Cloudsmith · Agentic Access
Cloudsmith Agentic Access

x-agentic-access generated
Cloudsmith exposes 349 API operations that an AI agent could call, of which 229 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 120 read, 223 write, 2 physical, and 4 safety-critical.
4 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
Artifact ManagementDevOpsDevSecOpsDistributionPackage ManagementRegistryRepositorySoftware Supply ChainUniversalVulnerability Scanning
Operations: 349 Acting: 229 Human-in-the-loop: 4 Method: generated
By consequence

read 120 write 223 physical 2 safety-critical 4
Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
Method	Path	Consequence	Human-in-loop
POST	/entitlements/{owner}/{repo}/{identifier}/disable/	safety-critical	required
POST	/entitlements/{owner}/{repo}/{identifier}/reset/	safety-critical	required
POST	/orgs/{org}/saml-group-sync/disable/	safety-critical	required
POST	/repos/{owner}/{identifier}/geoip/disable/	safety-critical	required
POST	/orgs/{org}/invites/{slug_perm}/resend/	physical	conditional
POST	/repos/{owner}/{repo}/transfer-region/	physical	conditional
Source

Agentic Access

generated: '2026-07-15'
method: generated
source: openapi/cloudsmith-openapi.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 349
  by_action_class:
    connected: 120
    acting: 229
  by_consequence:
    read: 120
    write: 223
    safety-critical: 4
    physical: 2
  human_in_the_loop_required: 4
operations:
- path: /audit-log/{owner}/
  method: get
  operationId: audit_log_namespace_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /audit-log/{owner}/{repo}/
  method: get
  operationId: audit_log_repo_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /badges/version/{owner}/{repo}/{package_format}/{package_name}/{package_version}/{package_identifiers}/
  method: get
  operationId: badges_version_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /broadcasts/{org}/broadcast-token/
  method: post
  operationId: broadcasts_create_broadcast_token
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /bulk-action/{owner}/
  method: post
  operationId: bulk_action
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /distros/
  method: get
  operationId: distros_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /distros/{slug}/
  method: get
  operationId: distros_read
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /entitlements/{owner}/{repo}/
  method: get
  operationId: entitlements_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /entitlements/{owner}/{repo}/
  method: post
  operationId: entitlements_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /entitlements/{owner}/{repo}/sync/
  method: post
  operationId: entitlements_sync
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /entitlements/{owner}/{repo}/{identifier}/
  method: get
  operationId: entitlements_read
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /entitlements/{owner}/{repo}/{identifier}/
  method: patch
  operationId: entitlements_partial_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /entitlements/{owner}/{repo}/{identifier}/
  method: delete
  operationId: entitlements_delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /entitlements/{owner}/{repo}/{identifier}/disable/
  method: post
  operationId: entitlements_disable
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /entitlements/{owner}/{repo}/{identifier}/enable/
  method: post
  operationId: entitlements_enable
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /entitlements/{owner}/{repo}/{identifier}/refresh/
  method: post
  operationId: entitlements_refresh
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /entitlements/{owner}/{repo}/{identifier}/reset/
  method: post
  operationId: entitlements_reset
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /entitlements/{owner}/{repo}/{identifier}/toggle-private-broadcasts/
  method: post
  operationId: entitlements_toggle_private_broadcasts
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{owner}/{repo}/
  method: post
  operationId: files_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{owner}/{repo}/validate/
  method: post
  operationId: files_validate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{owner}/{repo}/{identifier}/abort/
  method: post
  operationId: files_abort
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{owner}/{repo}/{identifier}/complete/
  method: post
  operationId: files_complete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /files/{owner}/{repo}/{identifier}/info/
  method: get
  operationId: files_info
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /formats/
  method: get
  operationId: formats_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /formats/{slug}/
  method: get
  operationId: formats_read
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /metrics/entitlements/{owner}/
  method: get
  operationId: metrics_entitlements_account_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /metrics/entitlements/{owner}/{repo}/
  method: get
  operationId: metrics_entitlements_repo_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /metrics/packages/{owner}/{repo}/
  method: get
  operationId: metrics_packages_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /namespaces/
  method: get
  operationId: namespaces_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /namespaces/{slug}/
  method: get
  operationId: namespaces_read
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/
  method: get
  operationId: orgs_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/
  method: get
  operationId: orgs_read
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/
  method: delete
  operationId: orgs_delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/deny-policy/
  method: get
  operationId: orgs_deny-policy_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/deny-policy/
  method: post
  operationId: orgs_deny-policy_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/deny-policy/{slug_perm}/
  method: get
  operationId: orgs_deny-policy_read
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/deny-policy/{slug_perm}/
  method: put
  operationId: orgs_deny-policy_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/deny-policy/{slug_perm}/
  method: patch
  operationId: orgs_deny-policy_partial_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/deny-policy/{slug_perm}/
  method: delete
  operationId: orgs_deny-policy_delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/invites/
  method: get
  operationId: orgs_invites_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/invites/
  method: post
  operationId: orgs_invites_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/invites/{slug_perm}/
  method: patch
  operationId: orgs_invites_partial_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/invites/{slug_perm}/
  method: delete
  operationId: orgs_invites_delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/invites/{slug_perm}/extend/
  method: post
  operationId: orgs_invites_extend
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/invites/{slug_perm}/resend/
  method: post
  operationId: orgs_invites_resend
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/license-policy-violation/
  method: get
  operationId: orgs_license-policy-violation_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/license-policy/
  method: get
  operationId: orgs_license-policy_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/license-policy/
  method: post
  operationId: orgs_license-policy_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/license-policy/{policy_slug_perm}/evaluation/
  method: get
