{hookName}/deliveries/{event}/redeliver method: post operationId: RedeliverWebhookEvent_preview_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/hooks/{hookName}/ping method: post operationId: PingWebhook_preview_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/metadata method: get operationId: GetEnvironmentMetadata_preview_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName}/open method: post operationId: OpenEnvironment_preview_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/open/{openSessionID} method: get operationId: ReadOpenEnvironment_preview_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName}/tags method: get operationId: ListEnvironmentTags_preview_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName}/tags method: post operationId: CreateEnvironmentTag_preview_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/tags/{tagName} method: delete operationId: DeleteEnvironmentTag_preview_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/tags/{tagName} method: get operationId: GetEnvironmentTag_preview_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName}/tags/{tagName} method: patch operationId: UpdateEnvironmentTag_preview_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/versions method: get operationId: ListEnvironmentRevisions_preview_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName}/versions/tags method: get operationId: ListRevisionTags_preview_environments_versions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName}/versions/tags/{tagName} method: delete operationId: DeleteRevisionTag_preview_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/versions/tags/{tagName} method: get operationId: ReadRevisionTag_preview_environments x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName}/versions/tags/{tagName} method: patch operationId: UpdateRevisionTag_preview_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/versions/tags/{tagName} method: post operationId: CreateRevisionTag_preview_environments_versions_tags x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/versions/{version} method: get operationId: ReadEnvironment_preview_environments_versions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName}/versions/{version}/check method: post operationId: CheckEnvironment_preview_environments_versions x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/versions/{version}/decrypt method: get operationId: DecryptEnvironment_preview_environments_versions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName}/versions/{version}/open method: post operationId: OpenEnvironment_preview_environments_versions x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/versions/{version}/referrers method: get operationId: ListEnvironmentReferrers_preview_environments_versions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/environments/{orgName}/{envName}/versions/{version}/retract method: post operationId: RetractEnvironmentRevision_preview_environments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/environments/{orgName}/{envName}/versions/{version}/tags method: get operationId: ListRevisionTags_preview_environments_versions2 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/esc/environments/{orgName}/{projectName}/{envName}/drafts method: post operationId: CreateEnvironmentDraft_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/esc/environments/{orgName}/{projectName}/{envName}/drafts/{changeRequestID} method: get operationId: ReadEnvironmentDraft_preview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/esc/environments/{orgName}/{projectName}/{envName}/drafts/{changeRequestID} method: patch operationId: UpdateEnvironmentDraft_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/esc/environments/{orgName}/{projectName}/{envName}/drafts/{changeRequestID}/open method: post operationId: OpenEnvironmentDraft_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/accounts method: get operationId: ListAccounts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts method: post operationId: BulkCreateAccounts x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/accounts/{accountName} method: delete operationId: DeleteAccount x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/accounts/{accountName} method: get operationId: ReadAccount x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName} method: head operationId: HeadAccount x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName} method: patch operationId: UpdateAccount x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/accounts/{accountName} method: post operationId: CreateAccount x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/accounts/{accountName}/ownership method: post operationId: ReassignAccountOwnership x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/accounts/{accountName}/policy/packs method: get operationId: ListPolicyPacksForAccount x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName}/resources method: post operationId: UpsertResources x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/accounts/{accountName}/resources/references method: post operationId: ListResourcesWithReferences x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/accounts/{accountName}/resources/{resourceTypeAndId} method: get operationId: ReadResource x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName}/resources/{resourceTypeAndId}/edges method: get operationId: ListResourceVersionEdges x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName}/resources/{resourceTypeAndId}/references method: get operationId: ReadResourceWithReferences x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName}/resources/{resourceTypeAndId}/stack_edges method: get operationId: ListResourceStackEdges x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName}/resources/{resourceTypeAndId}/versions method: get operationId: ListResourceVersions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName}/resources/{resourceTypeAndId}/versions/{resourceVersion} method: get operationId: ReadResource_versions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName}/resources/{resourceTypeAndId}/versions/{resourceVersion}/edges method: get operationId: ListResourceVersionEdges_versions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName}/resources/{resourceTypeAndId}/versions/{resourceVersion}/policy/results method: put operationId: UpdateResourceVersionPolicyResults x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/accounts/{accountName}/scan method: get operationId: ReadScanStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName}/scan method: post operationId: ScanAccount x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/accounts/{accountName}/scan/cancel method: post operationId: CancelScan x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/accounts/{accountName}/scan/pause method: post operationId: PauseScheduledScans x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/accounts/{accountName}/scan/resume