Amazon App Mesh · Agentic Access
Amazon App Mesh Agentic Access
x-agentic-access
generated
Amazon App Mesh exposes 76 API operations that an AI agent could call, of which 46 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 30 read and 46 write.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
MicroservicesNetworkingService Mesh
Operations: 76
Acting: 46
Human-in-the-loop: 0
Method: generated
By consequence
read 30
write 46
Source
Agentic Access
generated: '2026-07-15'
method: generated
source: openapi/amazon-app-mesh-openapi.json, openapi/amazon-app-mesh-openapi.yaml
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 76
by_action_class:
acting: 46
connected: 30
by_consequence:
write: 46
read: 30
human_in_the_loop_required: 0
operations:
- path: /v20190125/meshes/{meshName}/virtualGateway/{virtualGatewayName}/gatewayRoutes
method: put
operationId: CreateGatewayRoute
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualGateway/{virtualGatewayName}/gatewayRoutes
method: get
operationId: ListGatewayRoutes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes
method: put
operationId: CreateMesh
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes
method: get
operationId: ListMeshes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualRouter/{virtualRouterName}/routes
method: put
operationId: CreateRoute
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualRouter/{virtualRouterName}/routes
method: get
operationId: ListRoutes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualGateways
method: put
operationId: CreateVirtualGateway
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualGateways
method: get
operationId: ListVirtualGateways
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualNodes
method: put
operationId: CreateVirtualNode
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualNodes
method: get
operationId: ListVirtualNodes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualRouters
method: put
operationId: CreateVirtualRouter
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualRouters
method: get
operationId: ListVirtualRouters
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualServices
method: put
operationId: CreateVirtualService
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualServices
method: get
operationId: ListVirtualServices
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualGateway/{virtualGatewayName}/gatewayRoutes/{gatewayRouteName}
method: delete
operationId: DeleteGatewayRoute
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualGateway/{virtualGatewayName}/gatewayRoutes/{gatewayRouteName}
method: get
operationId: DescribeGatewayRoute
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualGateway/{virtualGatewayName}/gatewayRoutes/{gatewayRouteName}
method: put
operationId: UpdateGatewayRoute
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}
method: delete
operationId: DeleteMesh
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}
method: get
operationId: DescribeMesh
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}
method: put
operationId: UpdateMesh
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualRouter/{virtualRouterName}/routes/{routeName}
method: delete
operationId: DeleteRoute
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualRouter/{virtualRouterName}/routes/{routeName}
method: get
operationId: DescribeRoute
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualRouter/{virtualRouterName}/routes/{routeName}
method: put
operationId: UpdateRoute
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualGateways/{virtualGatewayName}
method: delete
operationId: DeleteVirtualGateway
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualGateways/{virtualGatewayName}
method: get
operationId: DescribeVirtualGateway
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualGateways/{virtualGatewayName}
method: put
operationId: UpdateVirtualGateway
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualNodes/{virtualNodeName}
method: delete
operationId: DeleteVirtualNode
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualNodes/{virtualNodeName}
method: get
operationId: DescribeVirtualNode
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualNodes/{virtualNodeName}
method: put
operationId: UpdateVirtualNode
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualRouters/{virtualRouterName}
method: delete
operationId: DeleteVirtualRouter
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualRouters/{virtualRouterName}
method: get
operationId: DescribeVirtualRouter
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualRouters/{virtualRouterName}
method: put
operationId: UpdateVirtualRouter
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualServices/{virtualServiceName}
method: delete
operationId: DeleteVirtualService
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualServices/{virtualServiceName}
method: get
operationId: DescribeVirtualService
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualServices/{virtualServiceName}
method: put
operationId: UpdateVirtualService
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/tags#resourceArn
method: get
operationId: ListTagsForResource
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/tag#resourceArn
method: put
operationId: TagResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/untag#resourceArn
method: put
operationId: UntagResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualGateway/{virtualGatewayName}/gatewayRoutes
method: put
operationId: CreateGatewayRoute
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualGateway/{virtualGatewayName}/gatewayRoutes
method: get
operationId: ListGatewayRoutes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes
method: put
operationId: CreateMesh
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes
method: get
operationId: ListMeshes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualRouter/{virtualRouterName}/routes
method: put
operationId: CreateRoute
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualRouter/{virtualRouterName}/routes
method: get
operationId: ListRoutes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualGateways
method: put
operationId: CreateVirtualGateway
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualGateways
method: get
operationId: ListVirtualGateways
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualNodes
method: put
operationId: CreateVirtualNode
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualNodes
method: get
operationId: ListVirtualNodes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualRouters
method: put
operationId: CreateVirtualRouter
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualRouters
method: get
operationId: ListVirtualRouters
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualServices
method: put
operationId: CreateVirtualService
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualServices
method: get
operationId: ListVirtualServices
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualGateway/{virtualGatewayName}/gatewayRoutes/{gatewayRouteName}
method: delete
operationId: DeleteGatewayRoute
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualGateway/{virtualGatewayName}/gatewayRoutes/{gatewayRouteName}
method: get
operationId: DescribeGatewayRoute
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualGateway/{virtualGatewayName}/gatewayRoutes/{gatewayRouteName}
method: put
operationId: UpdateGatewayRoute
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}
method: delete
operationId: DeleteMesh
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}
method: get
operationId: DescribeMesh
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}
method: put
operationId: UpdateMesh
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualRouter/{virtualRouterName}/routes/{routeName}
method: delete
operationId: DeleteRoute
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualRouter/{virtualRouterName}/routes/{routeName}
method: get
operationId: DescribeRoute
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualRouter/{virtualRouterName}/routes/{routeName}
method: put
operationId: UpdateRoute
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualGateways/{virtualGatewayName}
method: delete
operationId: DeleteVirtualGateway
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualGateways/{virtualGatewayName}
method: get
operationId: DescribeVirtualGateway
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualGateways/{virtualGatewayName}
method: put
operationId: UpdateVirtualGateway
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualNodes/{virtualNodeName}
method: delete
operationId: DeleteVirtualNode
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualNodes/{virtualNodeName}
method: get
operationId: DescribeVirtualNode
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualNodes/{virtualNodeName}
method: put
operationId: UpdateVirtualNode
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualRouters/{virtualRouterName}
method: delete
operationId: DeleteVirtualRouter
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualRouters/{virtualRouterName}
method: get
operationId: DescribeVirtualRouter
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualRouters/{virtualRouterName}
method: put
operationId: UpdateVirtualRouter
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualServices/{virtualServiceName}
method: delete
operationId: DeleteVirtualService
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/meshes/{meshName}/virtualServices/{virtualServiceName}
method: get
operationId: DescribeVirtualService
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/meshes/{meshName}/virtualServices/{virtualServiceName}
method: put
operationId: UpdateVirtualService
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/tags#resourceArn
method: get
operationId: ListTagsForResource
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v20190125/tag#resourceArn
method: put
operationId: TagResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v20190125/untag#resourceArn
method: put
operationId: UntagResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required