CloudGuard Agentic Access
CloudGuard exposes 823 API operations that an AI agent could call, of which 396 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 427 read and 316 write.
80 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Source
Agentic Access
generated: '2026-09-05'
method: derived
source: openapi/ (23 first-party CloudGuard OpenAPI documents harvested 2026-09-05 from https://docs.cgn.portal.checkpoint.com/reference)
description: Recommended x-agentic-access execution contracts for the CloudGuard (Dome9) v2 REST API, classified
from the provider-published OpenAPI. A governance starting point for exposing this API to AI agents - review and
bind audience per deployment. Regenerated 2026-09-05 against the real contract; the previous edition was derived
from a superseded best-effort scaffold and covered only 17 of 823 operations.
summary:
operations: 823
by_action_class:
connected: 427
acting: 396
by_consequence:
read: 427
write: 316
delete: 80
human_in_the_loop_required: 80
operations:
- path: /v2/AccountTrust/assumable-roles
method: get
operationId: AccountTrust_GetAssumableRoles_get_/v2/AccountTrust/assumable-roles
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/AccountTrust
method: get
operationId: AccountTrust_Get_get_/v2/AccountTrust
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/AccountTrust
method: post
operationId: AccountTrust_Post_post_/v2/AccountTrust
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/AccountTrust/{id}
method: put
operationId: AccountTrust_Put_put_/v2/AccountTrust/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/AccountTrust/{id}
method: delete
operationId: AccountTrust_Delete_delete_/v2/AccountTrust/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: delete
subject: required
token:
max-ttl: 900
audit: full
human-in-the-loop: required
- path: /v2/audit/event-types
method: get
operationId: Audit_GetEventTypes_get_/v2/audit/event-types
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/audit/awsgroup/{groupId}
method: get
operationId: Audit_GetAuditEventsForAwsSecGroup_get_/v2/audit/awsgroup/{groupId}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/audit/export
method: get
operationId: Audit_GetExport_get_/v2/audit/export
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/audit/row-data-api
method: get
operationId: Audit_GetRowDataApi_get_/v2/audit/row-data-api
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/audit/row-data-system
method: get
operationId: Audit_GetRowDataSystem_get_/v2/audit/row-data-system
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/audit/data-count
method: get
operationId: Audit_GetRowDataCount_get_/v2/audit/data-count
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/Audit
method: get
operationId: Audit_Get_get_/v2/Audit
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/Audit/{id}
method: get
operationId: Audit_GetAuditEventMetadata_get_/v2/Audit/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/BillableAssets
method: get
operationId: BillableAssets_Get_get_/v2/BillableAssets
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/billableAssetsReport/dailyUsage
method: get
operationId: BillableAssetsReport_GetDailyUsageBillableAssetsReport_get_/v2/billableAssetsReport/dailyUsage
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/BillableAssetsReport
method: get
operationId: BillableAssetsReport_GetBillableAssetsReport_get_/v2/BillableAssetsReport
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/CloudInfraUser
method: get
operationId: CloudInfraUser_Get_get_/v2/CloudInfraUser
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/CloudInfraUser
method: post
operationId: CloudInfraUser_Post_post_/v2/CloudInfraUser
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/Compliance/ContinuousComplianceNotification/{id}
method: get
operationId: ContinuousComplianceNotification_Get_get_/v2/Compliance/ContinuousComplianceNotification/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/Compliance/ContinuousComplianceNotification/{id}
method: put
operationId: ContinuousComplianceNotification_Put_put_/v2/Compliance/ContinuousComplianceNotification/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/Compliance/ContinuousComplianceNotification/{id}
method: delete
operationId: ContinuousComplianceNotification_Delete_delete_/v2/Compliance/ContinuousComplianceNotification/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: delete
subject: required
token:
max-ttl: 900
audit: full
human-in-the-loop: required
- path: /v2/Compliance/ContinuousComplianceNotification
method: get
operationId: ContinuousComplianceNotification_Get_get_/v2/Compliance/ContinuousComplianceNotification
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/Compliance/ContinuousComplianceNotification
method: post
operationId: ContinuousComplianceNotification_Post_post_/v2/Compliance/ContinuousComplianceNotification
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/Compliance/ContinuousComplianceNotification/get-by-name
