BigCommerce · Agentic Access

BigCommerce Agentic Access

x-agentic-access generated

BigCommerce exposes 547 API operations that an AI agent could call, of which 341 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 206 read, 289 write, 50 physical, and 2 safety-critical.

2 operations are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

E-CommerceRetailCatalogOrdersCheckoutPaymentsSaaS
Operations: 547 Acting: 341 Human-in-the-loop: 2 Method: generated

By consequence

read 206 write 289 physical 50 safety-critical 2

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
DELETE /marketing/email-templates/{template-name} safety-critical required
DELETE /storefront/api-token safety-critical required
PUT /catalog/categories/{category_id}/products/sort-order physical conditional
PUT /channels/{channel_id}/site/checkout-url physical conditional
DELETE /channels/{channel_id}/site/checkout-url physical conditional
POST /check_connection_options physical conditional
PUT /checkouts/settings physical conditional
PUT /checkouts/{checkoutId} physical conditional
PUT /checkouts/{checkoutId} physical conditional
POST /checkouts/{checkoutId}/billing-address physical conditional
POST /checkouts/{checkoutId}/billing-address physical conditional
PUT /checkouts/{checkoutId}/billing-address/{addressId} physical conditional
PUT /checkouts/{checkoutId}/billing-address/{addressId} physical conditional
PUT /checkouts/{checkoutId}/carts/{cartId}/items/{itemId} physical conditional
DELETE /checkouts/{checkoutId}/carts/{cartId}/items/{itemId} physical conditional
POST /checkouts/{checkoutId}/consignments physical conditional
POST /checkouts/{checkoutId}/consignments physical conditional
PUT /checkouts/{checkoutId}/consignments/{consignmentId} physical conditional
DELETE /checkouts/{checkoutId}/consignments/{consignmentId} physical conditional
PUT /checkouts/{checkoutId}/consignments/{consignmentId} physical conditional
DELETE /checkouts/{checkoutId}/consignments/{consignmentId} physical conditional
POST /checkouts/{checkoutId}/coupons physical conditional
POST /checkouts/{checkoutId}/coupons physical conditional
DELETE /checkouts/{checkoutId}/coupons/{couponCode} physical conditional
DELETE /checkouts/{checkoutId}/coupons/{couponCode} physical conditional

