Box · Agentic Access

Box Agentic Access

x-agentic-access generated

Box exposes 537 API operations that an AI agent could call, of which 291 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 246 read, 266 write, 11 physical, and 14 safety-critical.

14 operations are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

Cloud StorageCollaborationContent ManagementDocumentsEnterpriseFile Sharing
Operations: 537 Acting: 291 Human-in-the-loop: 14 Method: generated

By consequence

read 246 write 266 physical 11 safety-critical 14

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
POST /files/{file_id}/metadata/global/boxSkillsCards safety-critical required
PUT /files/{file_id}/metadata/global/boxSkillsCards safety-critical required
DELETE /files/{file_id}/metadata/global/boxSkillsCards safety-critical required
POST /files/{file_id}/metadata/global/boxSkillsCards safety-critical required
PUT /files/{file_id}/metadata/global/boxSkillsCards safety-critical required
DELETE /files/{file_id}/metadata/global/boxSkillsCards safety-critical required
POST /groups/terminate_sessions safety-critical required
POST /groups/terminate_sessions safety-critical required
POST /oauth2/revoke safety-critical required
POST /oauth2/revoke safety-critical required
PUT /skill_invocations/{skill_id} safety-critical required
PUT /skill_invocations/{skill_id} safety-critical required
POST /users/terminate_sessions safety-critical required
POST /users/terminate_sessions safety-critical required
POST /group_memberships physical conditional
POST /group_memberships physical conditional
PUT /group_memberships/{group_membership_id} physical conditional
DELETE /group_memberships/{group_membership_id} physical conditional
PUT /group_memberships/{group_membership_id} physical conditional
DELETE /group_memberships/{group_membership_id} physical conditional
POST /sign_requests/{sign_request_id}/resend physical conditional
POST /sign_requests/{sign_request_id}/resend physical conditional
PUT /users/{user_id}/folders/0 physical conditional
PUT /users/{user_id}/folders/0 physical conditional
PUT /users/{user_id}/folders/0 physical conditional

