CloudGuard · Agentic Access

CloudGuard Agentic Access

x-agentic-access derived

CloudGuard exposes 823 API operations that an AI agent could call, of which 396 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 427 read and 316 write.

80 operations are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

Check PointCNAPPCloud SecurityCloud Security Posture ManagementComplianceCSPMCWPPKubernetes SecurityMulti-CloudPosture ManagementWorkload ProtectionDome9
Operations: 823 Acting: 396 Human-in-the-loop: 80 Method: derived

By consequence

read 427 write 316

Source

Agentic Access

Raw ↑
generated: '2026-09-05'
method: derived
source: openapi/ (23 first-party CloudGuard OpenAPI documents harvested 2026-09-05 from https://docs.cgn.portal.checkpoint.com/reference)
description: Recommended x-agentic-access execution contracts for the CloudGuard (Dome9) v2 REST API, classified
  from the provider-published OpenAPI. A governance starting point for exposing this API to AI agents - review and
  bind audience per deployment. Regenerated 2026-09-05 against the real contract; the previous edition was derived
  from a superseded best-effort scaffold and covered only 17 of 823 operations.
summary:
  operations: 823
  by_action_class:
    connected: 427
    acting: 396
  by_consequence:
    read: 427
    write: 316
    delete: 80
  human_in_the_loop_required: 80
operations:
- path: /v2/AccountTrust/assumable-roles
  method: get
  operationId: AccountTrust_GetAssumableRoles_get_/v2/AccountTrust/assumable-roles
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/AccountTrust
  method: get
  operationId: AccountTrust_Get_get_/v2/AccountTrust
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/AccountTrust
  method: post
  operationId: AccountTrust_Post_post_/v2/AccountTrust
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/AccountTrust/{id}
  method: put
  operationId: AccountTrust_Put_put_/v2/AccountTrust/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/AccountTrust/{id}
  method: delete
  operationId: AccountTrust_Delete_delete_/v2/AccountTrust/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: delete
    subject: required
    token:
      max-ttl: 900
    audit: full
    human-in-the-loop: required
- path: /v2/audit/event-types
  method: get
  operationId: Audit_GetEventTypes_get_/v2/audit/event-types
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/audit/awsgroup/{groupId}
  method: get
  operationId: Audit_GetAuditEventsForAwsSecGroup_get_/v2/audit/awsgroup/{groupId}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/audit/export
  method: get
  operationId: Audit_GetExport_get_/v2/audit/export
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/audit/row-data-api
  method: get
  operationId: Audit_GetRowDataApi_get_/v2/audit/row-data-api
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/audit/row-data-system
  method: get
  operationId: Audit_GetRowDataSystem_get_/v2/audit/row-data-system
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/audit/data-count
  method: get
  operationId: Audit_GetRowDataCount_get_/v2/audit/data-count
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/Audit
  method: get
  operationId: Audit_Get_get_/v2/Audit
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/Audit/{id}
  method: get
  operationId: Audit_GetAuditEventMetadata_get_/v2/Audit/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/BillableAssets
  method: get
  operationId: BillableAssets_Get_get_/v2/BillableAssets
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/billableAssetsReport/dailyUsage
  method: get
  operationId: BillableAssetsReport_GetDailyUsageBillableAssetsReport_get_/v2/billableAssetsReport/dailyUsage
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/BillableAssetsReport
  method: get
  operationId: BillableAssetsReport_GetBillableAssetsReport_get_/v2/BillableAssetsReport
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/CloudInfraUser
  method: get
  operationId: CloudInfraUser_Get_get_/v2/CloudInfraUser
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/CloudInfraUser
  method: post
  operationId: CloudInfraUser_Post_post_/v2/CloudInfraUser
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/Compliance/ContinuousComplianceNotification/{id}
  method: get
  operationId: ContinuousComplianceNotification_Get_get_/v2/Compliance/ContinuousComplianceNotification/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/Compliance/ContinuousComplianceNotification/{id}
  method: put
  operationId: ContinuousComplianceNotification_Put_put_/v2/Compliance/ContinuousComplianceNotification/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/Compliance/ContinuousComplianceNotification/{id}
  method: delete
  operationId: ContinuousComplianceNotification_Delete_delete_/v2/Compliance/ContinuousComplianceNotification/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: delete
    subject: required
    token:
      max-ttl: 900
    audit: full
    human-in-the-loop: required
- path: /v2/Compliance/ContinuousComplianceNotification
  method: get
  operationId: ContinuousComplianceNotification_Get_get_/v2/Compliance/ContinuousComplianceNotification
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/Compliance/ContinuousComplianceNotification