method: get
operationId: ContinuousComplianceNotification_GetByName_get_/v2/Compliance/ContinuousComplianceNotification/get-by-name
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/Compliance/ContinuousComplianceNotification/PublishOpenedFindings/{id}
method: post
operationId: ContinuousComplianceNotification_PublishOpenedFindingsByPolicyIdAsync_post_/v2/Compliance/ContinuousComplianceNotification/PublishOpenedFindings/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/Compliance/ContinuousComplianceNotification/webhookJiraTokens
method: get
operationId: ContinuousComplianceNotification_WebhookJiraTokens_get_/v2/Compliance/ContinuousComplianceNotification/webhookJiraTokens
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/Compliance/ContinuousComplianceNotification/CircuitBreaker
method: get
operationId: ContinuousComplianceNotification_GetAllCircuitBreakerAsync_get_/v2/Compliance/ContinuousComplianceNotification/CircuitBreaker
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/Compliance/ContinuousComplianceNotification/CircuitBreaker/{id}
method: get
operationId: ContinuousComplianceNotification_GetCircuitBreakerAsync_get_/v2/Compliance/ContinuousComplianceNotification/CircuitBreaker/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/Compliance/ContinuousComplianceNotification/CircuitBreaker/{id}/{integrationType}
method: delete
operationId: ContinuousComplianceNotification_DeleteCircuitBreakerAsync_delete_/v2/Compliance/ContinuousComplianceNotification/CircuitBreaker/{id}/{integrationType}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: delete
subject: required
token:
max-ttl: 900
audit: full
human-in-the-loop: required
- path: /v2/GlobalSearch
method: get
operationId: GlobalSearch_Get_get_/v2/GlobalSearch
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /{id}/external
method: put
operationId: Role_PutRoleByExternalAccountId_put_/{id}/external
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/Role
method: get
operationId: Role_Get_get_/v2/Role
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/Role
method: post
operationId: Role_Post_post_/v2/Role
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/Role/{id}
method: get
operationId: Role_Get_get_/v2/Role/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/Role/{id}
method: put
operationId: Role_Put_put_/v2/Role/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/Role/{id}
method: delete
operationId: Role_Delete_delete_/v2/Role/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: delete
subject: required
token:
max-ttl: 900
audit: full
human-in-the-loop: required
- path: /v2/service-account/update
method: post
operationId: ServiceAccount_UpdateServiceAccount_post_/v2/service-account/update
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/service-account/{id}
method: get
operationId: ServiceAccount_Get_get_/v2/service-account/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/service-account/{serviceAccountId}
method: delete
operationId: ServiceAccount_DeleteServiceAccount_delete_/v2/service-account/{serviceAccountId}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: delete
subject: required
token:
max-ttl: 900
audit: full
human-in-the-loop: required
- path: /v2/service-account/generate-key
method: post
operationId: ServiceAccount_GenerateSecretForServiceAccount_post_/v2/service-account/generate-key
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/service-account
method: get
operationId: ServiceAccount_GetServiceAccounts_get_/v2/service-account
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/service-account
method: post
operationId: ServiceAccount_PostServiceAccount_post_/v2/service-account
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/service-account
method: delete
operationId: ServiceAccount_DeleteAllServiceAccountsForUser_delete_/v2/service-account
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: delete
subject: required
token:
max-ttl: 900
audit: full
human-in-the-loop: required
- path: /v2/settings/lease-time
method: put
operationId: Settings_UpdateLeaseTime_put_/v2/settings/lease-time
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/settings/email-notifications
method: put
operationId: Settings_UpdateEmailNotifications_put_/v2/settings/email-notifications
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/settings/Sns
method: put
operationId: Settings_UpdateSnsIntegration_put_/v2/settings/Sns
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/settings/Sns
method: post
operationId: Settings_AddSnsIntegration_post_/v2/settings/Sns
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/settings/Sns
method: delete
operationId: Settings_DeleteSnsIntegration_delete_/v2/settings/Sns
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: delete
subject: required
token:
max-ttl: 900
audit: full
human-in-the-loop: required
- path: /v2/settings/email-notification-filters/cloudAccounts
method: get