Source

Agentic Access

Raw ↑ 
generated: '2026-07-15'
method: generated
source: openapi/authorize-openapi-original.yml, openapi/box-openapi-original.yml, openapi/collaboration-whitelist-entries-openapi-original.yml,
  openapi/collaboration-whitelist-exempt-targets-openapi-original.yml, openapi/collaborations-openapi-original.yml,
  openapi/collections-openapi-original.yml, openapi/comments-openapi-original.yml, openapi/device-pinners-openapi-original.yml,
  openapi/enterprises-openapi-original.yml, openapi/events-openapi-original.yml, openapi/file-requests-openapi-original.yml,
  openapi/file-version-legal-holds-openapi-original.yml, openapi/file-version-retentions-openapi-original.yml,
  openapi/files-openapi-original.yml, openapi/folder-locks-openapi-original.yml, openapi/folders-openapi-original.yml,
  openapi/group-memberships-openapi-original.yml, openapi/groups-openapi-original.yml, openapi/integration-mappings-openapi-original.yml,
  openapi/invites-openapi-original.yml, openapi/legal-hold-policies-openapi-original.yml, openapi/legal-hold-policy-assignments-openapi-original.yml,
  openapi/metadata-cascade-policies-openapi-original.yml, openapi/metadata-queries-openapi-original.yml,
  openapi/metadata-templates-openapi-original.yml, openapi/oauth2-openapi-original.yml, openapi/recent-items-openapi-original.yml,
  openapi/retention-policies-openapi-original.yml, openapi/retention-policy-assignments-openapi-original.yml,
  openapi/search-openapi-original.yml, openapi/shared-items-openapi-original.yml, openapi/shared-itemsfolders-openapi-original.yml,
  openapi/shared-itemsweb-links-openapi-original.yml, openapi/shield-information-barrier-reports-openapi-original.yml,
  openapi/shield-information-barrier-segment-members-openapi-original.yml, openapi/shield-information-barrier-segment-restrictions-openapi-original.yml,
  openapi/shield-information-barrier-segments-openapi-original.yml, openapi/shield-information-barriers-openapi-original.yml,
  openapi/sign-requests-openapi-original.yml, openapi/sign-templates-openapi-original.yml, openapi/skill-invocations-openapi-original.yml,
  openapi/storage-policies-openapi-original.yml, openapi/storage-policy-assignments-openapi-original.yml,
  openapi/task-assignments-openapi-original.yml, openapi/tasks-openapi-original.yml, openapi/terms-of-service-user-statuses-openapi-original.yml,
  openapi/terms-of-services-openapi-original.yml, openapi/users-openapi-original.yml, openapi/web-links-openapi-original.yml,
  openapi/webhooks-openapi-original.yml, openapi/workflows-openapi-original.yml, openapi/zip-downloads-openapi-original.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 537
  by_action_class:
    connected: 246
    acting: 291
  by_consequence:
    read: 246
    write: 266
    safety-critical: 14
    physical: 11
  human_in_the_loop_required: 14
operations:
- path: /authorize
  method: get
  operationId: get_authorize
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /authorize
  method: get
  operationId: get_authorize
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /oauth2/token
  method: post
  operationId: post_oauth2_token
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /oauth2/token#refresh
  method: post
  operationId: post_oauth2_token#refresh
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /oauth2/revoke
  method: post
  operationId: post_oauth2_revoke
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /files/{file_id}
  method: get
  operationId: get_files_id
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/{file_id}
  method: post
  operationId: post_files_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}
  method: put
  operationId: put_files_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}
  method: delete
  operationId: delete_files_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}/content
  method: get
  operationId: get_files_id_content
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/{file_id}/content
  method: post
  operationId: post_files_id_content
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/content
  method: options
  operationId: options_files_content
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/content
  method: post
  operationId: post_files_content
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/upload_sessions
  method: post
  operationId: post_files_upload_sessions
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}/upload_sessions
  method: post
  operationId: post_files_id_upload_sessions
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/upload_sessions/{upload_session_id}
  method: get
  operationId: get_files_upload_sessions_id
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/upload_sessions/{upload_session_id}
  method: put
  operationId: put_files_upload_sessions_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/upload_sessions/{upload_session_id}
  method: delete
  operationId: delete_files_upload_sessions_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/upload_sessions/{upload_session_id}/parts
  method: get
  operationId: get_files_upload_sessions_id_parts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/upload_sessions/{upload_session_id}/commit
  method: post
  operationId: post_files_upload_sessions_id_commit
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}/copy
  method: post
  operationId: post_files_id_copy
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}/thumbnail.{extension}
  method: get
  operationId: get_files_id_thumbnail_id
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/{file_id}/collaborations
  method: get
  operationId: get_files_id_collaborations
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/{file_id}/comments
  method: get
  operationId: get_files_id_comments
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/{file_id}/tasks
  method: get
  operationId: get_files_id_tasks
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/{file_id}/trash
  method: get
  operationId: get_files_id_trash
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/{file_id}/trash
  method: delete
  operationId: delete_files_id_trash
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}/versions
  method: get
  operationId: get_files_id_versions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/{file_id}/versions/{file_version_id}
  method: get
  operationId: get_files_id_versions_id
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/{file_id}/versions/{file_version_id}
  method: delete
  operationId: delete_files_id_versions_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}/versions/{file_version_id}
  method: put
  operationId: put_files_id_versions_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}/versions/current
  method: post
  operationId: post_files_id_versions_current
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}/metadata
  method: get
  operationId: get_files_id_metadata
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/{file_id}/metadata/enterprise/securityClassification-6VMVochwUWo
  method: get
  operationId: get_files_id_metadata_enterprise_securityClassification-6VMVochwUWo
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/{file_id}/metadata/enterprise/securityClassification-6VMVochwUWo
  method: post
  operationId: post_files_id_metadata_enterprise_securityClassification-6VMVochwUWo
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}/metadata/enterprise/securityClassification-6VMVochwUWo
  method: put
  operationId: put_files_id_metadata_enterprise_securityClassification-6VMVochwUWo
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}/metadata/enterprise/securityClassification-6VMVochwUWo
  method: delete
  operationId: delete_files_id_metadata_enterprise_securityClassification-6VMVochwUWo
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}/metadata/{scope}/{template_key}
  method: get
  operationId: get_files_id_metadata_id_id
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/{file_id}/metadata/{scope}/{template_key}
  method: post
  operationId: post_files_id_metadata_id_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}/metadata/{scope}/{template_key}
  method: put
  operationId: put_files_id_metadata_id_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}/metadata/{scope}/{template_key}
