generated: '2026-07-15' method: generated source: openapi/qovery-openapi.yaml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 508 by_action_class: connected: 237 acting: 271 by_consequence: read: 237 write: 201 physical: 47 safety-critical: 23 human_in_the_loop_required: 23 operations: - path: /organization method: get operationId: listOrganization x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization method: post operationId: createOrganization x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId} method: get operationId: getOrganization x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId} method: put operationId: editOrganization x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId} method: delete operationId: deleteOrganization x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/apiToken method: get operationId: listOrganizationApiTokens x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/apiToken method: post operationId: createOrganizationApiToken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/apiToken/{apiTokenId} method: delete operationId: deleteOrganizationApiToken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/availableRole method: get operationId: listOrganizationAvailableRoles x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/gitToken method: get operationId: listOrganizationGitTokens x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/gitToken method: post operationId: createGitToken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/gitToken/{gitTokenId} method: get operationId: getOrganizationGitToken x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/gitToken/{gitTokenId} method: put operationId: editGitToken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/gitToken/{gitTokenId} method: delete operationId: deleteGitToken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/gitToken/{gitTokenId}/associatedServices method: get operationId: getGitTokenAssociatedServices x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/listDirectoriesFromGitRepository method: post operationId: listDirectoriesFromGitRepository x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/member method: get operationId: getOrganizationMembers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/member method: put operationId: editOrganizationMemberRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/member method: delete operationId: deleteMember x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/inviteMember method: get operationId: getOrganizationInvitedMembers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/inviteMember method: post operationId: postInviteMember x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/inviteMember/{inviteId} method: get operationId: getMemberInvitation x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/inviteMember/{inviteId} method: post operationId: postAcceptInviteMember x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/inviteMember/{inviteId} method: delete operationId: deleteInviteMember x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/transferOwnership method: post operationId: postOrganizationTransferOwnership x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/currentCost method: get operationId: getOrganizationCurrentCost x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/creditCode method: post operationId: addCreditCode x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/changePlan method: post operationId: changePlan x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/cluster/{clusterId}/currentCost method: get operationId: getClusterCurrentCost x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/billingInfo method: get operationId: getOrganizationBillingInfo x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/billingInfo method: put operationId: editOrganizationBillingInfo x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/billingStatus method: get operationId: getOrganizationBillingStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/billingUsageReport method: post operationId: generateBillingUsageReport x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/billingExternalId method: get operationId: getOrganizationBillingExternalId x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/invoice method: get operationId: listOrganizationInvoice x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/invoice/{invoiceId} method: get operationId: getOrganizationInvoice x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/invoice/{invoiceId}/download method: get operationId: getOrganizationInvoicePDF x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/downloadInvoices method: post operationId: organizationDownloadAllInvoices x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/creditCard method: get operationId: listOrganizationCreditCards x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/creditCard method: post operationId: addCreditCard x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/creditCard/{creditCardId} method: delete operationId: deleteCreditCard x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/project method: get operationId: listProject x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/project method: post operationId: createProject x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/project/stats method: get operationId: getOrganizationProjectStats x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/cluster method: get operationId: listOrganizationCluster x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/cluster method: post operationId: createCluster x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/cluster/status method: get operationId: getOrganizationClusterStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/cluster/{clusterId} method: delete operationId: deleteCluster x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/cluster/{clusterId} method: put operationId: editCluster x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/cluster/{clusterId}/status method: get operationId: getClusterStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/cluster/{clusterId}/installationHelmValues method: get operationId: getInstallationHelmValues x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/cluster/{clusterId}/kubeconfig method: get operationId: getClusterKubeconfig x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/cluster/{clusterId}/kubeconfig method: put operationId: editClusterKubeconfig x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/cluster/{clusterId}/advancedSettings method: get operationId: getClusterAdvancedSettings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/cluster/{clusterId}/advancedSettings method: put operationId: editClusterAdvancedSettings x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/cluster/{clusterId}/routingTable method: get operationId: getRoutingTable x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/cluster/{clusterId}/routingTable method: put operationId: editRoutingTable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/cluster/{clusterId}/logs method: get operationId: listClusterLogs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/aws/credentials method: get operationId: listAWSCredentials x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/aws/credentials method: post operationId: createAWSCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/aws/credentials/{credentialsId} method: get operationId: getAWSCredentials x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/aws/credentials/{credentialsId} method: put operationId: editAWSCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/aws/credentials/{credentialsId} method: delete operationId: deleteAWSCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/onPremise/credentials method: get operationId: listOnPremiseCredentials x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/onPremise/credentials method: post operationId: createOnPremiseCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/onPremise/credentials/{credentialsId} method: get operationId: getOnPremiseCredentials x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/onPremise/credentials/{credentialsId} method: put operationId: editOnPremiseCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/onPremise/credentials/{credentialsId} method: delete operationId: deleteOnPremiseCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/scaleway/credentials method: get operationId: listScalewayCredentials x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/scaleway/credentials method: post operationId: createScalewayCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/scaleway/credentials/{credentialsId} method: get operationId: getScalewayCredentials x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/scaleway/credentials/{credentialsId} method: put operationId: editScalewayCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/scaleway/credentials/{credentialsId} method: delete operationId: deleteScalewayCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/gcp/credentials method: get operationId: listGcpCredentials x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/gcp/credentials method: post operationId: createGcpCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/gcp/credentials/{credentialsId} method: get operationId: getGcpCredentials x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/gcp/credentials/{credentialsId} method: put operationId: editGcpCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/gcp/credentials/{credentialsId} method: delete operationId: deleteGcpCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/github/connect method: post operationId: organizationGithubAppConnect x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/github/disconnect method: delete operationId: organizationGithubAppDisconnect x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/account/gitAuthProvider method: get operationId: getOrganizationGitProviderAccount x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/account/github/repository method: get operationId: getOrganizationGithubRepositories x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/account/github/repository/branch method: get operationId: getOrganizationGithubRepositoryBranches x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/account/gitlab/repository method: get operationId: getOrganizationGitlabRepositories x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/account/gitlab/repository/branch method: get operationId: getOrganizationGitlabRepositoryBranches x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/account/bitbucket/repository method: get operationId: getOrganizationBitbucketRepositories x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/account/bitbucket/repository/branch method: get operationId: getOrganizationBitbucketRepositoryBranches x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/webhook method: get operationId: listOrganizationWebHooks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/webhook method: post operationId: createOrganizationWebhook x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/webhook/{webhookId}/event method: get operationId: listWebhookEvent x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/webhook/{webhookId} method: get operationId: getOrganizationWebhook x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/webhook/{webhookId} method: put operationId: editOrganizationWebhook x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/webhook/{webhookId} method: delete operationId: deleteOrganizationWebhook x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/customRole method: get operationId: listOrganizationCustomRoles x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/customRole method: post operationId: createOrganizationCustomRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/customRole/{customRoleId} method: get operationId: getOrganizationCustomRole x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/customRole/{customRoleId} method: put operationId: editOrganizationCustomRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/customRole/{customRoleId} method: delete operationId: deleteOrganizationCustomRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/events method: get operationId: getOrganizationEvents x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/targets method: get operationId: getOrganizationEventTargets x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/annotationsGroups method: get operationId: listOrganizationAnnotationsGroup x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/annotationsGroups method: post operationId: createOrganizationAnnotationsGroup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/annotationsGroups/{annotationsGroupId} method: get operationId: getOrganizationAnnotationsGroup x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/annotationsGroups/{annotationsGroupId} method: put operationId: editOrganizationAnnotationsGroup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/annotationsGroups/{annotationsGroupId} method: delete operationId: deleteOrganizationAnnotationsGroup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/annotationsGroups/{annotationsGroupId}/associatedItems method: get operationId: getOrganizationAnnotationsGroupAssociatedItems x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/labelsGroups method: get operationId: listOrganizationLabelsGroup x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/labelsGroups method: post operationId: createOrganizationLabelsGroup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/labelsGroups/{labelsGroupId} method: get operationId: getOrganizationLabelssGroup x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/labelsGroups/{labelsGroupId} method: put operationId: editOrganizationLabelsGroup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/labelsGroups/{labelsGroupId} method: delete operationId: deleteOrganizationLabelsGroup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/labelsGroups/{labelsGroupId}/associatedItems method: get operationId: getOrganizationLabelsGroupAssociatedItems x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /cloudProvider method: get operationId: listCloudProvider x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /aws/region method: get operationId: listAWSRegions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /aws/clusterFeature method: get operationId: listAWSFeatures x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /aws/instanceType method: get operationId: listAWSInstanceType x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /aws/managedDatabase/type method: get operationId: listAWSManagedDatabaseType x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /aws/managedDatabase/instanceType/{region}/{databaseType} method: get operationId: listAWSManagedDatabaseInstanceType x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /azure/aks/instanceType/{region} method: get operationId: listAzureAKSInstanceType x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /aws/eks/instanceType/{region} method: get operationId: listAWSEKSInstanceType x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /scaleway/region method: get operationId: listScalewayRegions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /scaleway/clusterFeature method: get operationId: listScalewayFeatures x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /scaleway/instanceType method: get operationId: listScalewayInstanceType x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /scaleway/managedDatabase/type method: get operationId: listSCWManagedDatabaseType x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /scaleway/instanceType/{zone} method: get operationId: listScalewayKapsuleInstanceType x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /gcp/region method: get operationId: listGcpRegions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /gcp/clusterFeature method: get operationId: listGcpFeatures x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /gcp/instanceType/{region} method: get operationId: listGcpGkeInstanceType x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/cluster/{clusterId}/cloudProviderInfo method: get operationId: getOrganizationCloudProviderInfo x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/cluster/{clusterId}/cloudProviderInfo