Cubist · Agentic Access

Cubist Agentic Access

x-agentic-access generated

Cubist exposes 173 API operations that an AI agent could call, of which 126 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 47 read, 111 write, 2 physical, and 13 safety-critical.

13 operations are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

CompanyDeveloper ToolsKey ManagementWalletsDigital SignaturesSecurityBlockchainWeb3Custody
Operations: 173 Acting: 126 Human-in-the-loop: 13 Method: generated

By consequence

read 47 write 111 physical 2 safety-critical 13

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
POST /v0/org/{org_id}/idp/password_reset safety-critical required
PATCH /v0/org/{org_id}/idp/password_reset safety-critical required
DELETE /v0/org/{org_id}/session safety-critical required
DELETE /v0/org/{org_id}/session/self safety-critical required
DELETE /v0/org/{org_id}/session/{session_id} safety-critical required
POST /v0/org/{org_id}/user/me/email safety-critical required
PATCH /v0/org/{org_id}/user/me/email safety-critical required
POST /v0/org/{org_id}/user/me/totp safety-critical required
PATCH /v0/org/{org_id}/user/me/totp safety-critical required
POST /v0/org/{org_id}/users/reset_mfa safety-critical required
PATCH /v0/org/{org_id}/users/reset_mfa safety-critical required
POST /v0/user/me/totp safety-critical required
PATCH /v0/user/me/totp safety-critical required
PATCH /v0/org/{org_id}/users/{user_id}/membership physical conditional
POST /v1/org/{org_id}/eth2/stake physical conditional