  method: post
  operationId: ContinuousComplianceNotification_Post_post_/v2/Compliance/ContinuousComplianceNotification
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/Compliance/ContinuousComplianceNotification/get-by-name
  method: get
  operationId: ContinuousComplianceNotification_GetByName_get_/v2/Compliance/ContinuousComplianceNotification/get-by-name
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/Compliance/ContinuousComplianceNotification/PublishOpenedFindings/{id}
  method: post
  operationId: ContinuousComplianceNotification_PublishOpenedFindingsByPolicyIdAsync_post_/v2/Compliance/ContinuousComplianceNotification/PublishOpenedFindings/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/Compliance/ContinuousComplianceNotification/webhookJiraTokens
  method: get
  operationId: ContinuousComplianceNotification_WebhookJiraTokens_get_/v2/Compliance/ContinuousComplianceNotification/webhookJiraTokens
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/Compliance/ContinuousComplianceNotification/CircuitBreaker
  method: get
  operationId: ContinuousComplianceNotification_GetAllCircuitBreakerAsync_get_/v2/Compliance/ContinuousComplianceNotification/CircuitBreaker
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/Compliance/ContinuousComplianceNotification/CircuitBreaker/{id}
  method: get
  operationId: ContinuousComplianceNotification_GetCircuitBreakerAsync_get_/v2/Compliance/ContinuousComplianceNotification/CircuitBreaker/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/Compliance/ContinuousComplianceNotification/CircuitBreaker/{id}/{integrationType}
  method: delete
  operationId: ContinuousComplianceNotification_DeleteCircuitBreakerAsync_delete_/v2/Compliance/ContinuousComplianceNotification/CircuitBreaker/{id}/{integrationType}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: delete
    subject: required
    token:
      max-ttl: 900
    audit: full
    human-in-the-loop: required
- path: /v2/GlobalSearch
  method: get
  operationId: GlobalSearch_Get_get_/v2/GlobalSearch
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /{id}/external
  method: put
  operationId: Role_PutRoleByExternalAccountId_put_/{id}/external
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/Role
  method: get
  operationId: Role_Get_get_/v2/Role
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/Role
  method: post
  operationId: Role_Post_post_/v2/Role
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/Role/{id}
  method: get
  operationId: Role_Get_get_/v2/Role/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/Role/{id}
  method: put
  operationId: Role_Put_put_/v2/Role/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/Role/{id}
  method: delete
  operationId: Role_Delete_delete_/v2/Role/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: delete
    subject: required
    token:
      max-ttl: 900
    audit: full
    human-in-the-loop: required
- path: /v2/service-account/update
  method: post
  operationId: ServiceAccount_UpdateServiceAccount_post_/v2/service-account/update
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/service-account/{id}
  method: get
  operationId: ServiceAccount_Get_get_/v2/service-account/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/service-account/{serviceAccountId}
  method: delete
  operationId: ServiceAccount_DeleteServiceAccount_delete_/v2/service-account/{serviceAccountId}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: delete
    subject: required
    token:
      max-ttl: 900
    audit: full
    human-in-the-loop: required
- path: /v2/service-account/generate-key
  method: post
  operationId: ServiceAccount_GenerateSecretForServiceAccount_post_/v2/service-account/generate-key
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/service-account
  method: get
  operationId: ServiceAccount_GetServiceAccounts_get_/v2/service-account
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/service-account
  method: post
  operationId: ServiceAccount_PostServiceAccount_post_/v2/service-account
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/service-account
  method: delete
  operationId: ServiceAccount_DeleteAllServiceAccountsForUser_delete_/v2/service-account
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: delete
    subject: required
    token:
      max-ttl: 900
    audit: full
    human-in-the-loop: required
- path: /v2/settings/lease-time
  method: put
  operationId: Settings_UpdateLeaseTime_put_/v2/settings/lease-time
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/settings/email-notifications
  method: put
  operationId: Settings_UpdateEmailNotifications_put_/v2/settings/email-notifications
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/settings/Sns
  method: put
  operationId: Settings_UpdateSnsIntegration_put_/v2/settings/Sns
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/settings/Sns
  method: post
  operationId: Settings_AddSnsIntegration_post_/v2/settings/Sns
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/settings/Sns
  method: delete
  operationId: Settings_DeleteSnsIntegration_delete_/v2/settings/Sns
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: delete
    subject: required
    token:
      max-ttl: 900
    audit: full
    human-in-the-loop: required
- path: /v2/settings/email-notification-filters/cloudAccounts
  method: get
  operationId: Settings_GetEmailNotificationFilters_get_/v2/settings/email-notification-filters/cloudAccounts
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/settings/email-notification-filters/cloudAccounts
  method: put
  operationId: Settings_UpdateEmailNotificationFilters_put_/v2/settings/email-notification-filters/cloudAccounts
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/settings/email-notification-filters/cloudAccounts
  method: delete
  operationId: Settings_DeleteEmailNotificationFilters_delete_/v2/settings/email-notification-filters/cloudAccounts
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: delete
    subject: required
    token:
      max-ttl: 900
    audit: full
    human-in-the-loop: required
- path: /v2/Settings
  method: get
  operationId: Settings_Get_get_/v2/Settings
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/Settings
  method: patch
  operationId: Settings_UpdateSettings_patch_/v2/Settings
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/TenableAccount/{id}/Validate
  method: post
  operationId: TenableAccount_ValidatePermissions_post_/v2/TenableAccount/{id}/Validate
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/TenableAccount/Sync
  method: post
  operationId: TenableAccount_SyncVulnerabilities_post_/v2/TenableAccount/Sync
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/TenableAccount
  method: get
  operationId: TenableAccount_Get_get_/v2/TenableAccount
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/TenableAccount
  method: post
  operationId: TenableAccount_Post_post_/v2/TenableAccount
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/TenableAccount
  method: delete
  operationId: TenableAccount_Delete_delete_/v2/TenableAccount
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: delete
    subject: required
    token:
      max-ttl: 900
    audit: full
    human-in-the-loop: required
- path: /v2/user/{id}
  method: get
  operationId: User_Get_get_/v2/user/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/user/{id}
  method: put
  operationId: User_Put_put_/v2/user/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/user/{id}
  method: delete
  operationId: User_Delete_delete_/v2/user/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: delete
    subject: required
    token:
      max-ttl: 900
    audit: full
    human-in-the-loop: required
- path: /v2/user/{id}/unlock
  method: put
  operationId: User_UnlockUser_put_/v2/user/{id}/unlock
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/user/{id}/iam-safe/accounts/{accountId}/iamEntities
  method: put
  operationId: User_PutIamSafeAccountIamEntities_put_/v2/user/{id}/iam-safe/accounts/{accountId}/iamEntities
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/user/{id}/iam-safe/accounts/{cloudAccountId}/iamEntities
  method: post
  operationId: User_PostIamSafeAccountIamEntitiesAsync_post_/v2/user/{id}/iam-safe/accounts/{cloudAccountId}/iamEntities
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/user/{id}/iam-safe/accounts/{accountId}/deleteIamEntities
  method: post
  operationId: User_DeleteIamSafeEntitiesForUser_post_/v2/user/{id}/iam-safe/accounts/{accountId}/deleteIamEntities
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/user
  method: get
  operationId: User_Get_get_/v2/user
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/user
  method: post
  operationId: User_Post_post_/v2/user
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/integration
  method: post
  operationId: Integration_CreateIntegration_post_/v2/integration
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/integration
  method: get
  operationId: Integration_GetAllIntegrations_get_/v2/integration
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/integration
  method: put
  operationId: Integration_UpdateIntegration_put_/v2/integration
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/integration/{id}
  method: get
  operationId: Integration_GetIntegrationById_get_/v2/integration/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/integration/{id}
  method: delete
  operationId: Integration_DeleteIntegration_delete_/v2/integration/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: delete
    subject: required
    token:
      max-ttl: 900
    audit: full
    human-in-the-loop: required
- path: /v2/notification/{id}
  method: get
  operationId: Notification_Get_get_/v2/notification/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/notification/{id}
  method: delete
  operationId: Notification_Delete_delete_/v2/notification/{id}
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: delete
    subject: required
    token:
      max-ttl: 900
    audit: full
    human-in-the-loop: required
- path: /v2/notification
  method: get
  operationId: Notification_GetAll_get_/v2/notification
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/notification
  method: post
  operationId: Notification_Create_post_/v2/notification
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/notification
  method: put
  operationId: Notification_Update_put_/v2/notification