operationId: Settings_GetEmailNotificationFilters_get_/v2/settings/email-notification-filters/cloudAccounts
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/settings/email-notification-filters/cloudAccounts
method: put
operationId: Settings_UpdateEmailNotificationFilters_put_/v2/settings/email-notification-filters/cloudAccounts
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/settings/email-notification-filters/cloudAccounts
method: delete
operationId: Settings_DeleteEmailNotificationFilters_delete_/v2/settings/email-notification-filters/cloudAccounts
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: delete
subject: required
token:
max-ttl: 900
audit: full
human-in-the-loop: required
- path: /v2/Settings
method: get
operationId: Settings_Get_get_/v2/Settings
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/Settings
method: patch
operationId: Settings_UpdateSettings_patch_/v2/Settings
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/TenableAccount/{id}/Validate
method: post
operationId: TenableAccount_ValidatePermissions_post_/v2/TenableAccount/{id}/Validate
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/TenableAccount/Sync
method: post
operationId: TenableAccount_SyncVulnerabilities_post_/v2/TenableAccount/Sync
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/TenableAccount
method: get
operationId: TenableAccount_Get_get_/v2/TenableAccount
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/TenableAccount
method: post
operationId: TenableAccount_Post_post_/v2/TenableAccount
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/TenableAccount
method: delete
operationId: TenableAccount_Delete_delete_/v2/TenableAccount
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: delete
subject: required
token:
max-ttl: 900
audit: full
human-in-the-loop: required
- path: /v2/user/{id}
method: get
operationId: User_Get_get_/v2/user/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/user/{id}
method: put
operationId: User_Put_put_/v2/user/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/user/{id}
method: delete
operationId: User_Delete_delete_/v2/user/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: delete
subject: required
token:
max-ttl: 900
audit: full
human-in-the-loop: required
- path: /v2/user/{id}/unlock
method: put
operationId: User_UnlockUser_put_/v2/user/{id}/unlock
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/user/{id}/iam-safe/accounts/{accountId}/iamEntities
method: put
operationId: User_PutIamSafeAccountIamEntities_put_/v2/user/{id}/iam-safe/accounts/{accountId}/iamEntities
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/user/{id}/iam-safe/accounts/{cloudAccountId}/iamEntities
method: post
operationId: User_PostIamSafeAccountIamEntitiesAsync_post_/v2/user/{id}/iam-safe/accounts/{cloudAccountId}/iamEntities
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/user/{id}/iam-safe/accounts/{accountId}/deleteIamEntities
method: post
operationId: User_DeleteIamSafeEntitiesForUser_post_/v2/user/{id}/iam-safe/accounts/{accountId}/deleteIamEntities
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/user
method: get
operationId: User_Get_get_/v2/user
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/user
method: post
operationId: User_Post_post_/v2/user
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/integration
method: post
operationId: Integration_CreateIntegration_post_/v2/integration
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/integration
method: get
operationId: Integration_GetAllIntegrations_get_/v2/integration
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/integration
method: put
operationId: Integration_UpdateIntegration_put_/v2/integration
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/integration/{id}
method: get
operationId: Integration_GetIntegrationById_get_/v2/integration/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/integration/{id}
method: delete
operationId: Integration_DeleteIntegration_delete_/v2/integration/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: delete
subject: required
token:
max-ttl: 900
audit: full
human-in-the-loop: required
- path: /v2/notification/{id}
method: get
operationId: Notification_Get_get_/v2/notification/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/notification/{id}
method: delete
operationId: Notification_Delete_delete_/v2/notification/{id}
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: delete
subject: required
token:
max-ttl: 900
audit: full
human-in-the-loop: required
- path: /v2/notification
method: get
operationId: Notification_GetAll_get_/v2/notification
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/notification
method: post
operationId: Notification_Create_post_/v2/notification
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/notification
method: put
operationId: Notification_Update_put_/v2/notification
source: openapi/cloudguard-administration-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/ExternalFindings/{id}/Archive
method: post