Source

Agentic Access

Raw ↑ 
generated: '2026-07-15'
method: generated
source: openapi/abandoned-cart-emails-openapi-original.yml, openapi/abandoned-carts-openapi-original.yml,
  openapi/accepted-payment-methods-openapi-original.yml, openapi/accepted-payment-methods-openapi.yml,
  openapi/carts-openapi-original.yml, openapi/catalog-brands-openapi-original.yml, openapi/catalog-categories-openapi-original.yml,
  openapi/catalog-category-trees-openapi-original.yml, openapi/catalog-product-modifiers-openapi-original.yml,
  openapi/catalog-product-variant-options-openapi-original.yml, openapi/catalog-product-variants-openapi-original.yml,
  openapi/catalog-products-openapi-original.yml, openapi/channels-openapi-original.yml, openapi/checkouts-openapi-original.yml,
  openapi/content-openapi-original.yml, openapi/currencies-openapi-original.yml, openapi/current-customer-openapi-original.yml,
  openapi/custom-template-associations-openapi-original.yml, openapi/customer-login-sso-openapi-original.yml,
  openapi/customers-openapi-original.yml, openapi/email-templates-openapi-original.yml, openapi/geography-openapi-original.yml,
  openapi/marketing-openapi-original.yml, openapi/orders-openapi-original.yml, openapi/pages-openapi-original.yml,
  openapi/payment-access-token-openapi-original.yml, openapi/payment-access-token-openapi.yml,
  openapi/payment-methods-deprecated-openapi-original.yml, openapi/payment-processing-openapi-original.yml,
  openapi/price-lists-openapi-original.yml, openapi/pricing-openapi-original.yml, openapi/redirects-openapi-original.yml,
  openapi/scripts-openapi-original.yml, openapi/settings-openapi-original.yml, openapi/shipping-openapi-original.yml,
  openapi/shipping-providers-openapi-original.yml, openapi/sites-openapi-original.yml, openapi/store-information-openapi-original.yml,
  openapi/store-logs-openapi-original.yml, openapi/storefront-carts-openapi-original.yml, openapi/storefront-checkouts-openapi-original.yml,
  openapi/storefront-cookie-consent-openapi-original.yml, openapi/storefront-customers-openapi-original.yml,
  openapi/storefront-form-fields-beta-openapi-original.yml, openapi/storefront-orders-openapi-original.yml,
  openapi/storefront-subscriptions-openapi-original.yml, openapi/storefront-token-openapi-original.yml,
  openapi/subscribers-openapi-original.yml, openapi/tax-classes-openapi-original.yml, openapi/tax-properties-openapi-original.yml,
  openapi/tax-provider-connection-openapi-original.yml, openapi/tax-provider-openapi-original.yml,
  openapi/tax-rates-zones-openapi-original.yml, openapi/tax-settings-openapi-original.yml, openapi/tax-zone-check-openapi-original.yml,
  openapi/themes-openapi-original.yml, openapi/webhooks-v3-openapi-original.yml, openapi/widgets-openapi-original.yml,
  openapi/wishlist-openapi-original.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 547
  by_action_class:
    connected: 206
    acting: 341
  by_consequence:
    read: 206
    write: 289
    physical: 50
    safety-critical: 2
  human_in_the_loop_required: 2
operations:
- path: /marketing/abandoned-cart-emails
  method: get
  operationId: getAbandonedCartEmailTemplates
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /marketing/abandoned-cart-emails
  method: post
  operationId: createAbandonedCartEmailTemplate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /marketing/abandoned-cart-emails/{id}
  method: get
  operationId: getAbandonedCartEmailTemplate
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /marketing/abandoned-cart-emails/{id}
  method: put
  operationId: updateAbandonedCartEmailTemplate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /marketing/abandoned-cart-emails/{id}
  method: delete
  operationId: deleteAbandonedCartEmailTemplate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /marketing/abandoned-cart-emails/default
  method: get
  operationId: getDefaultAbandonedCartEmailTemplate
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /marketing/abandoned-cart-emails/settings
  method: get
  operationId: getAbandonedCartEmailTemplateSettings
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /marketing/abandoned-cart-emails/settings
  method: put
  operationId: updateAbandonedCartEmailTemplateSettings
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /abandoned-carts/settings
  method: get
  operationId: getGlobalAbandonedCartSettings
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /abandoned-carts/settings
  method: put
  operationId: updateGlobalAbandonedCartSettings
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /abandoned-carts/settings/channels/{channel_id}
  method: get
  operationId: getChannelAbandonedCartSettings
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /abandoned-carts/settings/channels/{channel_id}
  method: put
  operationId: updateChannelAbandonedCartSettings
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /abandoned-carts/{token}
  method: get
  operationId: getAbandonedCarts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /payments/methods
  method: get
  operationId: getPaymentMethods
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /payments/methods
  method: get
  operationId: getPaymentMethods
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /carts
  method: post
  operationId: createCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /carts/{cartId}/items
  method: post
  operationId: addCartLineItems
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /carts/{cartId}/redirect_urls
  method: post
  operationId: createCartRedirectURL
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /carts/{cartId}/items/{itemId}
  method: put
  operationId: updateCartLineItem
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /carts/{cartId}/items/{itemId}
  method: delete
  operationId: deleteCartLineItem
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /carts/{cartId}
  method: get
  operationId: getCart
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /carts/{cartId}
  method: put
  operationId: updateCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /carts/{cartId}
  method: delete
  operationId: deleteCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /carts/settings
  method: get
  operationId: getGlobalCartSettings
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /carts/settings
  method: put
  operationId: updateGlobalCartSettings
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /carts/settings/channels/{channel_id}
  method: get
  operationId: getChannelCartSettings
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /carts/settings/channels/{channel_id}
  method: put
  operationId: updateChannelCartSettings
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /carts/{cart_id}/metafields
  method: get
  operationId: getCartMetafields
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /carts/{cart_id}/metafields
  method: post
  operationId: createCartMetafield
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /carts/{cart_id}/metafields/{metafield_id}
  method: get
  operationId: getCartMetafield
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /carts/{cart_id}/metafields/{metafield_id}
  method: put
  operationId: updateCartMetafield
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /carts/{cart_id}/metafields/{metafield_id}
  method: delete
  operationId: deleteCartMetafield
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /carts/metafields
  method: get
  operationId: getCartsMetafields
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /carts/metafields
  method: post
  operationId: createCartsMetafields
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /carts/metafields
  method: put
  operationId: updateCartsMetafields
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /carts/metafields
  method: delete
  operationId: deleteCartsMetafields
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/brands
  method: get
  operationId: getBrands