method: post operationId: ResumeScheduledScans x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/accounts/{accountName}/scan/settings method: get operationId: ReadScheduledScanSettings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName}/scan/settings method: put operationId: UpdateScheduledScanSettings x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/accounts/{accountName}/scans method: get operationId: ListScanStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName}/scans/{scanId} method: get operationId: GetScan x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName}/scans/{scanId}/logs method: get operationId: GetScanLogs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName}/tags method: get operationId: GetInsightAccountTags x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName}/tags method: put operationId: SetInsightAccountTags x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/accounts/{accountName}/teams method: get operationId: ListInsightsAccountTeams x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/accounts/{accountName}/teams/{teamName} method: patch operationId: UpdateTeamInsightsAccountPermissions x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/discovered-stacks/{projectName} method: get operationId: GetDiscoveredProject x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/discovered-stacks/{projectName}/{stackName} method: get operationId: GetDiscoveredStack x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/discovered-stacks/{projectName}/{stackName}/migration method: delete operationId: DeleteResourceMigrationAnnotation x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/discovered-stacks/{projectName}/{stackName}/migration method: put operationId: UpsertResourceMigrationAnnotation x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/discovered-stacks/{projectName}/{stackName}/resources method: get operationId: ListDiscoveredStackResources x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/import/code/generate method: post operationId: GenerateImportCode x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/insightstrial/accept method: put operationId: AcceptInsightsBilling x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/insights/{orgName}/insightstrial/deny method: put operationId: TerminateInsightsTrial x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /api/preview/insights/{orgName}/insightstrial/summary method: get operationId: GetInsightsTrialSummary x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/insights/{orgName}/policy/stacks/{projectName}/{stackName}/updates/{version}/results method: put operationId: UpdateStackPolicyResults x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/registry/packages method: get operationId: ListPackages_preview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/registry/packages/{source}/{publisher}/{name}/versions method: post operationId: PostPublishPackageVersion_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/registry/packages/{source}/{publisher}/{name}/versions/{version} method: delete operationId: DeletePublishPackageVersion_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/registry/packages/{source}/{publisher}/{name}/versions/{version} method: get operationId: GetPackageVersion_preview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/registry/packages/{source}/{publisher}/{name}/versions/{version}/complete method: post operationId: PostPublishPackageVersionComplete_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/registry/policypacks method: get operationId: ListPolicyPacks_preview_registry x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/registry/policypacks method: post operationId: ListPolicyPacks_preview_registry_post x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/registry/policypacks/{source}/{publisher}/{name} method: delete operationId: DeletePolicyPack_preview_registry_policypacks x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/registry/policypacks/{source}/{publisher}/{name}/versions method: get operationId: ListPolicyPackVersions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/registry/policypacks/{source}/{publisher}/{name}/versions method: post operationId: PostPublishPolicyPackVersion x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/registry/policypacks/{source}/{publisher}/{name}/versions/{version} method: delete operationId: DeletePolicyPack_preview_registry_policypacks_versions x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/registry/policypacks/{source}/{publisher}/{name}/versions/{version} method: get operationId: GetPolicyPackVersion x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/registry/policypacks/{source}/{publisher}/{name}/versions/{version}/complete method: post operationId: PostPublishPolicyPackVersionComplete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/registry/templates method: get operationId: ListTemplates_preview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/registry/templates/{source}/{publisher}/{name}/versions method: post operationId: PostPublishTemplateVersion_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/registry/templates/{source}/{publisher}/{name}/versions/{version} method: delete operationId: DeleteTemplateVersion_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/preview/registry/templates/{source}/{publisher}/{name}/versions/{version} method: get operationId: GetTemplateVersion_preview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/preview/registry/templates/{source}/{publisher}/{name}/versions/{version}/complete method: post operationId: PostPublishTemplateVersionComplete_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/projects/{orgName}/{projectName}/batch-decrypt method: post operationId: BatchDecryptProjectValue x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/projects/{orgName}/{projectName}/decrypt method: post operationId: DecryptProjectValue x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/projects/{orgName}/{projectName}/encrypt method: post operationId: EncryptProjectValue x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/registry/packages method: get operationId: ListPackages x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/registry/packages/{source}/{publisher}/{name}/versions method: post operationId: PostPublishPackageVersion x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/registry/packages/{source}/{publisher}/{name}/versions/{version} method: delete operationId: DeletePublishPackageVersion x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/registry/packages/{source}/{publisher}/{name}/versions/{version} method: get operationId: GetPackageVersion x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/registry/packages/{source}/{publisher}/{name}/versions/{version}/complete method: post operationId: PostPublishPackageVersionComplete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/registry/packages/{source}/{publisher}/{name}/versions/{version}/docs/{token} method: get operationId: GetPackageDocs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/registry/packages/{source}/{publisher}/{name}/versions/{version}/installation method: get operationId: GetPackageInstallation x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/registry/packages/{source}/{publisher}/{name}/versions/{version}/nav method: get operationId: GetPackageNav x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/registry/packages/{source}/{publisher}/{name}/versions/{version}/readme method: get operationId: GetPackageReadme x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/registry/templates method: get operationId: ListTemplates x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/registry/templates/{source}/{publisher}/{name}/versions method: get operationId: ListTemplateVersions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/registry/templates/{source}/{publisher}/{name}/versions method: post operationId: PostPublishTemplateVersion x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/registry/templates/{source}/{publisher}/{name}/versions/{version} method: delete operationId: DeleteTemplateVersion x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/registry/templates/{source}/{publisher}/{name}/versions/{version} method: get operationId: GetTemplateVersion x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/registry/templates/{source}/{publisher}/{name}/versions/{version}/complete method: post operationId: PostPublishTemplateVersionComplete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName} method: head operationId: ProjectExists x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName} method: post operationId: CreateStack x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName} method: delete operationId: DeleteStack x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName} method: get operationId: GetStack x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/activity method: get operationId: GetStackActivity x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/annotations/{kind} method: get operationId: GetStacksAnnotation x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/annotations/{kind} method: patch operationId: UpsertStacksAnnotations x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/batch-decrypt method: post operationId: BatchDecryptValue x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/batch-encrypt method: post operationId: BatchEncryptValue x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/collaborators method: get operationId: ListStackPermissions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/collaborators/{userName} method: delete operationId: DeleteStackPermission x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/config method: delete operationId: DeleteStackConfig x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/config method: get operationId: GetStackConfig x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/config method: put operationId: UpdateStackConfig x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/decrypt method: post operationId: DecryptValue x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/decrypt/log-batch-decryption method: post operationId: LogOnlyBatchDecryptValue x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/decrypt/log-decryption method: post operationId: LogOnlyDecryptValue x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments method: get operationId: ListStackDeploymentsHandlerV2 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments method: post operationId: CreateAPIDeploymentHandlerV2 x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/cache method: delete operationId: ClearProjectCache x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/cache/url method: post operationId: GetPresignedCacheURL x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/drift/schedules method: post operationId: CreateScheduledDriftDeployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/drift/schedules/{scheduleID} method: post operationId: UpdateScheduledDriftDeployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/metadata method: get operationId: StackDeploymentsMetadata x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/pause method: post operationId: PauseStackDeployments x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/resume method: post operationId: ResumeStackDeployments x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/schedules method: get operationId: ListScheduledDeployment x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/schedules method: post operationId: CreateScheduledDeployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/schedules/{scheduleID} method: delete operationId: DeleteScheduledDeployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/schedules/{scheduleID} method: get operationId: ReadScheduledDeployment x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/schedules/{scheduleID} method: post operationId: UpdateScheduledDeployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/schedules/{scheduleID}/history method: get operationId: ListScheduledDeploymentHistory x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/schedules/{scheduleID}/pause method: post operationId: PauseScheduledDeployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/schedules/{scheduleID}/resume method: post operationId: ResumeScheduledDeployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/settings method: delete operationId: DeleteDeploymentSettings x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/settings method: get operationId: GetDeploymentSettings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/settings method: post operationId: PatchDeploymentSettings x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/settings method: put operationId: ReplaceDeploymentSettings x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/settings/encrypt method: post operationId: EncryptDeploymentSettingsSecret x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/ttl/schedules method: post operationId: CreateScheduledTTLDeployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/ttl/schedules/{scheduleID} method: post operationId: UpdateScheduledTTLDeployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/version/{version} method: get operationId: GetDeployment_version x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/{deploymentId} method: get operationId: GetDeployment x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/{deploymentId}/cancel method: post operationId: CancelDeployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/{deploymentId}/logs method: get operationId: GetDeploymentLogs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/deployments/{deploymentId}/updates method: get operationId: GetDeploymentUpdates x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/destroy method: post operationId: CreateUpdateForDestroy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/destroy/{updateID} method: get operationId: GetUpdateStatusForDestroy x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/destroy/{updateID} method: post operationId: StartUpdateForDestroy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/destroy/{updateID}/cancel method: post operationId: CancelUpdate_destroy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/destroy/{updateID}/checkpoint method: patch operationId: PatchUpdateCheckpoint_destroy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/destroy/{updateID}/checkpointdelta method: patch operationId: PatchUpdateCheckpointDelta_destroy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/destroy/{updateID}/checkpointverbatim method: patch operationId: PatchUpdateVerbatimCheckpoint_destroy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/destroy/{updateID}/complete method: post operationId: CompleteUpdate_destroy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/destroy/{updateID}/events method: get operationId: GetEngineEvents_destroy x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/destroy/{updateID}/events method: post operationId: RecordEngineEvent_destroy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/destroy/{updateID}/events/batch method: post operationId: RecordEngineEventBatch_destroy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/destroy/{updateID}/journalentries method: patch operationId: CreateJournalEntries_destroy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/destroy/{updateID}/log method: post operationId: AppendUpdateLogEntry_destroy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/destroy/{updateID}/renew_lease method: post operationId: RenewUpdateLease_destroy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/downstreamreferences method: get operationId: ListDownstreamStackReferences x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/drift/runs method: get operationId: ListDriftRuns x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/drift/status method: get operationId: GetStackDriftStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/encrypt method: post operationId: EncryptValue x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/export method: get operationId: ExportStack x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/export/{version} method: get operationId: ExportStackAtVersion x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/hooks method: get operationId: ListStackWebhooks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/hooks method: post operationId: CreateStackWebhook x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/hooks/{hookName} method: delete operationId: DeleteStackWebhook x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/hooks/{hookName} method: get operationId: GetStackWebhook x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/hooks/{hookName} method: patch operationId: UpdateStackWebhook x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/hooks/{hookName}/deliveries method: get operationId: GetStackWebhookDeliveries x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/hooks/{hookName}/deliveries/{event}/redeliver method: post operationId: RedeliverStackWebhookEvent x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/hooks/{hookName}/ping method: post operationId: PingStackWebhook x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/import method: post operationId: ImportStack x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/metadata method: get operationId: GetStackMetadata x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/notifications/settings method: patch operationId: UpdateStackNotificationSettings x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/ownership method: post operationId: ReassignStackOwnership x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/policygroups method: get operationId: GetStackPolicyGroups x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/policypacks method: get operationId: GetStackPolicyPacks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/preview method: post operationId: CreateUpdateForPreview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/preview/{updateID} method: get operationId: GetUpdateStatusForPreview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/preview/{updateID} method: post operationId: StartUpdateForPreview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/preview/{updateID}/cancel method: post operationId: CancelUpdate_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/preview/{updateID}/complete method: post operationId: CompleteUpdate_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/preview/{updateID}/events method: get operationId: GetEngineEvents_preview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/preview/{updateID}/events method: post operationId: RecordEngineEvent_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/preview/{updateID}/events/batch method: post operationId: RecordEngineEventBatch_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/preview/{updateID}/journalentries method: patch operationId: CreateJournalEntries_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/preview/{updateID}/log method: post operationId: AppendUpdateLogEntry_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/preview/{updateID}/renew_lease method: post operationId: RenewUpdateLease_preview x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/previews/{updateID} method: get operationId: GetStackPreview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/previews/{updateID}/summary method: get operationId: GetStackPreviewSummary x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/refresh method: post operationId: CreateUpdateForRefresh x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/refresh/{updateID} method: get operationId: GetUpdateStatusForRefresh x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/refresh/{updateID} method: post operationId: StartUpdateForRefresh x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/refresh/{updateID}/cancel method: post operationId: CancelUpdate_refresh x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/refresh/{updateID}/checkpoint method: patch operationId: PatchUpdateCheckpoint_refresh x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/refresh/{updateID}/checkpointdelta method: patch operationId: PatchUpdateCheckpointDelta_refresh x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/refresh/{updateID}/checkpointverbatim method: patch operationId: PatchUpdateVerbatimCheckpoint_refresh x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/refresh/{updateID}/complete method: post operationId: CompleteUpdate_refresh x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/refresh/{updateID}/events method: get operationId: GetEngineEvents_refresh x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/refresh/{updateID}/events method: post operationId: RecordEngineEvent_refresh