method: post operationId: specifyClusterCloudProviderInfo x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/cluster/{clusterId}/isReady method: get operationId: getClusterReadinessStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/cluster/{clusterId}/deploy method: post operationId: deployCluster x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/cluster/{clusterId}/eks-anywhere/commits method: get operationId: listEksAnywhereCommits x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/cluster/{clusterId}/eks-anywhere/commit method: put operationId: updateEksAnywhereCommit x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/cluster/{clusterId}/eks-anywhere/jwt method: get operationId: getEksAnywhereClusterJwt x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /cluster/{clusterId}/argoCdConfig method: post operationId: saveArgoCdCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /cluster/{clusterId}/argoCdConfig method: get operationId: getArgoCdCredentials x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /cluster/{clusterId}/argoCdConfig method: delete operationId: deleteArgoCdCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /cluster/{clusterId}/argoCdConfig/check method: post operationId: checkArgoCdConnection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/argoCdDestinationClusterMapping method: post operationId: saveArgoCdDestinationClusterMapping x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/argoCdDestinationClusterMapping method: get operationId: listArgoCdDestinationClusterMappings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /cluster/{clusterId}/upgrade method: post operationId: upgradeCluster x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/cluster/{clusterId}/karpenterPrivateSubnetIds method: put operationId: updateKarpenterPrivateFargateSubnetIds x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/cluster/{clusterId}/stop method: post operationId: StopCluster x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /organization/{organizationId}/containerRegistry method: get operationId: listContainerRegistry x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/containerRegistry method: post operationId: createContainerRegistry x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/containerRegistry/{containerRegistryId} method: get operationId: getContainerRegistry x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/containerRegistry/{containerRegistryId} method: delete operationId: deleteContainerRegistry x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/containerRegistry/{containerRegistryId} method: put operationId: editContainerRegistry x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/containerRegistry/{containerRegistryId}/images method: get operationId: getContainerVersions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/containerRegistry/{containerRegistryId}/container/status method: get operationId: getContainerRegistryContainerStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /availableContainerRegistry method: get operationId: listAvailableContainerRegistry x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /availableHelmRepository method: get operationId: listAvailableHelmRepository x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/helmRepository method: get operationId: listHelmRepository x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/helmRepository method: post operationId: createHelmRepository x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/helmRepository/{helmRepositoryId} method: get operationId: getHelmRepository x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/helmRepository/{helmRepositoryId} method: delete operationId: deleteHelmRepository x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/helmRepository/{helmRepositoryId} method: put operationId: editHelmRepository x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/helmRepository/{helmRepositoryId}/charts method: get operationId: getHelmCharts x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /project/{projectId} method: get operationId: getProject x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /project/{projectId} method: put operationId: editProject x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /project/{projectId} method: delete operationId: deleteProject x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /project/{projectId}/deploymentRule method: get operationId: listProjectDeploymentRules x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /project/{projectId}/deploymentRule method: post operationId: createDeploymentRule x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /project/{projectId}/deploymentRule/{deploymentRuleId} method: get operationId: getProjectDeploymentRule x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /project/{projectId}/deploymentRule/{deploymentRuleId} method: put operationId: editProjectDeployemtnRule x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /project/{projectId}/deploymentRule/{deploymentRuleId} method: delete operationId: deleteProjectDeploymentRule x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /project/{projectId}/deploymentRule/order method: put operationId: updateDeploymentRulesPriorityOrder x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /project/{projectId}/environment method: get operationId: listEnvironment x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /project/{projectId}/environment method: post operationId: createEnvironment x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /project/{projectId}/environmentVariable method: post operationId: createProjectEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /project/{projectId}/environmentVariable method: get operationId: listProjectEnvironmentVariable x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /project/{projectId}/environmentVariable/{environmentVariableId} method: delete operationId: deleteProjectEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /project/{projectId}/environmentVariable/{environmentVariableId} method: put operationId: editProjectEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /project/{projectId}/environmentVariable/{environmentVariableId}/override method: post operationId: createProjectEnvironmentVariableOverride x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /project/{projectId}/environmentVariable/{environmentVariableId}/alias method: post operationId: createProjectEnvironmentVariableAlias x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /project/{projectId}/secret method: get operationId: listProjectSecrets x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /project/{projectId}/secret method: post operationId: createProjectSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /project/{projectId}/secret/{secretId} method: delete operationId: deleteProjectSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /project/{projectId}/secret/{secretId} method: put operationId: editProjectSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /project/{projectId}/secret/{secretId}/override method: post operationId: createProjectSecretOverride x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /project/{projectId}/secret/{secretId}/alias method: post operationId: createProjectSecretAlias x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /project/{projectId}/environment/status method: get operationId: getProjectEnvironmentsStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /project/{projectId}/environment/stats method: get operationId: getProjectEnvironmentServiceNumber x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /project/{projectId}/environment/overview method: get operationId: getProjectEnvironmentsOverview x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId} method: get operationId: getEnvironment x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId} method: put operationId: editEnvironment x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId} method: delete operationId: deleteEnvironment x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/status method: get operationId: getEnvironmentStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/statuses