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/brands
  method: post
  operationId: createBrand
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/brands
  method: delete
  operationId: deleteBrands
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/brands/{brand_id}
  method: get
  operationId: getBrand
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/brands/{brand_id}
  method: put
  operationId: updateBrand
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/brands/{brand_id}
  method: delete
  operationId: deleteBrand
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/brands/{brand_id}/metafields
  method: get
  operationId: getBrandMetafields
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/brands/{brand_id}/metafields
  method: post
  operationId: createBrandMetafield
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/brands/{brand_id}/metafields/{metafield_id}
  method: get
  operationId: getBrandMetafield
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/brands/{brand_id}/metafields/{metafield_id}
  method: put
  operationId: updateBrandMetafield
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/brands/{brand_id}/metafields/{metafield_id}
  method: delete
  operationId: deleteBrandMetafield
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/brands/{brand_id}/image
  method: post
  operationId: createBrandImage
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/brands/{brand_id}/image
  method: delete
  operationId: deleteBrandImage
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/brands/metafields
  method: get
  operationId: getBrandsMetafields
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/brands/metafields
  method: post
  operationId: createBrandsMetafields
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/brands/metafields
  method: put
  operationId: updateBrandsMetafields
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/brands/metafields
  method: delete
  operationId: deleteBrandsMetafields
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/categories
  method: get
  operationId: getCategories
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/categories
  method: post
  operationId: createCategory
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/categories
  method: delete
  operationId: deleteCategories
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/categories/{category_id}
  method: get
  operationId: getCategory
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/categories/{category_id}
  method: put
  operationId: updateCategory
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/categories/{category_id}
  method: delete
  operationId: deleteCategory
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/categories/{category_id}/metafields
  method: get
  operationId: getCategoryMetafields
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/categories/{category_id}/metafields
  method: post
  operationId: createCategoryMetafield
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/categories/{category_id}/metafields/{metafield_id}
  method: get
  operationId: getCategoryMetafield
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/categories/{category_id}/metafields/{metafield_id}
  method: put
  operationId: updateCategoryMetafield
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/categories/{category_id}/metafields/{metafield_id}
  method: delete
  operationId: deleteCategoryMetafield
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/categories/{category_id}/image
  method: post
  operationId: createCategoryImage
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/categories/{category_id}/image
  method: delete
  operationId: deleteCategoryImage
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/categories/{category_id}/products/sort-order
  method: get
  operationId: getCategorySortOrders
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/categories/{category_id}/products/sort-order
  method: put
  operationId: updateCategorySortOrders
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/categories/metafields
  method: get
  operationId: getCategoriesMetafields
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/categories/metafields
  method: post
  operationId: createCategoriesMetafields
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/categories/metafields
  method: put
  operationId: updateCategoriesMetafields
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/categories/metafields
  method: delete
  operationId: deleteCategoriesMetafields
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/trees/categories
  method: get
  operationId: getAllCategories
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/trees/categories
  method: post
  operationId: createCategories
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/trees/categories
  method: put
  operationId: updateCategories
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/trees/categories
  method: delete
  operationId: deleteTreeCategories
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/trees
  method: get
  operationId: getCategoryTrees
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/trees
  method: put
  operationId: upsertCategoryTrees
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/trees
  method: delete
  operationId: deleteCategoryTrees
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/trees/{tree_id}/categories
  method: get
  operationId: getCategoryTree
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/products/{product_id}/modifiers
  method: get
  operationId: getProductModifiers
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/products/{product_id}/modifiers
  method: post
  operationId: createProductModifier
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/products/{product_id}/modifiers/{modifier_id}
  method: get
  operationId: getProductModifier
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/products/{product_id}/modifiers/{modifier_id}
  method: put
  operationId: updateProductModifier
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/products/{product_id}/modifiers/{modifier_id}
  method: delete
  operationId: deleteProductModifier
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/products/{product_id}/modifiers/{modifier_id}/values
  method: get
  operationId: getProductModifierValues
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/products/{product_id}/modifiers/{modifier_id}/values
  method: post
  operationId: createProductModifierValue
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/products/{product_id}/modifiers/{modifier_id}/values/{value_id}
  method: get
  operationId: getProductModifierValue
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/products/{product_id}/modifiers/{modifier_id}/values/{value_id}
  method: put
  operationId: updateProductModifierValue
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/products/{product_id}/modifiers/{modifier_id}/values/{value_id}
  method: delete
  operationId: deleteProductModifierValue
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/products/{product_id}/modifiers/{modifier_id}/values/{value_id}/image
  method: post
  operationId: createProductModifierImage
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/products/{product_id}/options
  method: get
  operationId: getProductVariantOptions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/products/{product_id}/options
  method: post
  operationId: createProductVariantOption
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /catalog/products/{product_id}/options/{option_id}
  method: get
  operationId: getProductVariantOption
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /catalog/products/{product_id}/options/{option_id}
  method: put
  operationId: updateProductVariantOption
  x-agent

# --- truncated at 32 KB (169 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/bigcommerce/refs/heads/main/agentic-access/bigcommerce-agentic-access.yml