  method: delete
  operationId: delete_files_id_metadata_id_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}/metadata/global/boxSkillsCards
  method: get
  operationId: get_files_id_metadata_global_boxSkillsCards
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/{file_id}/metadata/global/boxSkillsCards
  method: post
  operationId: post_files_id_metadata_global_boxSkillsCards
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /files/{file_id}/metadata/global/boxSkillsCards
  method: put
  operationId: put_files_id_metadata_global_boxSkillsCards
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /files/{file_id}/metadata/global/boxSkillsCards
  method: delete
  operationId: delete_files_id_metadata_global_boxSkillsCards
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /files/{file_id}/watermark
  method: get
  operationId: get_files_id_watermark
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /files/{file_id}/watermark
  method: put
  operationId: put_files_id_watermark
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{file_id}/watermark
  method: delete
  operationId: delete_files_id_watermark
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /file_requests/{file_request_id}
  method: get
  operationId: get_file_requests_id
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /file_requests/{file_request_id}
  method: put
  operationId: put_file_requests_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /file_requests/{file_request_id}
  method: delete
  operationId: delete_file_requests_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /file_requests/{file_request_id}/copy
  method: post
  operationId: post_file_requests_id_copy
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /folders/{folder_id}
  method: get
  operationId: get_folders_id
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /folders/{folder_id}
  method: post
  operationId: post_folders_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /folders/{folder_id}
  method: put
  operationId: put_folders_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /folders/{folder_id}
  method: delete
  operationId: delete_folders_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /folders/{folder_id}/items
  method: get
  operationId: get_folders_id_items
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /folders
  method: post
  operationId: post_folders
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /folders/{folder_id}/copy
  method: post
  operationId: post_folders_id_copy
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /folders/{folder_id}/collaborations
  method: get
  operationId: get_folders_id_collaborations
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /folders/{folder_id}/trash
  method: get
  operationId: get_folders_id_trash
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /folders/{folder_id}/trash
  method: delete
  operationId: delete_folders_id_trash
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /folders/{folder_id}/metadata
  method: get
  operationId: get_folders_id_metadata
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /folders/{folder_id}/metadata/enterprise/securityClassification-6VMVochwUWo
  method: get
  operationId: get_folders_id_metadata_enterprise_securityClassification-6VMVochwUWo
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /folders/{folder_id}/metadata/enterprise/securityClassification-6VMVochwUWo
  method: post
  operationId: post_folders_id_metadata_enterprise_securityClassification-6VMVochwUWo
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /folders/{folder_id}/metadata/enterprise/securityClassification-6VMVochwUWo
  method: put
  operationId: put_folders_id_metadata_enterprise_securityClassification-6VMVochwUWo
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /folders/{folder_id}/metadata/enterprise/securityClassification-6VMVochwUWo
  method: delete
  operationId: delete_folders_id_metadata_enterprise_securityClassification-6VMVochwUWo
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /folders/{folder_id}/metadata/{scope}/{template_key}
  method: get
  operationId: get_folders_id_metadata_id_id
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /folders/{folder_id}/metadata/{scope}/{template_key}
  method: post
  operationId: post_folders_id_metadata_id_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /folders/{folder_id}/metadata/{scope}/{template_key}
  method: put
  operationId: put_folders_id_metadata_id_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /folders/{folder_id}/metadata/{scope}/{template_key}
  method: delete
  operationId: delete_folders_id_metadata_id_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /folders/trash/items
  method: get
  operationId: get_folders_trash_items
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /folders/{folder_id}/watermark
  method: get
  operationId: get_folders_id_watermark
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /folders/{folder_id}/watermark
  method: put
  operationId: put_folders_id_watermark
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /folders/{folder_id}/watermark
  method: delete
  operationId: delete_folders_id_watermark
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /folder_locks
  method: get
  operationId: get_folder_locks
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /folder_locks
  method: post
  operationId: post_folder_locks
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /folder_locks/{folder_lock_id}
  method: delete
  operationId: delete_folder_locks_id
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /metadata_templates
  method: get
  operationId: get_metadata_templates
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /metadata_templates/enterprise/securityClassification-6VMVochwUWo/schema
  method: get
  operationId: get_metadata_templates_enterprise_securityClassification-6VMVochwUWo_schema
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /metadata_templates/enterprise/securityClassification-6VMVochwUWo/schema#add
  method: put
  operationId: put_metadata_templates_enterprise_securityClassification-6VMVochwUWo_schema#add
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /metadata_templates/enterprise/securityClassification-6VMVochwUWo/schema#update
  method: put
  operationId: put_metadata_templates_enterprise_securityClassification-6VMVochwUWo_schema#update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /metadata_templates/{scope}/{template_key}/schema
  method: get
  operationId: get_metadata_templates_id_id_schema
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /metadata_templates/{scope}/{template_key}/schema
  method: put
  operationId: put_metadata_templates_id_id_schema
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /metadata_templates/{scope}/{template_key}/schema
  method: delete
  operationId: delete_metadata_templates_id_id_schema
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /metadata_templates/{template_id}
  method: get
  operationId: get_metadata_templates_id
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /metadata_templates/global
  method: get
  operationId: get_metadata_templates_global
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /metadata_templates/enterprise
  method: get
  operationId: get_metadata_templates_enterprise
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /metadata_templates/schema
  method: post
  operationId: post_metadata_templates_schema
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /metadata_templates/schema#classifications
  method: post
  operationId: post_metadata_templates_schema#classifications
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /metadata_cascade_policies
  method: get
  operationId: get_metadata_cascade_policies
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /metadata_cascade_policies
  method: post
  operationId: post_metadata_cascade_policies
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /metadata_cascade_policies/{metadata_cascade_policy_id}
  method: get
  operationId: get_metadata_cascade_policies_id
  x-agentic-access:
    actio

# --- truncated at 32 KB (166 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/box/refs/heads/main/agentic-access/box-agentic-access.yml