generated: '2026-07-15' method: generated source: openapi/stytch-b2b-openapi.yml, openapi/stytch-consumer-openapi.yml, openapi/stytch-management-openapi.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 244 by_action_class: acting: 188 connected: 56 by_consequence: write: 163 read: 56 safety-critical: 18 physical: 7 human_in_the_loop_required: 18 operations: - path: /v1/b2b/scim/{organization_id}/connection/{connection_id} method: put operationId: api_b2b_scim_v1_b2b_scim_connection_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/scim/{organization_id}/connection/{connection_id} method: delete operationId: api_b2b_scim_v1_b2b_scim_connection_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/scim/{organization_id}/connection/{connection_id} method: get operationId: api_b2b_scim_v1_b2b_scim_connection_GetGroups x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/scim/{organization_id}/connection/{connection_id}/rotate/start method: post operationId: api_b2b_scim_v1_b2b_scim_connection_RotateStart x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/scim/{organization_id}/connection/{connection_id}/rotate/complete method: post operationId: api_b2b_scim_v1_b2b_scim_connection_RotateComplete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/scim/{organization_id}/connection/{connection_id}/rotate/cancel method: post operationId: api_b2b_scim_v1_b2b_scim_connection_RotateCancel x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/scim/{organization_id}/connection method: post operationId: api_b2b_scim_v1_b2b_scim_connection_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/scim/{organization_id}/connection method: get operationId: api_b2b_scim_v1_b2b_scim_connection_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/organizations method: post operationId: api_organization_v1_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/organizations/{organization_id} method: get operationId: api_organization_v1_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/organizations/{organization_id} method: put operationId: api_organization_v1_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/organizations/{organization_id} method: delete operationId: api_organization_v1_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/organizations/search method: post operationId: api_organization_v1_Search x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/organizations/{organization_id}/metrics method: get operationId: api_organization_v1_Metrics x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/organizations/{organization_id}/connected_apps method: get operationId: api_organization_v1_ConnectedApps x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/organizations/{organization_id}/connected_apps/{connected_app_id} method: get operationId: api_organization_v1_GetConnectedApp x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/organizations/{organization_id}/external_id method: delete operationId: api_organization_v1_DeleteExternalId x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/organizations/{organization_id}/members/{member_id} method: put operationId: api_organization_v1_organizations_members_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/organizations/{organization_id}/members/{member_id} method: delete operationId: api_organization_v1_organizations_members_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/organizations/{organization_id}/members/{member_id}/reactivate method: put operationId: api_organization_v1_organizations_members_Reactivate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/organizations/{organization_id}/members/mfa_phone_numbers/{member_id} method: delete operationId: api_organization_v1_organizations_members_DeleteMFAPhoneNumber x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/organizations/{organization_id}/members/{member_id}/totp method: delete operationId: api_organization_v1_organizations_members_DeleteTOTP x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/organizations/members/search method: post operationId: api_organization_v1_organizations_members_Search x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/organizations/{organization_id}/members/passwords/{member_password_id} method: delete operationId: api_organization_v1_organizations_members_DeletePassword x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/organizations/members/dangerously_get/{member_id} method: get operationId: api_organization_v1_organizations_members_DangerouslyGet x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/organizations/{organization_id}/members/{member_id}/oidc_providers method: get operationId: api_organization_v1_organizations_members_OIDCProviders x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/organizations/{organization_id}/members/{member_id}/unlink_retired_email method: post operationId: api_organization_v1_organizations_members_UnlinkRetiredEmail x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/organizations/{organization_id}/members/{member_id}/start_email_update method: post operationId: api_organization_v1_organizations_members_StartEmailUpdate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/organizations/{organization_id}/members/{member_id}/connected_apps method: get operationId: api_organization_v1_organizations_members_GetConnectedApps x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/organizations/{organization_id}/members/{member_id}/external_id method: delete operationId: api_organization_v1_organizations_members_DeleteExternalId x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/organizations/{organization_id}/members method: post operationId: api_organization_v1_organizations_members_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/organizations/{organization_id}/member method: get operationId: api_organization_v1_organizations_members_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/organizations/{organization_id}/members/{member_id}/oauth_providers/google