Censys · Agentic Access

Censys Agentic Access

x-agentic-access generated

Censys exposes 88 API operations that an AI agent could call, of which 36 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 52 read and 36 write.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

SecurityInternet IntelligenceAttack Surface ManagementThreat HuntingCyber Threat IntelligenceOSINTInternet ScanningCertificatesAsset Discovery
Operations: 88 Acting: 36 Human-in-the-loop: 0 Method: generated

By consequence

read 52 write 36

Source

Agentic Access

Raw ↑ 
generated: '2026-07-15'
method: generated
source: openapi/censys-asset-graph-openapi.yml, openapi/censys-platform-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 88
  by_action_class:
    connected: 52
    acting: 36
  by_consequence:
    read: 52
    write: 36
  human_in_the_loop_required: 0
operations:
- path: /api/v1/asset-graphs
  method: get
  operationId: list-asset-graphs
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/asset-graphs
  method: post
  operationId: create-asset-graph
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/asset-graphs/{graph_id}/excluded-assets
  method: get
  operationId: list-excluded-assets
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/asset-graphs/{graph_id}/excluded-assets
  method: post
  operationId: create-excluded-asset
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/asset-graphs/{graph_id}/excluded-assets/{excluded_asset_id}
  method: delete
  operationId: delete-excluded-asset
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/asset-graphs/{graph_id}/executions
  method: get
  operationId: list-graph-executions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/asset-graphs/{graph_id}/executions
  method: post
  operationId: create-graph-execution
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/asset-graphs/{graph_id}/executions/{execution_id}
  method: get
  operationId: get-graph-execution
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/asset-graphs/{graph_id}/executions/{execution_id}/assets
  method: get
  operationId: list-assets
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/asset-graphs/{graph_id}/executions/{execution_id}/assets/{asset_id}
  method: get
  operationId: get-asset
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/asset-graphs/{graph_id}/executions/{execution_id}/shards
  method: get
  operationId: list-shards
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/asset-graphs/{graph_id}/seeds
  method: get
  operationId: list-seeds
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/asset-graphs/{graph_id}/seeds
  method: post
  operationId: create-seed
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/asset-graphs/{graph_id}/seeds/{seed_id}
  method: delete
  operationId: delete-seed
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/asset-graphs/{id}
  method: delete
  operationId: delete-asset-graph
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/asset-graphs/{id}
  method: get
  operationId: get-asset-graph
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/risks/{risk_id}
  method: get
  operationId: get-risk-metadata
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/supplychains
  method: get
  operationId: v1-supply-chain-list-supply-chains
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/supplychains/suppliers
  method: get
  operationId: v1-supply-chain-search-suppliers
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v1/supplychains/suppliers
  method: post
  operationId: v1-supply-chain-add-suppliers
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v1/supplychains/suppliers/{supplier_id}
  method: delete
  operationId: v1-supply-chain-remove-supplier
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/accounts/organizations/{organization_id}
  method: get
  operationId: v3-accountmanagement-org-details
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/accounts/organizations/{organization_id}/audit-log-events
  method: get
  operationId: v3-accountmanagement-org-audit-log-events
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/accounts/organizations/{organization_id}/credits
  method: get
  operationId: v3-accountmanagement-org-credits
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/accounts/organizations/{organization_id}/credits/usage
  method: get
  operationId: v3-accountmanagement-org-credits-usage
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/accounts/organizations/{organization_id}/invitations
  method: post
  operationId: v3-accountmanagement-invite-user-to-org
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/accounts/organizations/{organization_id}/members
  method: get
  operationId: v3-accountmanagement-list-org-members
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/accounts/organizations/{organization_id}/members/{user_id}
  method: delete
  operationId: v3-accountmanagement-remove-org-member
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/accounts/organizations/{organization_id}/members/{user_id}
  method: patch
  operationId: v3-accountmanagement-update-org-member
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/accounts/organizations/{organization_id}/members/{user_id}/credits/usage
  method: get
  operationId: v3-accountmanagement-member-credits-usage
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/accounts/users/credits
  method: get
  operationId: v3-accountmanagement-user-credits
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/accounts/users/credits/usage
  method: get
  operationId: v3-accountmanagement-user-credits-usage
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/collections
  method: get
  operationId: v3-collections-crud-list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/collections
  method: post
  operationId: v3-collections-crud-create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/collections/{collection_uid}
  method: delete
  operationId: v3-collections-crud-delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/collections/{collection_uid}
  method: get
  operationId: v3-collections-crud-get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/collections/{collection_uid}
  method: put
  operationId: v3-collections-crud-update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/collections/{collection_uid}/events
  method: get
  operationId: v3-collections-list-events
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/collections/{collection_uid}/search/aggregate
  method: post
  operationId: v3-collections-search-aggregate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/collections/{collection_uid}/search/query
  method: post
  operationId: v3-collections-search-query
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/comments
  method: get
  operationId: v3-comments-list-comments
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/comments