method: get operationId: getEnvironmentStatuses x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/statusesWithStages method: get operationId: getEnvironmentStatusesWithStages x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/deploymentStage method: get operationId: ListEnvironmentDeploymentStage x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/deploymentStage method: post operationId: CreateEnvironmentDeploymentStage x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /deploymentStage/{deploymentStageId} method: get operationId: getDeploymentStage x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /deploymentStage/{deploymentStageId} method: delete operationId: DeleteDeploymentStage x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /deploymentStage/{deploymentStageId} method: put operationId: EditDeploymentStage x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /deploymentStage/{deploymentStageId}/service/{serviceId} method: put operationId: AttachServiceToDeploymentStage x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /deploymentStage/{deploymentStageId}/moveBefore/{stageId} method: put operationId: MoveBeforeDeploymentStage x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /deploymentStage/{deploymentStageId}/moveAfter/{stageId} method: put operationId: MoveAfterDeploymentStage x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/deploymentRule method: get operationId: getEnvironmentDeploymentRule x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/deploymentRule/{deploymentRuleId} method: put operationId: editEnvironmentDeploymentRule x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/deploy method: post operationId: deployEnvironment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/uninstall method: post operationId: uninstallEnvironment x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/stop method: post operationId: stopEnvironment x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /environment/{environmentId}/redeploy method: post operationId: redeployEnvironment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/cancelDeployment method: post operationId: cancelEnvironmentDeployment x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /deploymentQueue/{deploymentRequestId}/cancelDeployment method: post operationId: cancelDeploymentRequest x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/clone method: post operationId: cloneEnvironment x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/application method: get operationId: listApplication x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/application method: post operationId: createApplication x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/application/status method: get operationId: getEnvironmentApplicationStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/container method: get operationId: listContainer x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/container method: post operationId: createContainer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/container/status method: get operationId: getEnvironmentContainerStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/service/deploy method: post operationId: deployAllServices x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/service/restart-service method: post operationId: rebootServices x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /environment/{environmentId}/service/stop method: post operationId: stopSelectedServices x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /environment/{environmentId}/service/delete method: post operationId: deleteSelectedServices x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/service/uninstall method: post operationId: uninstallSelectedServices x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/container/deploy method: post operationId: autoDeployContainerEnvironments x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/container/preview method: post operationId: previewContainerEnvironments x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/job/deploy method: post operationId: autoDeployJobEnvironments x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/log method: get operationId: listEnvironmentLog x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/logs method: get operationId: listEnvironmentLogs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/deploymentHistory method: get operationId: listEnvironmentDeploymentHistory x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/deploymentHistoryV2 method: get operationId: listEnvironmentDeploymentHistoryV2 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/deploymentBuildUsageReport method: post operationId: generateDeploymentBuildUsageReport x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/environmentVariable method: get operationId: listEnvironmentEnvironmentVariable x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/environmentVariable method: post operationId: createEnvironmentEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/environmentVariable/{environmentVariableId} method: delete operationId: deleteEnvironmentEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/environmentVariable/{environmentVariableId} method: put operationId: editEnvironmentEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/environmentVariable/{environmentVariableId}/override method: post operationId: createEnvironmentEnvironmentVariableOverride x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /environment/{environmentId}/environmentVariable/{environmentVariableId}/alias method: post operationId: createEnvironmentEnvironmentVariableAlias x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/secret method: get operationId: listEnvironmentSecrets x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/secret method: post operationId: createEnvironmentSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/secret/{secretId} method: delete operationId: deleteEnvironmentSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/secret/{secretId} method: put operationId: editEnvironmentSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/secret/{secretId}/override method: post operationId: createEnvironmentSecretOverride x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /environment/{environmentId}/secret/{secretId}/alias method: post operationId: createEnvironmentSecretAlias x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/databaseConfiguration method: get operationId: listEnvironmentDatabaseConfig x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/terraformExport method: get operationId: exportEnvironmentConfigurationIntoTerraform x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /defaultApplicationAdvancedSettings method: get operationId: getDefaultApplicationAdvancedSettings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /defaultClusterAdvancedSettings method: get operationId: getDefaultClusterAdvancedSettings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /defaultContainerAdvancedSettings method: get operationId: getDefaultContainerAdvancedSettings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /defaultJobAdvancedSettings method: get operationId: getDefaultJobAdvancedSettings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /defaultHelmAdvancedSettings method: get operationId: getDefaultHelmAdvancedSettings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId} method: get operationId: getApplication x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId} method: put operationId: editApplication x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId} method: delete operationId: deleteApplication x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/status method: get operationId: getApplicationStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId}/deploymentRestriction method: get operationId: getApplicationDeploymentRestrictions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId}/deploymentRestriction method: post operationId: createApplicationDeploymentRestriction x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/deploymentRestriction/{deploymentRestrictionId} method: put operationId: editApplicationDeploymentRestriction x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/deploymentRestriction/{deploymentRestrictionId} method: delete operationId: deleteApplicationDeploymentRestriction x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/contributor method: get operationId: listApplicationContributor x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId}/commit method: get operationId: listApplicationCommit x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId}/deploy method: post operationId: deployApplication x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/uninstall method: post operationId: uninstallApplication x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/stop method: post operationId: stopApplication x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /application/{applicationId}/redeploy method: post operationId: redeployApplication x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/restart-service method: post operationId: rebootApplication x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /application/{applicationId}/deploymentHistory method: get operationId: listApplicationDeploymentHistory x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId}/deploymentHistoryV2 method: get operationId: listApplicationDeploymentHistoryV2 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId}/environmentVariable method: get operationId: listApplicationEnvironmentVariable x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId}/environmentVariable method: post operationId: createApplicationEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/environmentVariable/import method: post operationId: importEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/environmentVariable/{environmentVariableId} method: delete operationId: deleteApplicationEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/environmentVariable/{environmentVariableId} method: put operationId: editApplicationEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/environmentVariable/{environmentVariableId}/override method: post operationId: createApplicationEnvironmentVariableOverride x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /application/{applicationId}/environmentVariable/{environmentVariableId}/alias method: post operationId: createApplicationEnvironmentVariableAlias x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/secret method: get operationId: listApplicationSecrets x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId}/secret method: post operationId: createApplicationSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/secret/{secretId} method: delete operationId: deleteApplicationSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/secret/{secretId} method: put operationId: editApplicationSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/secret/{secretId}/override method: post operationId: createApplicationSecretOverride x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /application/{applicationId}/secret/{secretId}/alias method: post operationId: createApplicationSecretAlias x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/customDomain method: get operationId: listApplicationCustomDomain x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId}/customDomain method: post operationId: createApplicationCustomDomain x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/customDomain/{customDomainId} method: put operationId: editCustomDomain x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/customDomain/{customDomainId} method: delete operationId: deleteCustomDomain x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/customDomain/{customDomainId}/status method: get operationId: getCustomDomainStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId}/checkCustomDomain method: get operationId: checkApplicationCustomDomain x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId}/log method: get operationId: listApplicationLog x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId}/network method: get operationId: getApplicationNetwork x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId}/network method: put operationId: editApplicationNetwork x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/link method: get operationId: listApplicationLinks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId}/advancedSettings method: get operationId: getAdvancedSettings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /application/{applicationId}/advancedSettings method: put operationId: editAdvancedSettings x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /application/{applicationId}/clone method: post operationId: cloneApplication x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId} method: get operationId: getContainer x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /container/{containerId} method: put operationId: editContainer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId} method: delete operationId: deleteContainer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/status method: get operationId: getContainerStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /container/{containerId}/deploymentHistory method: get operationId: listContainerDeploymentHistory x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /container/{containerId}/deploymentHistoryV2 method: get operationId: listContainerDeploymentHistoryV2 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /container/{containerId}/advancedSettings method: get operationId: getContainerAdvancedSettings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /container/{containerId}/advancedSettings method: put operationId: editContainerAdvancedSettings x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/deploy method: post operationId: deployContainer x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/uninstall method: post operationId: uninstallContainer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/stop method: post operationId: stopContainer x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /container/{containerId}/redeploy method: post operationId: redeployContainer x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/restart-service method: post operationId: rebootContainer x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /container/{containerId}/environmentVariable method: get operationId: listContainerEnvironmentVariable x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /container/{containerId}/environmentVariable method: post operationId: createContainerEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/environmentVariable/import method: post operationId: importContainerEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/environmentVariable/{environmentVariableId} method: delete operationId: deleteContainerEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/environmentVariable/{environmentVariableId} method: put operationId: editContainerEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/environmentVariable/{environmentVariableId}/override method: post operationId: createContainerEnvironmentVariableOverride x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /container/{containerId}/environmentVariable/{environmentVariableId}/alias method: post operationId: createContainerEnvironmentVariableAlias x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/secret method: get operationId: listContainerSecrets x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /container/{containerId}/secret method: post operationId: createContainerSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/secret/{secretId} method: delete operationId: deleteContainerSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/secret/{secretId} method: put operationId: editContainerSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/secret/{secretId}/override method: post operationId: createContainerSecretOverride x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /container/{containerId}/secret/{secretId}/alias method: post operationId: createContainerSecretAlias x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/customDomain method: get operationId: listContainerCustomDomain