method: get operationId: api_organization_v1_organizations_members_oauth_providers_Google x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/organizations/{organization_id}/members/{member_id}/oauth_providers/microsoft method: get operationId: api_organization_v1_organizations_members_oauth_providers_Microsoft x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/organizations/{organization_id}/members/{member_id}/oauth_providers/slack method: get operationId: api_organization_v1_organizations_members_oauth_providers_Slack x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/organizations/{organization_id}/members/{member_id}/oauth_providers/hubspot method: get operationId: api_organization_v1_organizations_members_oauth_providers_Hubspot x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/organizations/{organization_id}/members/{member_id}/oauth_providers/github method: get operationId: api_organization_v1_organizations_members_oauth_providers_Github x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/organizations/{organization_id}/members/{member_id}/connected_apps/{connected_app_id}/revoke method: post operationId: api_organization_v1_organizations_members_connected_apps_Revoke x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/b2b/idp/oauth/authorize/start method: post operationId: api_b2b_idp_v1_b2b_idp_oauth_AuthorizeStart x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/idp/oauth/authorize method: post operationId: api_b2b_idp_v1_b2b_idp_oauth_Authorize x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/sessions method: get operationId: api_b2b_session_v1_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/sessions/authenticate method: post operationId: api_b2b_session_v1_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/sessions/revoke method: post operationId: api_b2b_session_v1_Revoke x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/b2b/sessions/exchange method: post operationId: api_b2b_session_v1_Exchange x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/sessions/exchange_access_token method: post operationId: api_b2b_session_v1_ExchangeAccessToken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/sessions/attest method: post operationId: api_b2b_session_v1_Attest x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/sessions/migrate method: post operationId: api_b2b_session_v1_Migrate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/sessions/jwks/{project_id} method: get operationId: api_b2b_session_v1_GetJWKS x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/impersonation/authenticate method: post operationId: api_b2b_impersonation_v1_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/rbac/policy method: get operationId: api_b2b_rbac_v1_Policy x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/rbac/organizations/{organization_id} method: get operationId: api_b2b_rbac_v1_b2b_rbac_organizations_GetOrgPolicy x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/rbac/organizations/{organization_id} method: put operationId: api_b2b_rbac_v1_b2b_rbac_organizations_SetOrgPolicy x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/recovery_codes/recover method: post operationId: api_b2b_recovery_codes_v1_Recover x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/recovery_codes/{organization_id}/{member_id} method: get operationId: api_b2b_recovery_codes_v1_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/recovery_codes/rotate method: post operationId: api_b2b_recovery_codes_v1_Rotate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/totp method: post operationId: api_b2b_totp_v1_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/totp/authenticate method: post operationId: api_b2b_totp_v1_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/totp/migrate method: post operationId: api_b2b_totp_v1_Migrate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/discovery/intermediate_sessions/exchange method: post operationId: api_discovery_v1_discovery_intermediate_sessions_Exchange x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/discovery/organizations/create method: post operationId: api_discovery_v1_discovery_organizations_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/discovery/organizations method: post operationId: api_discovery_v1_discovery_organizations_List x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/magic_links/authenticate method: post operationId: api_b2b_magic_v1_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/magic_links/email/login_or_signup method: post operationId: api_b2b_magic_v1_b2b_magic_links_email_LoginOrSignup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/magic_links/email/invite method: post operationId: api_b2b_magic_v1_b2b_magic_links_email_Invite x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/magic_links/email/discovery/send method: post operationId: api_b2b_magic_v1_b2b_magic_links_email_discovery_Send x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/magic_links/discovery/authenticate method: post operationId: api_b2b_magic_v1_b2b_magic_links_discovery_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/oauth/authenticate method: post operationId: api_b2b_oauth_v1_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/oauth/discovery/authenticate method: post operationId: api_b2b_oauth_v1_b2b_oauth_discovery_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/otps/sms/send method: post operationId: api_b2b_otp_v1_b2b_otp_sms_Send x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/otps/sms/authenticate method: post operationId: api_b2b_otp_v1_b2b_otp_sms_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/otps/email/login_or_signup method: post operationId: api_b2b_otp_v1_b2b_otp_email_LoginOrSignup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/otps/email/authenticate method: post operationId: api_b2b_otp_v1_b2b_otp_email_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/otps/email/discovery/send method: post operationId: api_b2b_otp_v1_b2b_otp_email_discovery_Send x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/otps/email/discovery/authenticate method: post operationId: api_b2b_otp_v1_b2b_otp_email_discovery_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/passwords/strength_check method: post operationId: api_b2b_password_v1_StrengthCheck x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/passwords/migrate method: post operationId: api_b2b_password_v1_Migrate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/passwords/authenticate method: post operationId: api_b2b_password_v1_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/passwords/email/reset/start method: post operationId: api_b2b_password_v1_b2b_passwords_email_ResetStart x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/b2b/passwords/email/reset method: post operationId: api_b2b_password_v1_b2b_passwords_email_Reset x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/b2b/passwords/email/require_reset method: post operationId: api_b2b_password_v1_b2b_passwords_email_RequireReset x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/b2b/passwords/session/reset method: post operationId: api_b2b_password_v1_b2b_passwords_session_Reset x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/b2b/passwords/existing_password/reset method: post operationId: api_b2b_password_v1_b2b_passwords_existing_password_Reset x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/b2b/passwords/discovery/authenticate method: post operationId: api_b2b_password_v1_b2b_passwords_discovery_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/passwords/discovery/email/reset/start method: post operationId: api_b2b_password_v1_b2b_passwords_discovery_email_ResetStart x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/b2b/passwords/discovery/email/reset method: post operationId: api_b2b_password_v1_b2b_passwords_discovery_email_Reset x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/b2b/sso/{organization_id} method: get operationId: api_sso_v1_GetConnections x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/b2b/sso/{organization_id}/connections/{connection_id} method: delete operationId: api_sso_v1_DeleteConnection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/sso/authenticate method: post operationId: api_sso_v1_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/sso/oidc/{organization_id} method: post operationId: api_sso_v1_sso_oidc_CreateConnection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/sso/oidc/{organization_id}/connections/{connection_id} method: put operationId: api_sso_v1_sso_oidc_UpdateConnection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/sso/saml/{organization_id} method: post operationId: api_sso_v1_sso_saml_CreateConnection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/sso/saml/{organization_id}/connections/{connection_id} method: put operationId: api_sso_v1_sso_saml_UpdateConnection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/sso/saml/{organization_id}/connections/{connection_id}/url method: put operationId: api_sso_v1_sso_saml_UpdateByURL x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/sso/saml/{organization_id}/connections/{connection_id}/verification_certificates/{certificate_id} method: delete operationId: api_sso_v1_sso_saml_DeleteVerificationCertificate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/sso/saml/{organization_id}/connections/{connection_id}/encryption_private_keys/{private_key_id} method: delete operationId: api_sso_v1_sso_saml_DeleteEncryptionPrivateKey x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/sso/external/{organization_id} method: post operationId: api_sso_v1_sso_external_CreateConnection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/b2b/sso/external/{organization_id}/connections/{connection_id} method: put operationId: api_sso_v1_sso_external_UpdateConnection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/connected_apps/clients/{client_id} method: get operationId: api_connectedapps_v1_connected_apps_clients_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/connected_apps/clients/{client_id} method: put operationId: api_connectedapps_v1_connected_apps_clients_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/connected_apps/clients/{client_id} method: delete operationId: api_connectedapps_v1_connected_apps_clients_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/connected_apps/clients/search method: post operationId: api_connectedapps_v1_connected_apps_clients_Search x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/connected_apps/clients method: post operationId: api_connectedapps_v1_connected_apps_clients_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/connected_apps/clients/{client_id}/secrets/rotate/start method: post operationId: api_connectedapps_v1_connected_apps_clients_secrets_RotateStart x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/connected_apps/clients/{client_id}/secrets/rotate/cancel method: post operationId: api_connectedapps_v1_connected_apps_clients_secrets_RotateCancel x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/connected_apps/clients/{client_id}/secrets/rotate method: post operationId: api_connectedapps_v1_connected_apps_clients_secrets_Rotate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/users method: post operationId: api_user_v1_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/users/{user_id} method: get operationId: api_user_v1_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/users/{user_id} method: put operationId: api_user_v1_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/users/{user_id} method: delete operationId: api_user_v1_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/users/search method: post operationId: api_user_v1_Search x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/users/{user_id}/exchange_primary_factor method: put operationId: api_user_v1_ExchangePrimaryFactor x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/users/emails/{email_id} method: delete operationId: api_user_v1_DeleteEmail x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/users/phone_numbers/{phone_id} method: delete operationId: api_user_v1_DeletePhoneNumber x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/users/webauthn_registrations/{webauthn_registration_id} method: delete operationId: api_user_v1_DeleteWebAuthnRegistration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/users/biometric_registrations/{biometric_registration_id} method: delete operationId: api_user_v1_DeleteBiometricRegistration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/users/totps/{totp_id} method: delete operationId: api_user_v1_DeleteTOTP x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/users/crypto_wallets/{crypto_wallet_id} method: delete operationId: api_user_v1_DeleteCryptoWallet x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/users/passwords/{password_id} method: delete operationId: api_user_v1_DeletePassword x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/users/oauth/{oauth_user_registration_id} method: delete operationId: api_user_v1_DeleteOAuthRegistration x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/users/{user_id}/external_id method: delete operationId: api_user_v1_DeleteExternalId x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/users/{user_id}/connected_apps method: get operationId: api_user_v1_ConnectedApps x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/users/{user_id}/connected_apps/{connected_app_id}/revoke method: post operationId: api_user_v1_Revoke x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/sessions method: get operationId: api_session_v1_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/sessions/authenticate method: post operationId: api_session_v1_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/sessions/revoke method: post operationId: api_session_v1_Revoke x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/sessions/migrate method: post operationId: api_session_v1_Migrate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/sessions/exchange_access_token method: post operationId: api_session_v1_ExchangeAccessToken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/sessions/jwks/{project_id} method: get operationId: api_session_v1_GetJWKS x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/sessions/attest method: post operationId: api_session_v1_Attest x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/rbac/policy method: get operationId: api_consumer_rbac_v1_Policy x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/crypto_wallets/authenticate/start method: post operationId: api_crypto_wallet_v1_AuthenticateStart x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/crypto_wallets/authenticate method: post operationId: api_crypto_wallet_v1_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/debug/whoami method: get operationId: api_debug_v1_Whoami x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/fingerprint/lookup method: post operationId: api_fraud_v1_fraud_fingerprint_Lookup x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/rules/set method: post operationId: api_fraud_v1_fraud_rules_Set x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/rules/list method: post operationId: api_fraud_v1_fraud_rules_List x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/verdict_reasons/override method: post operationId: api_fraud_v1_fraud_verdict_reasons_Override x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/verdict_reasons/list method: post operationId: api_fraud_v1_fraud_verdict_reasons_List x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/email/risk method: post operationId: api_fraud_v1_fraud_email_Risk x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/idp/oauth/authorize/start method: post operationId: api_idp_v1_idp_oauth_AuthorizeStart x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/idp/oauth/authorize method: post operationId: api_idp_v1_idp_oauth_Authorize x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/impersonation/authenticate method: post operationId: api_impersonation_v1_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/m2m/clients/{client_id} method: get operationId: api_m2m_v1_m2m_clients_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/m2m/clients/{client_id} method: put operationId: api_m2m_v1_m2m_clients_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/m2m/clients/{client_id} method: delete operationId: api_m2m_v1_m2m_clients_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/m2m/clients/search method: post operationId: api_m2m_v1_m2m_clients_Search x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/m2m/clients method: post operationId: api_m2m_v1_m2m_clients_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/m2m/clients/{client_id}/secrets/rotate/start method: post operationId: api_m2m_v1_m2m_clients_secrets_RotateStart x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/m2m/clients/{client_id}/secrets/rotate/cancel method: post operationId: api_m2m_v1_m2m_clients_secrets_RotateCancel x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/m2m/clients/{client_id}/secrets/rotate method: post operationId: api_m2m_v1_m2m_clients_secrets_Rotate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/magic_links/authenticate method: post operationId: api_magic_v1_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/magic_links method: post operationId: api_magic_v1_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/magic_links/email/send method: post operationId: api_magic_v1_magic_links_email_Send x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/magic_links/email/login_or_create