operationId: ExternalFindings_ArchiveExternalFinding_post_/v2/ExternalFindings/{id}/Archive
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/ExternalFindings/Archive
method: post
operationId: ExternalFindings_ArchiveExternalFindings_post_/v2/ExternalFindings/Archive
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/ExternalFindings/search
method: post
operationId: ExternalFindings_Search_post_/v2/ExternalFindings/search
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/ExternalFindings
method: post
operationId: ExternalFindings_Post_post_/v2/ExternalFindings
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/ExternalFindings
method: delete
operationId: ExternalFindings_DeleteExternalFindings_delete_/v2/ExternalFindings
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: acting
consequence: delete
subject: required
token:
max-ttl: 900
audit: full
human-in-the-loop: required
- path: /v2/ExternalFindings/{id}
method: delete
operationId: ExternalFindings_DeleteExternalFinding_delete_/v2/ExternalFindings/{id}
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: acting
consequence: delete
subject: required
token:
max-ttl: 900
audit: full
human-in-the-loop: required
- path: /v2/Compliance/Finding/stats/aggregatedbyproperty
method: get
operationId: Finding_GetStatsByProperty_get_/v2/Compliance/Finding/stats/aggregatedbyproperty
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/Compliance/Finding/bundle/{bundleId}/stats
method: get
operationId: Finding_GetBundleStats_get_/v2/Compliance/Finding/bundle/{bundleId}/stats
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/Compliance/Finding/bundle/{bundleId}
method: get
operationId: Finding_GetFindings_get_/v2/Compliance/Finding/bundle/{bundleId}
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/Compliance/Finding/{id}
method: get
operationId: Finding_GetFinding_get_/v2/Compliance/Finding/{id}
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/Compliance/Finding/{id}
method: delete
operationId: Finding_DeleteAsync_delete_/v2/Compliance/Finding/{id}
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: acting
consequence: delete
subject: required
token:
max-ttl: 900
audit: full
human-in-the-loop: required
- path: /v2/Compliance/Finding/getByKey
method: post
operationId: Finding_GetFindingByKey_post_/v2/Compliance/Finding/getByKey
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/Compliance/Finding/archive/{id}
method: delete
operationId: Finding_DeleteAsync_delete_/v2/Compliance/Finding/archive/{id}
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: acting
consequence: delete
subject: required
token:
max-ttl: 900
audit: full
human-in-the-loop: required
- path: /v2/Compliance/Finding/bulk/close
method: post
operationId: Finding_BulkDeleteAsync_post_/v2/Compliance/Finding/bulk/close
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/Compliance/Finding/bulk/archive/close
method: post
operationId: Finding_BulkDeleteAsync_post_/v2/Compliance/Finding/bulk/archive/close
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/Compliance/Finding/selectAll/close
method: post
operationId: Finding_SelectAllClose_post_/v2/Compliance/Finding/selectAll/close
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/Compliance/Finding/selectAll/archive/close
method: post
operationId: Finding_SelectAllClose_post_/v2/Compliance/Finding/selectAll/archive/close
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/Compliance/Finding/search
method: post
operationId: Finding_Search_post_/v2/Compliance/Finding/search
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/Compliance/Finding/searchAggregate
method: post
operationId: Finding_SearchAggregate_post_/v2/Compliance/Finding/searchAggregate
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: acting
consequence: write
subject: required
token:
max-ttl: 1800
audit: full
- path: /v2/Compliance/Finding/Sources
method: get
operationId: Finding_GetSupportedSources_get_/v2/Compliance/Finding/Sources
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v2/Compliance/Finding/{id}/acknowledge
method: put
operationId: Finding_Acknowledge_put_/v2/Compliance/Finding/{id}/acknowledge
source: openapi/cloudguard-events-openapi.yml
x-agentic-access:
action-class: acting
consequence:
# --- truncated at 32 KB (279 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cloudguard/refs/heads/main/agentic-access/cloudguard-agentic-access.yml
Work with this as data
Every access contract here is available over the APIs.io API and to AI agents over MCP. Agentic Access is not yet its own endpoint on the v1 API. Reach it through catalog search and the tag graph, or the MCP server.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for agentic access
3 MCP tools reach this
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
curl "https://apis.io/api/v1/search?q=cloudguard-agentic-access&limit=10"
curl "https://apis.io/api/v1/tags/cloudguard-agentic-access"
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.