x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /container/{containerId}/customDomain method: post operationId: createContainerCustomDomain x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/customDomain/{customDomainId} method: put operationId: editContainerCustomDomain x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/customDomain/{customDomainId} method: delete operationId: deleteContainerCustomDomain x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/customDomain/{customDomainId}/status method: get operationId: getContainerCustomDomainStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /container/{containerId}/checkCustomDomain method: get operationId: checkContainerCustomDomain x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /container/{containerId}/log method: get operationId: listContainerLog x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /container/{containerId}/network method: get operationId: getContainerNetwork x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /container/{containerId}/network method: put operationId: editContainerNetwork x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /container/{containerId}/link method: get operationId: listContainerLinks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /container/{containerId}/clone method: post operationId: cloneContainer x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/database method: get operationId: listDatabase x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/database method: post operationId: createDatabase x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/database/status method: get operationId: getEnvironmentDatabaseStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /database/{databaseId} method: get operationId: getDatabase x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /database/{databaseId} method: put operationId: editDatabase x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /database/{databaseId} method: delete operationId: deleteDatabase x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /database/{databaseId}/status method: get operationId: getDatabaseStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /database/{databaseId}/version method: get operationId: listDatabaseVersion x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /database/{databaseId}/masterCredentials method: get operationId: getDatabaseMasterCredentials x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /database/{databaseId}/masterCredentials method: put operationId: editDatabaseCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /database/{databaseId}/application method: get operationId: listDatabaseApplication x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /database/{databaseId}/application/{targetApplicationId} method: delete operationId: removeApplicationFromDatabase x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /database/{databaseId}/redeploy method: post operationId: redeployDatabase x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /database/{databaseId}/restart-service method: post operationId: rebootDatabase x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /database/{databaseId}/stop method: post operationId: stopDatabase x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /database/{databaseId}/deploy method: post operationId: deployDatabase x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /database/{databaseId}/uninstall method: post operationId: uninstallDatabase x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /database/{databaseId}/deploymentHistory method: get operationId: listDatabaseDeploymentHistory x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /database/{databaseId}/deploymentHistoryV2 method: get operationId: listDatabaseDeploymentHistoryV2 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /database/{databaseId}/backup method: get operationId: listDatabaseBackup x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /database/{databaseId}/backup method: post operationId: addBackupDatabase x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /database/{databaseId}/backup/{backupId} method: delete operationId: removeDatabaseBackup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /database/{databaseId}/clone method: post operationId: cloneDatabase x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /account method: get operationId: getAccountInformation x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /account method: put operationId: editAccountInformation x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /account/gitAuthProvider method: get operationId: getGitProviderAccount x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /account/github/repository method: get operationId: getGithubRepositories x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /account/github/repository/branch method: get operationId: getGithubRepositoryBranches x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /account/gitlab/repository method: get operationId: getGitlabRepositories x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /account/gitlab/repository/branch method: get operationId: getGitlabRepositoryBranches x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /account/bitbucket/repository method: get operationId: getBitbucketRepositories x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /account/bitbucket/repository/branch method: get operationId: getBitbucketRepositoryBranches x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /account/referral method: get operationId: getAccountReferral x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /account/rewardClaim method: post operationId: postAccountRewardClaim x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /admin/userSignUp method: get operationId: getUserSignUp x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /admin/userSignUp method: post operationId: createUserSignUp x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/helm method: get operationId: listHelms x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/helm method: post operationId: createHelm x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/helmDefaultValues method: post operationId: createHelmDefaultValues x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/helm/status method: get operationId: getEnvironmentHelmStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /helm/{helmId} method: get operationId: getHelm x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /helm/{helmId} method: put operationId: editHelm x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /helm/{helmId} method: delete operationId: deleteHelm x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /helm/{helmId}/commit method: get operationId: listHelmCommit x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /helm/{helmId}/advancedSettings method: get operationId: getHelmAdvancedSettings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /helm/{helmId}/advancedSettings method: put operationId: editHelmAdvancedSettings x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /helm/{helmId}/deploy method: post operationId: deployHelm x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /helm/{helmId}/uninstall method: post operationId: uninstallHelm x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /helm/{helmId}/redeploy method: post operationId: redeployHelm x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /helm/{helmId}/stop method: post operationId: stopHelm x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /helm/{helmId}/status method: get operationId: getHelmStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /helm/{helmId}/deploymentHistory method: get operationId: listHelmDeploymentHistory x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /helm/{helmId}/deploymentHistoryV2 method: get operationId: listHelmDeploymentHistoryV2 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /helm/{helmId}/deploymentRestriction method: get operationId: getHelmDeploymentRestrictions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /helm/{helmId}/deploymentRestriction method: post operationId: createHelmDeploymentRestriction x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /helm/{helmId}/deploymentRestriction/{deploymentRestrictionId} method: put operationId: editHelmDeploymentRestriction x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /helm/{helmId}/deploymentRestriction/{deploymentRestrictionId} method: delete operationId: deleteHelmDeploymentRestriction x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /helm/{helmId}/clone method: post operationId: cloneHelm x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /helm/{helmId}/link method: get operationId: listHelmLinks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /helm/{helmId}/customDomain method: get operationId: listHelmCustomDomain x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /helm/{helmId}/customDomain method: post operationId: createHelmCustomDomain x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /helm/{helmId}/customDomain/{customDomainId} method: put operationId: editHelmCustomDomain x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /helm/{helmId}/customDomain/{customDomainId} method: delete operationId: deleteHelmCustomDomain x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /helm/{helmId}/customDomain/{customDomainId} method: get operationId: getHelmCustomDomain x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /helm/{helmId}/checkCustomDomain method: get operationId: checkHelmCustomDomain x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/checkDockerfile method: post operationId: checkDockerfile x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/checkHelmRepository method: post operationId: checkHelmRepository x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/checkContainerImage method: post operationId: checkContainerImage x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/checkGitFile method: post operationId: checkGitFile x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/job method: get operationId: listJobs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/job method: post operationId: createJob x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/job/status method: get operationId: getEnvironmentJobStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /job/{jobId} method: get operationId: getJob x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /job/{jobId} method: put operationId: editJob x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId} method: delete operationId: deleteJob x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/advancedSettings method: get operationId: getJobAdvancedSettings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /job/{jobId}/advancedSettings method: put operationId: editJobAdvancedSettings x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/deploy method: post operationId: deployJob x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/uninstall method: post operationId: uninstallJob x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/redeploy method: post operationId: redeployJob x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /terraform/{terraformId}/redeploy method: post operationId: redeployTerraform x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/stop method: post operationId: stopJob x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /job/{jobId}/status method: get operationId: getJobStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /job/{jobId}/deploymentHistory method: get operationId: listJobDeploymentHistory x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /job/{jobId}/deploymentHistoryV2 method: get operationId: listJobDeploymentHistoryV2 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /job/{jobId}/deploymentRestriction method: get operationId: getJobDeploymentRestrictions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /job/{jobId}/deploymentRestriction method: post operationId: createJobDeploymentRestriction x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/deploymentRestriction/{deploymentRestrictionId} method: put operationId: editJobDeploymentRestriction x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/deploymentRestriction/{deploymentRestrictionId} method: delete operationId: deleteJobDeploymentRestriction x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/environmentVariable method: get operationId: listJobEnvironmentVariable x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /job/{jobId}/environmentVariable method: post operationId: createJobEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/environmentVariable/import method: post operationId: importJobEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/environmentVariable/{environmentVariableId} method: delete operationId: deleteJobEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/environmentVariable/{environmentVariableId} method: put operationId: editJobEnvironmentVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/environmentVariable/{environmentVariableId}/override method: post operationId: createJobEnvironmentVariableOverride x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /job/{jobId}/environmentVariable/{environmentVariableId}/alias method: post operationId: createJobEnvironmentVariableAlias x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/secret method: get operationId: listJobSecrets x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /job/{jobId}/secret method: post operationId: createJobSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/secret/{secretId} method: delete operationId: deleteJobSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/secret/{secretId} method: put operationId: editJobSecret x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/secret/{secretId}/override method: post operationId: createJobSecretOverride x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /job/{jobId}/secret/{secretId}/alias method: post operationId: createJobSecretAlias x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/commit method: get operationId: listJobCommit x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /job/{jobId}/clone method: post operationId: cloneJob x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /service/{serviceId}/deploymentStage method: get operationId: getServiceDeploymentStage x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /service/{serviceId}/gitWebhookStatus method: get operationId: getServiceGitWebhookStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /service/{serviceId}/gitWebhook/sync method: post operationId: syncServiceGitWebhook x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /variable method: get operationId: listVariables x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /variable method: post operationId: createVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /variable/{variableId}/alias method: post operationId: createVariableAlias x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /variable/{variableId}/override method: post operationId: createVariableOverride x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /variable/{variableId} method: delete operationId: deleteVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /variable/{variableId} method: put operationId: editVariable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /variable/import method: post operationId: importEnvironmentVariables x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/cleanFailedJobs method: post operationId: cleanFailedJobs x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /job/{jobId}/cleanFailedJob method: post operationId: cleanFailedJob x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/lifecycleTemplate method: get operationId: listEnvironmentLifecycleTemplates x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/lifecycleTemplate/{lifecycleTemplateId} method: get operationId: getEnvironmentLifecycleTemplate x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/containerRegistry/{containerRegistryId}/associatedServices method: get operationId: getContainerRegistryAssociatedServices x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/helmRepository/{helmRepositoryId}/associatedServices method: get operationId: getHelmRepositoryAssociatedServices x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /cluster/{clusterId}/token method: get