Certifyos · Agentic Access

Certifyos Agentic Access

x-agentic-access generated

Certifyos exposes 520 API operations that an AI agent could call, of which 350 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 170 read, 285 write, 4 physical, and 61 safety-critical.

61 operations are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

CompanyHealthcareProvider DataCredentialingLicensingPayer EnrollmentPrimary Source VerificationProvider Network ManagementRoster ManagementCompliance MonitoringHealthcare APIWebhooks
Operations: 520 Acting: 350 Human-in-the-loop: 61 Method: generated

By consequence

read 170 write 285 physical 4 safety-critical 61

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
POST /auth-tokens/v2/api safety-critical required
POST /credentialing-workflows/{id}/notes safety-critical required
PATCH /credentialing-workflows/{id}/notes/{noteId} safety-critical required
PATCH /credentialing-workflows/{id}/revert-status safety-critical required
POST /credentialing-workflows/{workflowId}/override-timeline-events safety-critical required
POST /facilities/{certifyFacilityId}/locations/{certifyLocationId}/terminate safety-critical required
POST /facilities/{id}/networks/{networkId}/terminate safety-critical required
POST /facility-credentialing-workflows/{workflowId}/override-timeline-events safety-critical required
PATCH /flags safety-critical required
PATCH /flags/bulk-mark-read safety-critical required
PATCH /flags/bulk-mark-unread safety-critical required
PATCH /flags/webhook/{id}/mark-read safety-critical required
PATCH /flags/{id}/activate safety-critical required
PATCH /flags/{id}/deactivate safety-critical required
POST /flags/{id}/mark-all-read-for-provider safety-critical required
PATCH /flags/{id}/mark-read safety-critical required
PATCH /flags/{id}/mark-unread safety-critical required
POST /forms/submissions safety-critical required
PUT /groups/locations/{locationId}/networks/terminate safety-critical required
PUT /groups/locations/{locationId}/terminate safety-critical required
PATCH /groups/{groupId}/networks/terminate safety-critical required
POST /groups/{id}/specialties/terminate safety-critical required
PUT /practitioners/practitioner-role-assignments/{id}/terminate safety-critical required
PUT /practitioners/tenant-practitioner-specialties/terminate safety-critical required
PUT /practitioners/terminate safety-critical required