x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/refresh/{updateID}/events/batch method: post operationId: RecordEngineEventBatch_refresh x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/refresh/{updateID}/journalentries method: patch operationId: CreateJournalEntries_refresh x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/refresh/{updateID}/log method: post operationId: AppendUpdateLogEntry_refresh x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/refresh/{updateID}/renew_lease method: post operationId: RenewUpdateLease_refresh x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/rename method: post operationId: RenameStack x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/resources/count method: get operationId: GetStackResourceCount x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/resources/latest method: get operationId: GetLatestStackResources x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/resources/latest/{urn} method: get operationId: GetLatestStackResource x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/resources/{version} method: get operationId: GetStackResources x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/resources/{version}/{urn} method: get operationId: GetStackResource x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/tags method: patch operationId: UpdateStackTags x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/tags method: post operationId: AddStackTag x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/tags/{tagName} method: delete operationId: DeleteStackTag x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/tags/{tagName} method: patch operationId: UpdateStackTag x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/teams method: get operationId: ListStackTeams x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/transfer method: post operationId: TransferStack x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/update method: post operationId: CreateUpdateForUpdate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/update/{updateID} method: get operationId: GetUpdateStatusForUpdate x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/update/{updateID} method: post operationId: StartUpdateForUpdate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/update/{updateID}/cancel method: post operationId: CancelUpdate_update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/update/{updateID}/checkpoint method: patch operationId: PatchUpdateCheckpoint_update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/update/{updateID}/checkpointdelta method: patch operationId: PatchUpdateCheckpointDelta_update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/update/{updateID}/checkpointverbatim method: patch operationId: PatchUpdateVerbatimCheckpoint_update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/update/{updateID}/complete method: post operationId: CompleteUpdate_update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/update/{updateID}/events method: get operationId: GetEngineEvents_update x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/update/{updateID}/events method: post operationId: RecordEngineEvent_update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/update/{updateID}/events/batch method: post operationId: RecordEngineEventBatch_update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/update/{updateID}/journalentries method: patch operationId: CreateJournalEntries_update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/update/{updateID}/log method: post operationId: AppendUpdateLogEntry_update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/update/{updateID}/renew_lease method: post operationId: RenewUpdateLease_update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/stacks/{orgName}/{projectName}/{stackName}/updates method: get operationId: GetStackUpdates x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/updates/latest method: get operationId: GetLatestStackUpdate x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/updates/latest/previews method: get operationId: GetLatestStackPreviews x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/updates/latest/timeline method: get operationId: GetLatestUpdateTimeline x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/updates/{version} method: get operationId: GetStackUpdate x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/updates/{version}/previews method: get operationId: GetStackPreviews x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/updates/{version}/summary method: get operationId: GetStackUpdateSummary x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/updates/{version}/timeline method: get operationId: GetUpdateTimeline x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/upstreamreferences method: get operationId: ListUpstreamStackReferences x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/stacks/{orgName}/{projectName}/{stackName}/workflow method: post operationId: GetStackStarterWorkflow x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/user method: get operationId: GetCurrentUser x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/user/github/{ghOrgName}/teams method: get operationId: ListGitHubOrganizationTeams x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/user/gitlab-app/organizations method: get operationId: GetGroupsForGitLabApp x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/user/organizations/default method: get operationId: GetDefaultOrganization x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/user/organizations/{orgName}/default method: post operationId: UpdateDefaultOrganization x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/user/pending-emails method: delete operationId: DeletePendingEmailChange x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/user/pending-emails method: get operationId: GetLatestPendingEmailChange x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/user/pending-invites method: get operationId: ListUserOrgInvites x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/user/stacks method: get operationId: ListUserStacks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/user/tokens method: get operationId: ListPersonalTokens x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/user/tokens method: post operationId: CreatePersonalToken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/user/tokens/{tokenId} method: delete operationId: DeletePersonalToken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/user/vcs method: delete operationId: DeleteIdentityProvider x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/user/vcs/organizations method: get operationId: ListIdentityProviderOrganizations x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /api/user/vcs/sync method: post operationId: SyncWithIdentityProvider x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api/user/verified-email method: get operationId: GetUserHasVerifiedEmail x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none