operationId: get-cluster-token-by-clusterId x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /cluster/{clusterId}/environments method: get operationId: get-environments-by-cluster-id x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /helm/{helmId}/listServices method: get operationId: getHelmKubernetesServices x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/services method: get operationId: listServicesByEnvironmentId x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /cluster/{clusterId}/lock method: post operationId: lockCluster x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /cluster/{clusterId}/lock method: delete operationId: unlock-cluster x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /cluster/{clusterId}/events method: get operationId: get-cluster-kubernetes-events x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /cluster/{clusterId}/metrics method: get operationId: get-cluster-metrics x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/lock method: get operationId: list-cluster-lock x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/deploymentStatus method: get operationId: getDeploymentStatusByDeploymentRequestId x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/services method: get operationId: listServicesByOrganizationId x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/environments method: get operationId: listEnvironmentsByOrganizationId x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/parseTerraformVariablesFromGitRepo method: post operationId: parseTerraformVariablesFromGitRepo x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/listTfVarsFilesFromGitRepo method: post operationId: listTfVarsFilesFromGitRepo x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/deploymentQueue method: get operationId: listDeploymentRequestByEnvironmentId x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /service/{serviceId}/deploymentQueue method: get operationId: listDeploymentRequestByServiceId x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /{serviceType}/{serviceId}/ingressDeploymentStatus method: get operationId: getIngressDeploymentStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/azure/credentials method: get operationId: listAzureCredentials x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/azure/credentials method: post operationId: createAzureCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/azure/credentials/{credentialsId} method: get operationId: getAzureCredentials x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/azure/credentials/{credentialsId} method: put operationId: editAzureCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/azure/credentials/{credentialsId} method: delete operationId: deleteAzureCredentials x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /azure/region method: get operationId: listAzureRegions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /azure/clusterFeature method: get operationId: listAzureFeatures x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/terraform method: get operationId: listTerraforms x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /environment/{environmentId}/terraform method: post operationId: createTerraform x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /environment/{environmentId}/link method: get operationId: listEnvironmentServicesLinks x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /terraform/{terraformId} method: get operationId: getTerraform x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /terraform/{terraformId} method: put operationId: editTerraform x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /terraform/{terraformId} method: delete operationId: deleteTerraform x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /terraform/{terraformId}/advancedSettings method: get operationId: getTerraformAdvancedSettings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /terraform/{terraformId}/advancedSettings method: put operationId: editTerraformAdvancedSettings x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /terraform/{terraformId}/deploy method: post operationId: deployTerraform x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /terraform/{terraformId}/uninstall method: post operationId: uninstallTerraform x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /defaultTerraformAdvancedSettings method: get operationId: getDefaultTerraformAdvancedSettings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /terraform/availableVersion method: get operationId: listTerraformVersions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /terraform/{terraformId}/clone method: post operationId: cloneTerraform x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /terraform/{terraformId}/deploymentHistoryV2 method: get operationId: listTerraformDeploymentHistoryV2 x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /terraform/{terraformId}/commit method: get operationId: listTerraformCommit x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /terraform/{terraformId}/deploymentRestriction method: get operationId: getTerraformDeploymentRestrictions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /terraform/{terraformId}/deploymentRestriction method: post operationId: createTerraformDeploymentRestriction x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /terraform/{terraformId}/deploymentRestriction/{deploymentRestrictionId} method: put operationId: editTerraformDeploymentRestriction x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /terraform/{terraformId}/deploymentRestriction/{deploymentRestrictionId} method: delete operationId: deleteTerraformDeploymentRestriction x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /terraform/{terraformId}/terraformResources method: get operationId: getTerraformResources x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /argocdApp/{argocdAppId} method: get operationId: getArgoCdApp x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/credentials method: get operationId: listOrganizationCredentials x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /cluster/{clusterId}/logs method: get operationId: get-cluster-logs x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/enterpriseconnection method: get operationId: listOrganizationEnterpriseConnections x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/alert-receivers method: get operationId: getAlertReceivers x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/enterpriseconnection/{connectionName} method: get operationId: getOrganizationEnterpriseConnection x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /organization/{organizationId}/enterpriseconnection/{connectionName} method: put operationId: updateOrganizationEnterpriseConnection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /alert-receivers method: post operationId: createAlertReceiver x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /alert-receivers/{alertReceiverId} method: get operationId: getAlertReceiver x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /alert-receivers/{alertReceiverId} method: put operationId: editAlertReceiver x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /alert-receivers/{alertReceiverId} method: delete operationId: deleteAlertReceiver x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /alert-rules method: post operationId: createAlertRule x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /alert-rules/{alertRuleId} method: get operationId: getAlertRule x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /alert-rules/{alertRuleId} method: put operationId: editAlertRule x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /alert-rules/{alertRuleId} method: delete operationId: deleteAlertRule x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organization/{organizationId}/alert-rules method: get operationId: getAlertRules x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /alert-receivers/{alertReceiverId}/validate method: post operationId: validateExistingAlertReceiver x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /alert-receivers/validate method: post operationId: validateNewAlertReceiver x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required