Source

Agentic Access

Raw ↑ 
generated: '2026-08-09'
method: generated
source: openapi/certify-api-service-openapi.yml, openapi/certify-application-openapi.json, openapi/certify-roster-service-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 520
  by_action_class:
    acting: 350
    connected: 170
  by_consequence:
    write: 285
    read: 170
    physical: 4
    safety-critical: 61
  human_in_the_loop_required: 61
operations:
- path: /addresses/standardize
  method: post
  operationId: standardizeAddress
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/egress-templates
  method: get
  operationId: listEgressTemplates
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/egress-templates
  method: post
  operationId: createEgressTemplate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/egress-templates/{templateId}
  method: put
  operationId: updateEgressTemplate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/v1/egress-templates/{templateId}
  method: get
  operationId: getEgressTemplate
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/v1/egress-templates/{templateId}
  method: delete
  operationId: deleteEgressTemplate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /auth/client-credentials
  method: post
  operationId: clientCredentials
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /auth/login
  method: post
  operationId: authenticateUser
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /contracts
  method: get
  operationId: contractsFindMany
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /contracts
  method: post
  operationId: contractsCreate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /contracts/{id}
  method: put
  operationId: contractsReplace
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /contracts/{id}
  method: get
  operationId: contractsFindById
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /contracts/{id}
  method: delete
  operationId: contractsDelete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-outreaches
  method: post
  operationId: sendCredentialingOutreach
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-outreaches/attachments/{attachmentId}/download
  method: get
  operationId: downloadEmailAttachment
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /credentialing-outreaches/workflow/{workflowId}
  method: get
  operationId: listCredentialingOutreaches
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /credentialing-outreaches/{id}
  method: get
  operationId: getCredentialingOutreach
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /credentialing-outreaches/{id}/details
  method: get
  operationId: getCredentialingOutreachDetail
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /credentialing-workflows
  method: get
  operationId: getCredentialingWorkflows
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /credentialing-workflows
  method: post
  operationId: createCredentialingWorkflow
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/assignments
  method: post
  operationId: createBulkAssignment
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/bulk-create
  method: post
  operationId: createBulkCredentialingWorkflows
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/cloud-create
  method: post
  operationId: cloudCreateCredentialingWorkflow
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/data-pipeline-callback
  method: post
  operationId: dataPipelineCallback
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/dmf-check
  method: post
  operationId: dmfCheck
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/replay-webhooks
  method: post
  operationId: replayWebhooks
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/timeline-events
  method: post
  operationId: bulkStatusChange
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/v2/bulk-create
  method: post
  operationId: createBulkCredentialingWorkflowsV2
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{id}
  method: put
  operationId: updateCredentialingWorkflow
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{id}
  method: get
  operationId: getCredentialingWorkflow
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /credentialing-workflows/{id}
  method: delete
  operationId: deleteCredentialingWorkflow
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{id}/assignments
  method: post
  operationId: createAssignment
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{id}/generate-board-cert-pdf
  method: post
  operationId: generateBoardCertPdf
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{id}/generate-npdb-pdf
  method: post
  operationId: generateNpdbPdf
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{id}/generate-psv
  method: post
  operationId: generateCredentialingWorkflowPsv
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{id}/generate-sanction-pdf
  method: post
  operationId: generateSanctionPdf
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{id}/latest-psv-pdf
  method: get
  operationId: getLatestPsvPdf
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /credentialing-workflows/{workflowId}/addresses
  method: put
  operationId: updateCredentialingWorkflowAddresses
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/attachments
  method: post
  operationId: uploadCredentialingWorkflowAttachment
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/attachments
  method: delete
  operationId: deleteCredentialingWorkflowAttachment
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/credentialing-cycle
  method: patch
  operationId: updateCredentialingCycle
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - U:CW
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/emails
  method: put
  operationId: updateEmailsInCredentialingWorkflow
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/line-of-business
  method: patch
  operationId: updateLineOfBusiness
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - U:CW
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/notes
  method: get
  operationId: getNotes
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /credentialing-workflows/{workflowId}/notes
  method: post
  operationId: createNote
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/notes/{noteId}
  method: put
  operationId: updateNote
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/notes/{noteId}
  method: get
  operationId: getNoteById
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /credentialing-workflows/{workflowId}/notes/{noteId}
  method: delete
  operationId: deleteNote
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/override-timeline-events
  method: post
  operationId: createTimelineEventOverride
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /credentialing-workflows/{workflowId}/phone-numbers
  method: put
  operationId: updatePhoneNumbersInCredentialingWorkflow
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/pipeline-runs
  method: post
  operationId: runPipeline
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/pipeline-runs
  method: get
  operationId: getPipelineRuns
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /credentialing-workflows/{workflowId}/pipeline-runs/npdb-required-fields-check
  method: get
  operationId: checkNpdbRequiredFields
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /credentialing-workflows/{workflowId}/pipeline-runs/{id}
  method: get
  operationId: getPipelineRunById
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /credentialing-workflows/{workflowId}/practitioner-file-type
  method: patch
  operationId: updatePractitionerFileType
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - U:CW
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/records/{recordId}/verify
  method: patch
  operationId: verifyCredentialingWorkflowRecord
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/states-to-credential
  method: patch
  operationId: updateStatesToCredential
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - U:CW
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/supporting-documents
  method: put
  operationId: updateSupportingDocumentsForCredentialingWorkflow
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/supporting-documents
  method: post
  operationId: createSupportingDocumentForCredentialingWorkflow
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/timeline-events
  method: get
  operationId: getTimelineEvents
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /credentialing-workflows/{workflowId}/timeline-events
  method: post
  operationId: createTimelineEvent
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/timeline-events/latest
  method: delete
  operationId: deleteLatestTimelineEvent
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/timeline-events/status-options
  method: get
  operationId: getTimelineEventStatusOptions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /credentialing-workflows/{workflowId}/timeline-events/{eventId}
  method: patch
  operationId: updateTimelineEvent
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/userdefinedfields
  method: put
  operationId: updateCredentialingWorkflowUserDefinedFields
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/{sectionName}
  method: post
  operationId: createSectionRecord
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/{sectionName}/{recordId}
  method: patch
  operationId: updateSectionRecord
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /credentialing-workflows/{workflowId}/{sectionName}/{recordId}
  method: delete
  operationId: deleteSectionRecord
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /directory/{entityType}/exports
  method: post
  operationId: startDirectoryJob
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /directory/{entityType}/exports/{exportJobId}
  method: get
  operationId: getDirectoryJobStatus
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /facilities
  method: post
  operationId: facilityUpsert
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities
  method: get
  operationId: facilityFindMany
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /facilities/tenant-facility-specialties/specialty
  method: patch
  operationId: updateTenantFacilitySpecialty
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities/tenant-group-facility-location-specialties/specialty
  method: patch
  operationId: correctTenantGroupFacilityLocationSpecialty
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities/tenant-group-facility-network-specialties/specialty
  method: patch
  operationId: correctTenantGroupFacilityNetworkSpecialty
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities/tenant-group-facility-specialties/specialty
  method: patch
  operationId: correctTenantGroupFacilitySpecialty
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities/{certifyFacilityId}/groups/{certifyGroupId}/effective-date
  method: put
  operationId: updateFacilityGroupEffectiveDate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities/{certifyFacilityId}/groups/{certifyGroupId}/networks/{networkId}/effective-date
  method: put
  operationId: updateFacilityGroupNetworkEffectiveDate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities/{certifyFacilityId}/locations
  method: post
  operationId: facilityAddLocation
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities/{certifyFacilityId}/locations/{certifyLocationId}
  method: put
  operationId: facilityUpdateLocation
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities/{certifyFacilityId}/locations/{certifyLocationId}/terminate
  method: post
  operationId: terminateFacilityLocation
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /facilities/{certifyFacilityId}/locations/{certifyLocationId}/termination-impact
  method: get
  operationId: getFacilityLocationTerminationImpact
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /facilities/{id}
  method: put
  operationId: facilityUpdate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities/{id}
  method: get
  operationId: facilityGet
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /facilities/{id}/accreditations
  method: put
  operationId: updateFacilityAccreditations
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities/{id}/certificates
  method: put
  operationId: updateFacilityCertificates
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities/{id}/insurances
  method: put
  operationId: updateFacilityInsurances
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities/{id}/licenses
  method: put
  operationId: updateFacilityLicenses
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities/{id}/networks
  method: post
  operationId: associateFacilityWithNetwork
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities/{id}/networks/{networkId}/terminate
  method: post
  operationId: terminateFacilityNetworkParticipation
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /facilities/{id}/relationships/all
  method: get
  operationId: getAllFacilityRelationships
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /facilities/{id}/specialties
  method: patch
  operationId: manageFacilitySpecialties
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities/{id}/specialties
  method: post
  operationId: facilityAddSpecialty
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /facilities/{id}/supporting-documents
  method: put
  operationId: updateFacilitySupportingDocument
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      -

# --- truncated at 32 KB (168 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/certifyos/refs/heads/main/agentic-access/certifyos-agentic-access.yml