  operationId: orgs_license-policy_evaluation_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/license-policy/{policy_slug_perm}/evaluation/
  method: post
  operationId: orgs_license-policy_evaluation_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/license-policy/{policy_slug_perm}/evaluation/{slug_perm}/
  method: get
  operationId: orgs_license-policy_evaluation_read
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/license-policy/{slug_perm}/
  method: get
  operationId: orgs_license-policy_read
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/license-policy/{slug_perm}/
  method: put
  operationId: orgs_license-policy_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/license-policy/{slug_perm}/
  method: patch
  operationId: orgs_license-policy_partial_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/license-policy/{slug_perm}/
  method: delete
  operationId: orgs_license-policy_delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/members/
  method: get
  operationId: orgs_members_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/members/{member}/
  method: get
  operationId: orgs_members_read
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/members/{member}/
  method: patch
  operationId: orgs_members_partial_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/members/{member}/
  method: delete
  operationId: orgs_members_delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/members/{member}/refresh/
  method: post
  operationId: orgs_members_refresh
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/members/{member}/remove/
  method: get
  operationId: orgs_members_remove
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/members/{member}/update-role/
  method: patch
  operationId: orgs_members_update_role
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/members/{member}/update-visibility/
  method: patch
  operationId: orgs_members_update_visibility
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/openid-connect/
  method: get
  operationId: orgs_openid-connect_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/openid-connect/
  method: post
  operationId: orgs_openid-connect_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/openid-connect/{provider_setting}/dynamic-mappings/
  method: get
  operationId: orgs_openid-connect_dynamic-mappings_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/openid-connect/{provider_setting}/dynamic-mappings/{claim_value}/
  method: get
  operationId: orgs_openid-connect_dynamic-mappings_read
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/openid-connect/{slug_perm}/
  method: get
  operationId: orgs_openid-connect_read
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/openid-connect/{slug_perm}/
  method: put
  operationId: orgs_openid-connect_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/openid-connect/{slug_perm}/
  method: patch
  operationId: orgs_openid-connect_partial_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/openid-connect/{slug_perm}/
  method: delete
  operationId: orgs_openid-connect_delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/saml-authentication
  method: get
  operationId: orgs_saml-authentication_read
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/saml-authentication
  method: patch
  operationId: orgs_saml-authentication_partial_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/saml-group-sync/
  method: get
  operationId: orgs_saml-group-sync_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/saml-group-sync/
  method: post
  operationId: orgs_saml-group-sync_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/saml-group-sync/disable/
  method: post
  operationId: orgs_saml-group-sync_disable
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /orgs/{org}/saml-group-sync/enable/
  method: post
  operationId: orgs_saml-group-sync_enable
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/saml-group-sync/status/
  method: get
  operationId: orgs_saml-group-sync_status
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/saml-group-sync/{slug_perm}/
  method: delete
  operationId: orgs_saml-group-sync_delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/services/
  method: get
  operationId: orgs_services_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/services/
  method: post
  operationId: orgs_services_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/services/{service}/
  method: get
  operationId: orgs_services_read
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/services/{service}/
  method: patch
  operationId: orgs_services_partial_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/services/{service}/
  method: delete
  operationId: orgs_services_delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/services/{service}/refresh/
  method: post
  operationId: orgs_services_refresh
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/teams/
  method: get
  operationId: orgs_teams_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/teams/
  method: post
  operationId: orgs_teams_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/teams/{team}/
  method: get
  operationId: orgs_teams_read
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/teams/{team}/
  method: patch
  operationId: orgs_teams_partial_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/teams/{team}/
  method: delete
  operationId: orgs_teams_delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/teams/{team}/members
  method: get
  operationId: orgs_teams_members_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/teams/{team}/members
  method: post
  operationId: orgs_teams_members_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/teams/{team}/members
  method: put
  operationId: orgs_teams_members_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/vulnerability-policy-violation/
  method: get
  operationId: orgs_vulnerability-policy-violation_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/vulnerability-policy/
  method: get
  operationId: orgs_vulnerability-policy_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/vulnerability-policy/
  method: post
  operationId: orgs_vulnerability-policy_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/vulnerability-policy/{policy_slug_perm}/evaluation/
  method: get
  operationId: orgs_vulnerability-policy_evaluation_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/vulnerability-policy/{policy_slug_perm}/evaluation/
  method: post
  operationId: orgs_vulnerability-policy_evaluation_create
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/vulnerability-policy/{policy_slug_perm}/evaluation/{slug_perm}/
  method: get
  operationId: orgs_vulnerability-policy_evaluation_read
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/vulnerability-policy/{slug_perm}/
  method: get
  operationId: orgs_vulnerability-policy_read
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orgs/{org}/vulnerability-policy/{slug_perm}/
  method: put
  operationId: orgs_vulnerability-policy_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/vulnerability-policy/{slug_perm}/
  method: patch
  operationId: orgs_vulnerability-policy_partial_update
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orgs/{org}/vulnerability-policy/{slug_perm}/
  method: delete
  operationId: orgs_vulnerability-policy_delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /packages/{owner}/{repo}/
  method: get
  operationId: packages_list
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /packages/{owner}/{repo}/groups/
  method: get
  operationId: packages_groups_lis

# --- truncated at 32 KB (112 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cloudsmith/refs/heads/main/agentic-access/cloudsmith-agentic-access.yml