generated: '2026-07-15' method: generated source: openapi/withings-data-api-openapi.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 62 by_action_class: connected: 1 acting: 61 by_consequence: read: 1 write: 52 safety-critical: 3 physical: 6 human_in_the_loop_required: 3 operations: - path: https://account.withings.com/oauth2_user/authorize2 method: get operationId: oauth2-authorize x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: https://wbsapi.withings.net/v2/oauth2 method: post operationId: oauth2-getaccesstoken x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: ' https://wbsapi.withings.net/v2/oauth2' method: post operationId: oauth2-recoverauthorizationcode x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: ' https://wbsapi.withings.net/v2/oauth2' method: post operationId: oauth2-listusers x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: ' https://wbsapi.withings.net/v2/oauth2' method: post operationId: oauth2-revoke x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: ' https://wbsapi.withings.net/v2/oauth2' method: post operationId: oauth2-getdemoaccess x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: ' https://wbsapi.withings.net/v2/oauth2' method: post operationId: oauth2-createclient x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: https://wbsapi.withings.net/measure method: post operationId: measure-getmeas x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/notify ' method: post operationId: notify-get x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/notify ' method: post operationId: notify-list x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/notify ' method: post operationId: notify-revoke x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: https://wbsapi.withings.net/notify method: post operationId: notify-subscribe x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/notify ' method: post operationId: notify-update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: https://wbsapi.withings.net/v2/answers method: post operationId: answersv2-get x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/device ' method: post operationId: devicev2-disablefeature x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: 'https://wbsapi.withings.net/v2/device ' method: post operationId: devicev2-enablefeature x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: https://wbsapi.withings.net/v2/device method: post operationId: devicev2-endpartnerprogram x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: https://wbsapi.withings.net/v2/dropshipment method: post operationId: dropshipmentv2-createorder x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/dropshipment ' method: post operationId: dropshipmentv2-createuserorder x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/dropshipment ' method: post operationId: dropshipmentv2-delete x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/dropshipment ' method: post operationId: dropshipmentv2-getorderstatus x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/dropshipment ' method: post operationId: dropshipmentv2-update x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/heart ' method: post operationId: heartv2-get x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: https://wbsapi.withings.net/v2/heart method: post operationId: heartv2-list x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/measure ' method: post operationId: measurev2-confirmuser x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: https://wbsapi.withings.net/v2/measure method: post operationId: measurev2-getactivity x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/measure ' method: post operationId: measurev2-getintradayactivity x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/measure ' method: post operationId: measurev2-getworkouts x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/nudge ' method: post operationId: nudgev2-create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/nudge ' method: post operationId: nudgev2-delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/nudge ' method: post operationId: nudgev2-get x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: https://wbsapi.withings.net/v2/nudge method: post operationId: nudgev2-list x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/nudge ' method: post operationId: nudgev2-update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/nudgecampaign ' method: post operationId: nudgecampaignv2-addusers x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/nudgecampaign ' method: post operationId: nudgecampaignv2-create x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/nudgecampaign ' method: post operationId: nudgecampaignv2-delete x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/nudgecampaign ' method: post operationId: nudgecampaignv2-get x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: https://wbsapi.withings.net/v2/nudgecampaign method: post operationId: nudgecampaignv2-list x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/nudgecampaign ' method: post operationId: nudgecampaignv2-listusers x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/nudgecampaign ' method: post operationId: nudgecampaignv2-removeusers x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/nudgecampaign ' method: post operationId: nudgecampaignv2-update x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: https://wbsapi.withings.net/v2/order method: post operationId: orderv2-getdetail x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/rawdata ' method: post operationId: rawdatav2-activate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/rawdata ' method: post operationId: rawdatav2-deactivate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: https://wbsapi.withings.net/v2/rawdata method: post operationId: rawdatav2-get x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: https://wbsapi.withings.net/v2/signature method: post operationId: signaturev2-getnonce x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: https://wbsapi.withings.net/v2/sleep method: post operationId: sleepv2-get x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/sleep ' method: post operationId: sleepv2-getsummary x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: https://wbsapi.withings.net/v2/stetho method: post operationId: stethov2-get x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/stetho ' method: post operationId: stethov2-list x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/survey ' method: post operationId: surveyv2-activate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/survey ' method: post operationId: surveyv2-deactivate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: https://wbsapi.withings.net/v2/survey method: post operationId: surveyv2-get x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/survey ' method: post operationId: surveyv2-list x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/survey ' method: post operationId: surveyv2-listusers x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/user ' method: post operationId: userv2-activate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/user ' method: post operationId: userv2-addtorpm x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: https://wbsapi.withings.net/v2/user method: post operationId: userv2-get x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/user ' method: post operationId: userv2-getdevice x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/user ' method: post operationId: userv2-getgoals x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/user ' method: post operationId: userv2-link x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: 'https://wbsapi.withings.net/v2/user ' method: post operationId: userv2-unlink x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required