generated: '2026-07-15' method: generated source: openapi/xata-management-api-openapi.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 64 by_action_class: connected: 29 acting: 35 by_consequence: read: 29 write: 31 physical: 4 human_in_the_loop_required: 0 operations: - path: /organizations method: get operationId: getOrganizationsList x-agentic-access: action-class: connected consequence: read subject: optional scope: - org:read token: max-ttl: 3600 audit: none - path: /organizations method: post operationId: createOrganization x-agentic-access: action-class: acting consequence: write subject: required scope: - org:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID} method: get operationId: getOrganization x-agentic-access: action-class: connected consequence: read subject: optional scope: - org:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID} method: put operationId: updateOrganization x-agentic-access: action-class: acting consequence: write subject: required scope: - org:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID} method: delete operationId: deleteOrganization x-agentic-access: action-class: acting consequence: write subject: required scope: - org:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/api-keys method: get operationId: listOrganizationAPIKeys x-agentic-access: action-class: connected consequence: read subject: optional scope: - keys:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/api-keys method: post operationId: createOrganizationAPIKey x-agentic-access: action-class: acting consequence: write subject: required scope: - keys:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/api-keys method: delete operationId: deleteOrganizationAPIKeys x-agentic-access: action-class: acting consequence: write subject: required scope: - keys:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/members method: get operationId: listOrganizationMembers x-agentic-access: action-class: connected consequence: read subject: optional scope: - org:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/members/{userID} method: delete operationId: removeOrganizationMember x-agentic-access: action-class: acting consequence: write subject: required scope: - org:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/invitations method: get operationId: listOrganizationInvitations x-agentic-access: action-class: connected consequence: read subject: optional scope: - invite:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/invitations method: post operationId: createOrganizationInvitation x-agentic-access: action-class: acting consequence: physical subject: required scope: - invite:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/invitations/{invitationID} method: get operationId: getOrganizationInvitation x-agentic-access: action-class: connected consequence: read subject: optional scope: - invite:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/invitations/{invitationID} method: delete operationId: deleteOrganizationInvitation x-agentic-access: action-class: acting consequence: write subject: required scope: - invite:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/invitations/{invitationID}/resend method: post operationId: resendOrganizationInvitation x-agentic-access: action-class: acting consequence: physical subject: required scope: - invite:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/deletion-request method: post operationId: requestOrganizationDeletion x-agentic-access: action-class: acting consequence: write subject: required scope: - org:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/membership-limits method: get operationId: getOrganizationMembershipLimits x-agentic-access: action-class: connected consequence: read subject: optional scope: - org:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/billing/checkout-session method: post operationId: createBillingCheckoutSession x-agentic-access: action-class: acting consequence: physical subject: required scope: - org:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/billing/payment-method-session method: post operationId: createBillingPaymentMethodSession x-agentic-access: action-class: acting consequence: physical subject: required scope: - org:write audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/billing/customer method: get operationId: getBillingCustomer x-agentic-access: action-class: connected consequence: read subject: optional scope: - org:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/billing/customer method: patch operationId: updateBillingCustomer x-agentic-access: action-class: acting consequence: write subject: required scope: - org:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/billing/invoices method: get operationId: getBillingInvoices x-agentic-access: action-class: connected consequence: read subject: optional scope: - org:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/billing/invoices/upcoming method: get operationId: getBillingUpcomingInvoice x-agentic-access: action-class: connected consequence: read subject: optional scope: - org:read token: max-ttl: 3600 audit: none - path: /marketplace/register method: post operationId: registerMarketplace x-agentic-access: action-class: acting consequence: write subject: required scope: - marketplace:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api-keys method: get operationId: listUserAPIKeys x-agentic-access: action-class: connected consequence: read subject: optional scope: - keys:read token: max-ttl: 3600 audit: none - path: /api-keys method: post operationId: createUserAPIKey x-agentic-access: action-class: acting consequence: write subject: required scope: - keys:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /api-keys method: delete operationId: deleteUserAPIKeys x-agentic-access: action-class: acting consequence: write subject: required scope: - keys:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /sql method: post operationId: query x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /v2 method: get operationId: websocket x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /webhooks/github method: post operationId: githubWebhook x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/regions method: get operationId: listRegions x-agentic-access: action-class: connected consequence: read subject: optional scope: - project:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/instanceTypes method: get operationId: listInstanceTypes x-agentic-access: action-class: connected consequence: read subject: optional scope: - org:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/images method: get operationId: listImages x-agentic-access: action-class: connected consequence: read subject: optional scope: - org:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/extensions method: get operationId: listExtensions x-agentic-access: action-class: connected consequence: read subject: optional scope: - org:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/limits method: get operationId: getOrganizationLimits x-agentic-access: action-class: connected consequence: read subject: optional scope: - org:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/projects/limits method: get operationId: getDefaultProjectLimits x-agentic-access: action-class: connected consequence: read subject: optional scope: - project:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/projects method: get operationId: listProjects x-agentic-access: action-class: connected consequence: read subject: optional scope: - project:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/projects method: post operationId: createProject x-agentic-access: action-class: acting consequence: write subject: required scope: - project:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/projects/{projectID} method: get operationId: getProject x-agentic-access: action-class: connected consequence: read subject: optional scope: - project:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/projects/{projectID} method: patch operationId: updateProject x-agentic-access: action-class: acting consequence: write subject: required scope: - project:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/projects/{projectID} method: delete operationId: deleteProject x-agentic-access: action-class: acting consequence: write subject: required scope: - project:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/projects/{projectID}/limits method: get operationId: getProjectLimits x-agentic-access: action-class: connected consequence: read subject: optional scope: - project:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/projects/{projectID}/backups method: get operationId: listBackups x-agentic-access: action-class: connected consequence: read subject: optional scope: - project:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/projects/{projectID}/backups/{backupID} method: get operationId: getBackup x-agentic-access: action-class: connected consequence: read subject: optional scope: - project:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/projects/{projectID}/branches method: get operationId: listBranches x-agentic-access: action-class: connected consequence: read subject: optional scope: - branch:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/projects/{projectID}/branches method: post operationId: createBranch x-agentic-access: action-class: acting consequence: write subject: required scope: - branch:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/projects/{projectID}/branches/{branchID} method: get operationId: describeBranch x-agentic-access: action-class: connected consequence: read subject: optional scope: - branch:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/projects/{projectID}/branches/{branchID} method: patch operationId: updateBranch x-agentic-access: action-class: acting consequence: write subject: required scope: - branch:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/projects/{projectID}/branches/{branchID} method: delete operationId: deleteBranch x-agentic-access: action-class: acting consequence: write subject: required scope: - branch:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/projects/{projectID}/branches/{branchID}/credentials method: get operationId: getBranchCredentials x-agentic-access: action-class: connected consequence: read subject: optional scope: - credentials:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/projects/{projectID}/branches/{branchID}/credentials/rotate method: post operationId: rotateBranchCredentials x-agentic-access: action-class: acting consequence: write subject: required scope: - credentials:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/projects/{projectID}/branches/{branchID}/metrics method: post operationId: branchMetrics x-agentic-access: action-class: acting consequence: write subject: required scope: - metrics:read audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/projects/{projectID}/branches/{branchID}/restore method: post operationId: restoreFromBackup x-agentic-access: action-class: acting consequence: write subject: required scope: - branch:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/projects/{projectID}/branches/{branchID}/logs method: post operationId: branchLogs x-agentic-access: action-class: acting consequence: write subject: required scope: - logs:read audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/projects/{projectID}/branches/{branchID}/postgres-config method: get operationId: getBranchPostgresConfig x-agentic-access: action-class: connected consequence: read subject: optional scope: - branch:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/githubapp/installations method: get operationId: listGithubAppInstallations x-agentic-access: action-class: connected consequence: read subject: optional scope: - project:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/githubapp/installations method: post operationId: createGithubAppInstallation x-agentic-access: action-class: acting consequence: write subject: required scope: - org:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/githubapp/installations/{githubInstallationID} method: put operationId: updateGithubAppInstallation x-agentic-access: action-class: acting consequence: write subject: required scope: - org:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/projects/{projectID}/branches/{branchID}/githubapp/repository method: get operationId: getGithubRepository x-agentic-access: action-class: connected consequence: read subject: optional scope: - project:read token: max-ttl: 3600 audit: none - path: /organizations/{organizationID}/projects/{projectID}/branches/{branchID}/githubapp/repository method: post operationId: createGithubRepository x-agentic-access: action-class: acting consequence: write subject: required scope: - project:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/projects/{projectID}/branches/{branchID}/githubapp/repository method: put operationId: updateGithubRepository x-agentic-access: action-class: acting consequence: write subject: required scope: - project:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /organizations/{organizationID}/projects/{projectID}/branches/{branchID}/githubapp/repository method: delete operationId: deleteGithubRepository x-agentic-access: action-class: acting consequence: write subject: required scope: - project:write audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /webhooks/orb method: post operationId: orbWebhook x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /webhooks/stripe method: post operationId: stripeWebhook x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required