  method: post
  operationId: v3-comments-create-comment
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/comments/{comment_id}
  method: delete
  operationId: v3-comments-delete-comment
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/comments/{comment_id}
  method: put
  operationId: v3-comments-update-comment
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/global/asset/certificate
  method: get
  operationId: v3-globaldata-asset-certificate-list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/global/asset/certificate
  method: post
  operationId: v3-globaldata-asset-certificate-list-post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/global/asset/certificate/raw
  method: get
  operationId: v3-globaldata-asset-certificate-list-raw
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/global/asset/certificate/raw
  method: post
  operationId: v3-globaldata-asset-certificate-list-raw-post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/global/asset/certificate/{certificate_id}
  method: get
  operationId: v3-globaldata-asset-certificate
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/global/asset/certificate/{certificate_id}/raw
  method: get
  operationId: v3-globaldata-asset-certificate-raw
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/global/asset/host
  method: get
  operationId: v3-globaldata-asset-host-list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/global/asset/host
  method: post
  operationId: v3-globaldata-asset-host-list-post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/global/asset/host/{host_id}
  method: get
  operationId: v3-globaldata-asset-host
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/global/asset/host/{host_id}/observations/services
  method: get
  operationId: v3-globaldata-service-on-host
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/global/asset/host/{host_id}/timeline
  method: get
  operationId: v3-globaldata-asset-host-timeline
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/global/asset/webproperty
  method: get
  operationId: v3-globaldata-asset-webproperty-list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/global/asset/webproperty
  method: post
  operationId: v3-globaldata-asset-webproperty-list-post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/global/asset/webproperty/{webproperty_id}
  method: get
  operationId: v3-globaldata-asset-webproperty
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/global/dns/resolutions/ip/{ip}/bounds
  method: get
  operationId: v3-globaldata-dns-ip-resolution-bound
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/global/dns/resolutions/ip/{ip}/ranges
  method: get
  operationId: v3-globaldata-dns-ip-resolution-ranges
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/global/dns/resolutions/{name}/bounds
  method: get
  operationId: v3-globaldata-dns-name-resolution-bound
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/global/dns/resolutions/{name}/ranges
  method: get
  operationId: v3-globaldata-dns-name-resolution-ranges
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/global/scans/rescan
  method: post
  operationId: v3-globaldata-scans-rescan
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/global/scans/{scan_id}
  method: get
  operationId: v3-globaldata-scans-get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/global/search/aggregate
  method: post
  operationId: v3-globaldata-search-aggregate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/global/search/convert
  method: post
  operationId: v3-globaldata-search-convert
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/global/search/query
  method: post
  operationId: v3-globaldata-search-query
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/tags
  method: get
  operationId: v3-tags-list-tags
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/tags
  method: post
  operationId: v3-tags-create-tag
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/tags/{tag_id}
  method: delete
  operationId: v3-tags-delete-tag
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/tags/{tag_id}
  method: get
  operationId: v3-tags-get-tag
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/tags/{tag_id}
  method: put
  operationId: v3-tags-update-tag
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/tags/{tag_id}/assignments
  method: get
  operationId: v3-tags-list-assignments
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/tags/{tag_id}/assignments
  method: post
  operationId: v3-tags-create-assignment
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/tags/{tag_id}/assignments/{assignment_id}
  method: delete
  operationId: v3-tags-delete-assignment
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/threat-hunting/censeye/jobs
  method: get
  operationId: v3-threathunting-censeye-jobs-list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/threat-hunting/censeye/jobs
  method: post
  operationId: v3-threathunting-censeye-jobs-create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/threat-hunting/censeye/jobs/{job_id}
  method: get
  operationId: v3-threathunting-censeye-jobs-get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/threat-hunting/censeye/jobs/{job_id}/results
  method: get
  operationId: v3-threathunting-censeye-job-results
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/threat-hunting/certificate/{certificate_id}/observations/hosts
  method: get
  operationId: v3-threathunting-get-host-observations-with-certificate
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/threat-hunting/host/{ip}/observations/endpoints
  method: get
  operationId: v3-threathunting-endpoint-observations-on-host
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/threat-hunting/host/{ip}/observations/fingerprints
  method: get
  operationId: v3-threathunting-fingerprint-observations-on-host
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/threat-hunting/host/{ip}/observations/threats
  method: get
  operationId: v3-threathunting-threats-on-host
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/threat-hunting/scans/discovery
  method: post
  operationId: v3-threathunting-scans-discovery
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/threat-hunting/scans/{scan_id}
  method: get
  operationId: v3-threathunting-scans-get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/threat-hunting/threats
  method: get
  operationId: v3-threathunting-threats-list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v3/threat-hunting/value-counts
  method: post
  operationId: v3-threathunting-value-counts
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v3/threat-hunting/web/{webproperty_id}/observations/threats
  method: get
  operationId: v3-threathunting-threats-on-web
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none