method: post operationId: api_magic_v1_magic_links_email_LoginOrCreate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/magic_links/email/invite method: post operationId: api_magic_v1_magic_links_email_Invite x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/magic_links/email/revoke_invite method: post operationId: api_magic_v1_magic_links_email_RevokeInvite x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/passwords method: post operationId: api_password_v1_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/passwords/authenticate method: post operationId: api_password_v1_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/passwords/strength_check method: post operationId: api_password_v1_StrengthCheck x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/passwords/migrate method: post operationId: api_password_v1_Migrate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/passwords/email/reset/start method: post operationId: api_password_v1_passwords_email_ResetStart x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/passwords/email/reset method: post operationId: api_password_v1_passwords_email_Reset x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/passwords/existing_password/reset method: post operationId: api_password_v1_passwords_existing_password_Reset x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/passwords/session/reset method: post operationId: api_password_v1_passwords_session_Reset x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /v1/oauth/attach method: post operationId: api_oauth_v1_Attach x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/oauth/authenticate method: post operationId: api_oauth_v1_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/otps/authenticate method: post operationId: api_otp_v1_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/otps/sms/send method: post operationId: api_otp_v1_otp_sms_Send x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/otps/sms/login_or_create method: post operationId: api_otp_v1_otp_sms_LoginOrCreate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/otps/whatsapp/send method: post operationId: api_otp_v1_otp_whatsapp_Send x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/otps/whatsapp/login_or_create method: post operationId: api_otp_v1_otp_whatsapp_LoginOrCreate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/otps/email/send method: post operationId: api_otp_v1_otp_email_Send x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/otps/email/login_or_create method: post operationId: api_otp_v1_otp_email_LoginOrCreate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/projects/metrics method: get operationId: api_project_v1_Metrics x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /v1/totps method: post operationId: api_totp_v1_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/totps/authenticate method: post operationId: api_totp_v1_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/totps/recovery_codes method: post operationId: api_totp_v1_RecoveryCodes x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/totps/recover method: post operationId: api_totp_v1_Recover x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/webauthn/register/start method: post operationId: api_webauthn_v1_RegisterStart x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/webauthn/register method: post operationId: api_webauthn_v1_Register x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/webauthn/authenticate/start method: post operationId: api_webauthn_v1_AuthenticateStart x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/webauthn/authenticate method: post operationId: api_webauthn_v1_Authenticate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/webauthn/{webauthn_registration_id} method: put operationId: api_webauthn_v1_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v1/webauthn/credentials/{user_id}/{domain} method: get operationId: api_webauthn_v1_ListCredentials x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects method: post operationId: pwa_application_v3_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects method: get operationId: pwa_application_v3_GetAll x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug method: get operationId: pwa_application_v3_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug method: patch operationId: pwa_application_v3_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug method: delete operationId: pwa_application_v3_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/allowed_country_codes/sms method: get operationId: pwa_country_code_allowlist_v3_GetAllowedSMSCountryCodes x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/allowed_country_codes/sms method: post operationId: pwa_country_code_allowlist_v3_SetAllowedSMSCountryCodes x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/allowed_country_codes/whatsapp method: get operationId: pwa_country_code_allowlist_v3_GetAllowedWhatsAppCountryCodes x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/allowed_country_codes/whatsapp method: post operationId: pwa_country_code_allowlist_v3_SetAllowedWhatsAppCountryCodes x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/email_templates method: post operationId: pwa_email_template_v3_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/email_templates method: get operationId: pwa_email_template_v3_GetAll x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/email_templates/:template_id method: get operationId: pwa_email_template_v3_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/email_templates/:template_id method: put operationId: pwa_email_template_v3_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/email_templates/:template_id method: delete operationId: pwa_email_template_v3_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/default_email_templates/:email_template_type method: post operationId: pwa_email_template_v3_SetDefault x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/default_email_templates/:email_template_type method: get operationId: pwa_email_template_v3_GetDefault x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/default_email_templates/:email_template_type method: delete operationId: pwa_email_template_v3_UnsetDefault x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments method: post operationId: pwa_environment_v3_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments method: get operationId: pwa_environment_v3_GetAll x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug method: get operationId: pwa_environment_v3_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug method: patch operationId: pwa_environment_v3_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug method: delete operationId: pwa_environment_v3_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/metrics method: get operationId: pwa_environment_v3_GetMetrics x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/event_log_streaming/:destination_type method: get operationId: pwa_event_log_streaming_v3_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/event_log_streaming/:destination_type method: put operationId: pwa_event_log_streaming_v3_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/event_log_streaming/:destination_type method: delete operationId: pwa_event_log_streaming_v3_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/event_log_streaming method: post operationId: pwa_event_log_streaming_v3_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/event_log_streaming/:destination_type/enable method: post operationId: pwa_event_log_streaming_v3_Enable x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/event_log_streaming/:destination_type/disable method: post operationId: pwa_event_log_streaming_v3_Disable x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/jwt_templates/:jwt_template_type method: get operationId: pwa_jwt_template_v3_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/jwt_templates/:jwt_template_type method: put operationId: pwa_jwt_template_v3_Set x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/password_strength_config method: get operationId: pwa_password_v3_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/password_strength_config method: put operationId: pwa_password_v3_Set x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/public_tokens method: post operationId: pwa_public_token_v3_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/public_tokens method: get operationId: pwa_public_token_v3_GetAll x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/public_tokens/:public_token method: get operationId: pwa_public_token_v3_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/public_tokens/:public_token method: delete operationId: pwa_public_token_v3_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/rbac_policy method: get operationId: pwa_rbac_v3_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/rbac_policy method: put operationId: pwa_rbac_v3_Set x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/redirect_urls method: post operationId: pwa_redirect_url_v3_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/redirect_urls method: get operationId: pwa_redirect_url_v3_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/redirect_urls method: put operationId: pwa_redirect_url_v3_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/redirect_urls method: delete operationId: pwa_redirect_url_v3_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/redirect_urls/all method: get operationId: pwa_redirect_url_v3_GetAll x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/sdk/consumer method: get operationId: pwa_sdk_v3_GetConsumerConfig x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/sdk/consumer method: put operationId: pwa_sdk_v3_SetConsumerConfig x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/sdk/b2b method: get operationId: pwa_sdk_v3_GetB2BConfig x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/sdk/b2b method: put operationId: pwa_sdk_v3_SetB2BConfig x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/secrets method: post operationId: pwa_secret_v3_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/secrets method: get operationId: pwa_secret_v3_GetAll x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/secrets/:secret_id method: get operationId: pwa_secret_v3_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/secrets/:secret_id method: delete operationId: pwa_secret_v3_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/trusted_token_profiles method: post operationId: pwa_trusted_token_profile_v3_Create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/trusted_token_profiles method: get operationId: pwa_trusted_token_profile_v3_GetAll x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/trusted_token_profiles/:profile_id method: get operationId: pwa_trusted_token_profile_v3_Get x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/trusted_token_profiles/:profile_id method: patch operationId: pwa_trusted_token_profile_v3_Update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/trusted_token_profiles/:profile_id method: delete operationId: pwa_trusted_token_profile_v3_Delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/trusted_token_profiles/:profile_id/keys method: post operationId: pwa_trusted_token_profile_v3_CreatePEMFile x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/trusted_token_profiles/:profile_id/keys/:pem_file_id method: delete operationId: pwa_trusted_token_profile_v3_DeletePEMFile x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /pwa/v3/projects/:project_slug/environments/:environment_slug/trusted_token_profiles/:profile_id/keys/:pem_file_id method: get operationId: pwa_trusted_token_profile_v3_GetPEMFile x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none