Source

Agentic Access

Raw ↑ 
generated: '2026-07-18'
method: generated
source: openapi/cubist-cubesigner-openapi-original.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 173
  by_action_class:
    connected: 47
    acting: 126
  by_consequence:
    read: 47
    write: 111
    safety-critical: 13
    physical: 2
  human_in_the_loop_required: 13
operations:
- path: /v0/about_me
  method: get
  operationId: aboutMeLegacy
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - ''
    token:
      max-ttl: 3600
    audit: none
- path: /v0/attestation/.well-known/jwks.json
  method: get
  operationId: attestationJwkSet
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v0/email/orgs
  method: get
  operationId: email_my_orgs
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v0/internal/sentry
  method: post
  operationId: sentryApiCallPublic
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/mmi/v3/.well-known/jwks.json
  method: get
  operationId: mmiJwkSet
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v0/mmi/v3/json-rpc
  method: post
  operationId: mmi
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - mmi:*
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/oauth/token
  method: post
  operationId: oauth2TokenRefresh
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}
  method: get
  operationId: getOrg
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:org:get
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}
  method: patch
  operationId: updateOrg
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:org:update:*
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/audit
  method: post
  operationId: queryAuditLog
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:org:audit:query
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/auth_migration/add_identity
  method: post
  operationId: authMigrationIdentityAdd
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:authMigration:identity:add
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/auth_migration/remove_identity
  method: post
  operationId: authMigrationIdentityRemove
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:authMigration:identity:remove
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/auth_migration/update_users
  method: post
  operationId: authMigrationUserUpdate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:authMigration:user:update
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/ava/sign/{ava_chain}/{pubkey}
  method: post
  operationId: avaSerializedTxSign
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - sign:ava
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/ava/sign/{pubkey}
  method: post
  operationId: avaSign
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - sign:ava
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/babylon/cov/sign/{pubkey}
  method: post
  operationId: babylonCovSign
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - sign:babylon:covenant
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/babylon/eots/nonces/{pubkey}
  method: post
  operationId: createEotsNonces
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - sign:babylon:eots:nonces
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/babylon/eots/sign/{pubkey}
  method: post
  operationId: eotsSign
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - sign:babylon:eots:sign
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/babylon/registration/{pubkey}
  method: post
  operationId: babylonRegistration
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - sign:babylon:registration
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/babylon/staking/{pubkey}
  method: post
  operationId: babylonStaking
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - sign:babylon:staking
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/btc/message/sign/{pubkey}
  method: post
  operationId: btcMessageSign
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - sign:btc:message:legacy
    - sign:btc:message:segwit
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/btc/psbt/sign/{pubkey}
  method: post
  operationId: psbtSign
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - sign:btc:psbt:legacy
    - sign:btc:psbt:segwit
    - sign:btc:psbt:taproot
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/btc/sign/{pubkey}
  method: post
  operationId: btcSign
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - sign:btc:segwit
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/btc/taproot/sign/{pubkey}
  method: post
  operationId: btcTaprootSign
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - sign:btc:taproot
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/contacts
  method: get
  operationId: listContacts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:contact:list
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/contacts
  method: post
  operationId: createContact
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:contact:create
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/contacts/by-address
  method: post
  operationId: lookupContactsByAddress
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:contact:lookup:address
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/contacts/{contact_id}
  method: get
  operationId: getContact
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:contact:get
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/contacts/{contact_id}
  method: delete
  operationId: deleteContact
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:contact:delete
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/contacts/{contact_id}
  method: patch
  operationId: updateContact
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:contact:update:addresses
    - manage:contact:update:editPolicy
    - manage:contact:update:metadata
    - manage:contact:update:name
    - manage:contact:update:owner
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/counts
  method: get
  operationId: counts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:org:metrics:query
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/derive_key
  method: put
  operationId: deriveKeyLegacy
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:key:create
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/derive_keys
  method: put
  operationId: deriveKey
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:key:create
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/diffie_hellman/{key_id}
  method: post
  operationId: diffieHellmanExchange
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - sign:diffieHellman
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/emails/{purpose}
  method: get
  operationId: getEmailConfig
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:email:get
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/emails/{purpose}
  method: put
  operationId: configureEmail
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:email:update
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/emails/{purpose}
  method: delete
  operationId: deleteEmailConfig
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:email:delete
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/evm/eip191/sign/{pubkey}
  method: post
  operationId: eip191Sign
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - sign:evm:eip191
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/evm/eip712/sign/{pubkey}
  method: post
  operationId: eip712Sign
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - sign:evm:eip712
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/evm/eip7702/sign/{pubkey}
  method: post
  operationId: eip7702Sign
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - sign:evm:eip7702
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/export/{key_id}
  method: get
  operationId: getOrgExport
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:export:org:get
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/identity
  method: get
  operationId: listOidcIdentities
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:identity:list
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/identity
  method: post
  operationId: addOidcIdentity
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:identity:add
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/identity
  method: delete
  operationId: removeOidcIdentity
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:identity:remove
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/identity/prove
  method: post
  operationId: createProofCubeSigner
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/identity/prove/oidc
  method: post
  operationId: createProofOidc
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/identity/verify
  method: post
  operationId: verifyProof
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:identity:verify
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/idp/authenticate
  method: post
  operationId: idpAuthenticate
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/idp/password_reset
  method: post
  operationId: idpPasswordResetRequest
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v0/org/{org_id}/idp/password_reset
  method: patch
  operationId: idpPasswordResetConfirm
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /v0/org/{org_id}/import_key
  method: get
  operationId: createKeyImportKey
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:key:import
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/import_key
  method: put
  operationId: importKey
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:key:import
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/info
  method: get
  operationId: public_org_info
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/internal/custom_chain_rpc
  method: post
  operationId: customChainRpcCall
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/internal/esplora
  method: post
  operationId: esploraApiCall
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/internal/sentry
  method: post
  operationId: sentryApiCall
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/invitation/accept
  method: post
  operationId: invitationAccept
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/invitations
  method: get
  operationId: listInvitations
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:org:invitation:list
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/invitations
  method: delete
  operationId: cancelInvitation
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:org:invitation:cancel
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/invite
  method: post
  operationId: invite
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:org:inviteUser
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/keys
  method: get
  operationId: listKeysInOrg
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:key:list
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/keys
  method: post
  operationId: createKey
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:key:create
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/keys/{key_id}
  method: get
  operationId: getKeyInOrg
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:key:get
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/keys/{key_id}
  method: delete
  operationId: deleteKey
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:key:delete
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/keys/{key_id}
  method: patch
  operationId: updateKey
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:key:update:editPolicy
    - manage:key:update:enabled
    - manage:key:update:metadata
    - manage:key:update:owner
    - manage:key:update:policy
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/keys/{key_id}/attest
  method: get
  operationId: attestKey
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:key:attest
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/keys/{key_id}/roles
  method: get
  operationId: listKeyRoles
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:key:list_roles
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/keys/{key_id}/tx
  method: get
  operationId: listHistoricalKeyTx
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:key:history:tx:list
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/keys/{key_type}/{material_id}
  method: get
  operationId: getKeyByMaterialId
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:key:get
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/metrics
  method: post
  operationId: queryMetrics
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:org:metrics:query
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/mfa
  method: get
  operationId: mfaList
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:mfa:list
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/mfa/{mfa_id}
  method: get
  operationId: mfaGet
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/mfa/{mfa_id}
  method: patch
  operationId: mfaVoteCs
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:mfa:vote:cs
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/mfa/{mfa_id}/email
  method: post
  operationId: mfaEmailInit
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:mfa:vote:email
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/mfa/{mfa_id}/email
  method: patch
  operationId: mfaVoteEmailComplete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:mfa:vote:email
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/mfa/{mfa_id}/fido
  method: post
  operationId: mfaFidoInit
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:mfa:vote:fido
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/mfa/{mfa_id}/fido
  method: patch
  operationId: mfaVoteFidoComplete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:mfa:vote:fido
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/mfa/{mfa_id}/totp
  method: patch
  operationId: mfaVoteTotp
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:mfa:vote:totp
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/mmi/v3/messages
  method: get
  operationId: mmiMessageList
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:mmi:list
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/mmi/v3/messages/{msg_id}
  method: get
  operationId: mmiMessageGet
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    scope:
    - manage:mmi:get
    token:
      max-ttl: 3600
    audit: none
- path: /v0/org/{org_id}/mmi/v3/messages/{msg_id}
  method: delete
  operationId: mmiMessageDelete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:mmi:delete
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/mmi/v3/messages/{msg_id}/reject
  method: post
  operationId: mmiMessageReject
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:mmi:reject
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/mmi/v3/messages/{msg_id}/sign
  method: post
  operationId: mmiMessageSign
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - sign:mmi
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/oauth2/twitter
  method: post
  operationId: oauth2Twitter
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/oidc
  method: post
  operationId: oidcAuth
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/oidc/email-otp
  method: post
  operationId: emailOtpAuth
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/oidc/siwe
  method: post
  operationId: siweInit
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/oidc/siwe
  method: patch
  operationId: siweComplete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/oidc/siws
  method: post
  operationId: siwsInit
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/oidc/siws
  method: patch
  operationId: siwsComplete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/oidc/telegram
  method: post
  operationId: telegramAuth
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/orgs
  method: post
  operationId: createOrg
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    scope:
    - manage:org:create
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v0/org/{org_id}/policies
  method: get
  operationId: listPolicies
  x-agentic-access:
  

# --- truncated at 32 KB (60 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cubist/refs/heads/main/agentic-access/cubist-agentic-access.yml