CJ Affiliate · Agentic Access

CJ Affiliate Agentic Access

x-agentic-access derived

CJ Affiliate exposes 24 API operations that an AI agent could call, of which 0 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 14 read and 6 write.

10 operations are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

Affiliate MarketingAffiliate NetworkCommissionProduct SearchPublishersAdvertiserGraphQLE-CommerceProduct FeedsConversion TrackingAttributionPerformance MarketingRetailCoupons

Operations: 24 Acting: 0 Human-in-the-loop: 10 Method: derived

By consequence

read 14 write 6

Source

Agentic Access

generated: '2026-08-13'
method: derived
source: openapi/_original/cj-affiliate-openapi.yml + graphql/cj-affiliate-*.graphql (live introspection
  2026-08-13)
description: 'Recommended x-agentic-access execution contracts for CJ Affiliate, classified from the real
  operation set. A governance starting point for exposing this API to AI agents - review and bind audience
  per deployment. Note the shape of the risk here: every write on this platform moves money or changes
  attribution. The Tracking API mutations create and correct commissionable transactions, restateOrders
  is full-state replacement that DROPS anything omitted, and both click APIs register real consumer clicks
  that affect attribution and reporting. None of them is safe to call speculatively.'
summary:
  operations: 24
  rest_operations: 7
  graphql_fields: 17
  by_consequence:
    read: 14
    write: 6
    destructive: 1
    financial-write: 3
  human_in_the_loop_required: 10
token_note: CJ issues one long-lived personal access token with no scopes and no programmatic issuance,
  so least-privilege must be enforced by the agent gateway rather than by the credential.
rest_operations:
- path: /v2/link-search
  method: get
  operationId: linkSearch
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    human-in-the-loop: false
    token:
      max-ttl: 3600
    audit: none
- path: /v2/advertiser-lookup
  method: get
  operationId: advertiserLookup
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    human-in-the-loop: false
    token:
      max-ttl: 3600
    audit: none
- path: /v2/joined-publisher-lookup
  method: get
  operationId: publisherLookup
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    human-in-the-loop: false
    token:
      max-ttl: 3600
    audit: none
- path: /v3/commissions
  method: get
  operationId: commissionDetailLegacy
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    human-in-the-loop: false
    token:
      max-ttl: 3600
    audit: none
- path: /v3/item-detail/{original-action-id}
  method: get
  operationId: commissionItemDetailLegacy
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    human-in-the-loop: false
    token:
      max-ttl: 3600
    audit: none
- path: /partner/event
  method: post
  operationId: createClickEvent
  x-agentic-access:
    action-class: connected
    consequence: write
    subject: optional
    human-in-the-loop: true
    token:
      max-ttl: 3600
    audit: required
- path: /clickdestination
  method: post
  operationId: resolveClickDestination
  x-agentic-access:
    action-class: connected
    consequence: write
    subject: optional
    human-in-the-loop: true
    token:
      max-ttl: 3600
    audit: required
graphql_fields:
- endpoint: commissions.api.cj.com/query
  field: publisherCommissions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: required
    human-in-the-loop: false
    token:
      max-ttl: 3600
    audit: none
- endpoint: commissions.api.cj.com/query
  field: advertiserCommissions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: required
    human-in-the-loop: false
    token:
      max-ttl: 3600
    audit: none
- endpoint: ads.api.cj.com/query
  field: products
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: required
    human-in-the-loop: false
    token:
      max-ttl: 3600
    audit: none
- endpoint: ads.api.cj.com/query
  field: shoppingProducts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: required
    human-in-the-loop: false
    token:
      max-ttl: 3600
    audit: none
- endpoint: ads.api.cj.com/query
  field: travelExperienceProducts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: required
    human-in-the-loop: false
    token:
      max-ttl: 3600
    audit: none
- endpoint: ads.api.cj.com/query
  field: financeProducts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: required
    human-in-the-loop: false
    token:
      max-ttl: 3600
    audit: none
- endpoint: ads.api.cj.com/query
  field: financeCreditCardProducts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: required
    human-in-the-loop: false
    token:
      max-ttl: 3600
    audit: none
- endpoint: ads.api.cj.com/query
  field: shoppingProductFeeds
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: required
    human-in-the-loop: false
    token:
      max-ttl: 3600
    audit: none
- endpoint: ads.api.cj.com/query
  field: productFeeds
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: required
    human-in-the-loop: false
    token:
      max-ttl: 3600
    audit: none
- endpoint: ads.api.cj.com/query
  field: createShoppingProducts
  x-agentic-access:
    action-class: connected
    consequence: write
    subject: required
    human-in-the-loop: true
    token:
      max-ttl: 3600
    audit: required
- endpoint: ads.api.cj.com/query
  field: updateShoppingProducts
  x-agentic-access:
    action-class: connected
    consequence: write
    subject: required
    human-in-the-loop: true
    token:
      max-ttl: 3600
    audit: required
- endpoint: ads.api.cj.com/query
  field: deleteProducts
  x-agentic-access:
    action-class: connected
    consequence: destructive
    subject: required
    human-in-the-loop: true
    token:
      max-ttl: 3600
    audit: required
- endpoint: ads.api.cj.com/query
  field: createCreditCardProducts
  x-agentic-access:
    action-class: connected
    consequence: write
    subject: required
    human-in-the-loop: true
    token:
      max-ttl: 3600
    audit: required
- endpoint: ads.api.cj.com/query
  field: updateCreditCardProducts
  x-agentic-access:
    action-class: connected
    consequence: write
    subject: required
    human-in-the-loop: true
    token:
      max-ttl: 3600
    audit: required
- endpoint: tracking.api.cj.com/graphql
  field: createOrders
  x-agentic-access:
    action-class: connected
    consequence: financial-write
    subject: required
    human-in-the-loop: true
    token:
      max-ttl: 3600
    audit: required
- endpoint: tracking.api.cj.com/graphql
  field: restateOrders
  x-agentic-access:
    action-class: connected
    consequence: financial-write
    subject: required
    human-in-the-loop: true
    token:
      max-ttl: 3600
    audit: required
- endpoint: tracking.api.cj.com/graphql
  field: cancelOrders
  x-agentic-access:
    action-class: connected
    consequence: financial-write
    subject: required
    human-in-the-loop: true
    token:
      max-ttl: 3600
    audit: required

Work with this as data

Every access contract here is available over the APIs.io API and to AI agents over MCP. Agentic Access is not yet its own endpoint on the v1 API. Reach it through catalog search and the tag graph, or the MCP server.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for agentic access

3 MCP tools reach this

apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools

Call it yourself

curl for this page

Search the catalog

curl "https://apis.io/api/v1/search?q=cj-affiliate-agentic-access&limit=10"

Everything under a tag

curl "https://apis.io/api/v1/tags/cj-affiliate-agentic-access"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.