  source: openapi/cloudguard-administration-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/ExternalFindings/{id}/Archive
  method: post
  operationId: ExternalFindings_ArchiveExternalFinding_post_/v2/ExternalFindings/{id}/Archive
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/ExternalFindings/Archive
  method: post
  operationId: ExternalFindings_ArchiveExternalFindings_post_/v2/ExternalFindings/Archive
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/ExternalFindings/search
  method: post
  operationId: ExternalFindings_Search_post_/v2/ExternalFindings/search
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/ExternalFindings
  method: post
  operationId: ExternalFindings_Post_post_/v2/ExternalFindings
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/ExternalFindings
  method: delete
  operationId: ExternalFindings_DeleteExternalFindings_delete_/v2/ExternalFindings
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: delete
    subject: required
    token:
      max-ttl: 900
    audit: full
    human-in-the-loop: required
- path: /v2/ExternalFindings/{id}
  method: delete
  operationId: ExternalFindings_DeleteExternalFinding_delete_/v2/ExternalFindings/{id}
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: delete
    subject: required
    token:
      max-ttl: 900
    audit: full
    human-in-the-loop: required
- path: /v2/Compliance/Finding/stats/aggregatedbyproperty
  method: get
  operationId: Finding_GetStatsByProperty_get_/v2/Compliance/Finding/stats/aggregatedbyproperty
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/Compliance/Finding/bundle/{bundleId}/stats
  method: get
  operationId: Finding_GetBundleStats_get_/v2/Compliance/Finding/bundle/{bundleId}/stats
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/Compliance/Finding/bundle/{bundleId}
  method: get
  operationId: Finding_GetFindings_get_/v2/Compliance/Finding/bundle/{bundleId}
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/Compliance/Finding/{id}
  method: get
  operationId: Finding_GetFinding_get_/v2/Compliance/Finding/{id}
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/Compliance/Finding/{id}
  method: delete
  operationId: Finding_DeleteAsync_delete_/v2/Compliance/Finding/{id}
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: delete
    subject: required
    token:
      max-ttl: 900
    audit: full
    human-in-the-loop: required
- path: /v2/Compliance/Finding/getByKey
  method: post
  operationId: Finding_GetFindingByKey_post_/v2/Compliance/Finding/getByKey
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/Compliance/Finding/archive/{id}
  method: delete
  operationId: Finding_DeleteAsync_delete_/v2/Compliance/Finding/archive/{id}
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: delete
    subject: required
    token:
      max-ttl: 900
    audit: full
    human-in-the-loop: required
- path: /v2/Compliance/Finding/bulk/close
  method: post
  operationId: Finding_BulkDeleteAsync_post_/v2/Compliance/Finding/bulk/close
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/Compliance/Finding/bulk/archive/close
  method: post
  operationId: Finding_BulkDeleteAsync_post_/v2/Compliance/Finding/bulk/archive/close
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/Compliance/Finding/selectAll/close
  method: post
  operationId: Finding_SelectAllClose_post_/v2/Compliance/Finding/selectAll/close
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/Compliance/Finding/selectAll/archive/close
  method: post
  operationId: Finding_SelectAllClose_post_/v2/Compliance/Finding/selectAll/archive/close
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/Compliance/Finding/search
  method: post
  operationId: Finding_Search_post_/v2/Compliance/Finding/search
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/Compliance/Finding/searchAggregate
  method: post
  operationId: Finding_SearchAggregate_post_/v2/Compliance/Finding/searchAggregate
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    token:
      max-ttl: 1800
    audit: full
- path: /v2/Compliance/Finding/Sources
  method: get
  operationId: Finding_GetSupportedSources_get_/v2/Compliance/Finding/Sources
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/Compliance/Finding/{id}/acknowledge
  method: put
  operationId: Finding_Acknowledge_put_/v2/Compliance/Finding/{id}/acknowledge
  source: openapi/cloudguard-events-openapi.yml
  x-agentic-access:
    action-class: acting
    consequence: 

# --- truncated at 32 KB (279 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cloudguard/refs/heads/main/agentic-access/cloudguard-agentic-access.yml

Work with this as data

Every access contract here is available over the APIs.io API and to AI agents over MCP. Agentic Access is not yet its own endpoint on the v1 API. Reach it through catalog search and the tag graph, or the MCP server.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for agentic access

3 MCP tools reach this
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
Search the catalog
curl "https://apis.io/api/v1/search?q=cloudguard-agentic-access&limit=10"
Everything under a tag
curl "https://apis.io/api/v1/tags/cloudguard-agentic-access"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.