Deliverart Agentic Access
Deliverart exposes 130 API operations that an AI agent could call, of which 93 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 37 read, 68 write, 22 physical, and 3 safety-critical.
3 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /password/reset | safety-critical | required |
| POST | /password/reset/code/check | safety-critical | required |
| POST | /password/reset/code/request | safety-critical | required |
| POST | /delivery/order/{id}/delivered | physical | conditional |
| POST | /delivery/{id}/end | physical | conditional |
| POST | /delivery/{id}/take | physical | conditional |
| POST | /me/customer/ownership/pos | physical | conditional |
| POST | /order/cost/{id}/delete | physical | conditional |
| POST | /order/{id}/abort | physical | conditional |
| POST | /order/{id}/cost/create | physical | conditional |
| POST | /order/{id}/delete | physical | conditional |
| POST | /order/{id}/reserved/delivery/time | physical | conditional |
| POST | /order/{id}/reserved/delivery/time/remove | physical | conditional |
| POST | /order/{id}/reserved/take-away/time | physical | conditional |
| POST | /order/{id}/reserved/take-away/time/remove | physical | conditional |
| POST | /order/{id}/unset/customer | physical | conditional |
| POST | /order/{id}/unset/customer-address | physical | conditional |
| POST | /order/{id}/unset/customer-business-profile | physical | conditional |
| POST | /order/{id}/update/customer | physical | conditional |
| POST | /order/{id}/update/customer-address | physical | conditional |
| POST | /order/{id}/update/customer-business-profile | physical | conditional |
| POST | /order/{id}/update/menu/items | physical | conditional |
| POST | /order/{id}/update/note | physical | conditional |
| POST | /order/{id}/update/payment | physical | conditional |
| POST | /pos/{id}/order/init | physical | conditional |
Source
Agentic Access
generated: '2026-07-18'
method: generated
source: openapi/deliverart-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 130
by_action_class:
acting: 93
connected: 37
by_consequence:
write: 68
safety-critical: 3
read: 37
physical: 22
human_in_the_loop_required: 3
operations:
- path: /registration/register/customer
method: post
operationId: registrationRegisterCustomer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /registration/register/courier
method: post
operationId: registrationRegisterCourier
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /registration/activate
method: post
operationId: registrationActivate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /password/reset/code/request
method: post
operationId: passwordResetRequestCode
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /password/reset/code/check
method: post
operationId: passwordResetCheckValidCode
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /password/reset
method: post
operationId: passwordResetResetPassword
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /me
method: get
operationId: meInfo
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /me/update
method: post
operationId: meUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /me/update/password
method: post
operationId: meUpdatePassword
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /me/update/mobile-phone-number
method: post
operationId: meUpdateMobilePhoneNumber
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /me/verification/mobile/request
method: post
operationId: meVerificationMobilePhoneNumberRequest2faCode
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /me/verification/mobile/validate
method: post
operationId: meVerificationMobilePhoneNumberValidate2faCode
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /me/update/email
method: post
operationId: meUpdateEmail
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /me/verification/email/request
method: post
operationId: meVerificationEmailRequest2faCode
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /me/verification/email/validate
method: post
operationId: meVerificationEmailValidate2faCode
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /me/order/list
method: get
operationId: meOrderList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- order_admin
- order_list
token:
max-ttl: 3600
audit: none
- path: /me/customer/detail/pos/{id}
method: get
operationId: meCustomerDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /me/customer/create
method: post
operationId: meCustomerCreateProfile
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /me/customer/ownership/pos
method: post
operationId: meCustomerRedeemProfileByPos
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /me/customer/addresses/pos/{id}
method: get
operationId: meCustomerAddressList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /me/workshift/list
method: get
operationId: meWorkshiftList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /me/pos/list
method: get
operationId: mePosList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /company/{id}/detail
method: get
operationId: companiesDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- company_admin
- company_read
token:
max-ttl: 3600
audit: none
- path: /company/{id}/pos/list
method: get
operationId: companiesPosList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- company_admin
- company_pos_read
- company_read
token:
max-ttl: 3600
audit: none
- path: /pos/{id}/detail
method: get
operationId: pointsOfSaleDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /pos/{id}/customers
method: get
operationId: pointsOfSaleCustomersList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- customer_admin
- point_of_sale_admin
- read_customer
token:
max-ttl: 3600
audit: none
- path: /pos/{id}/workshifts
method: get
operationId: pointsOfSaleWorkshiftsList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- point_of_sale_admin
- workshifts_read
token:
max-ttl: 3600
audit: none
- path: /pos/{id}/delivery/fees
method: get
operationId: pointsOfSaleDeliveryFeesList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- deliveries_fee_read
- point_of_sale_admin
token:
max-ttl: 3600
audit: none
- path: /pos/{id}/deliveries
method: get
operationId: pointsOfSaleDeliveriesList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- deliveries_read
- point_of_sale_admin
token:
max-ttl: 3600
audit: none
- path: /pos/{id}/customer/find/phone-number/{phoneNumber}
method: get
operationId: pointsOfSaleCustomersFindByPhoneNumber
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- customer_admin
- point_of_sale_admin
- read_customer
token:
max-ttl: 3600
audit: none
- path: /pos/invitation/accept
method: post
operationId: pointsOfSaleInvitationAccept
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /pos/invitation/reject
method: post
operationId: pointsOfSaleInvitationReject
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /pos/{id}/settings
method: get
operationId: pointsOfSaleSettingsDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- point_of_sale_admin
- point_of_sale_read
token:
max-ttl: 3600
audit: none
- path: /pos/{id}/settings/update
method: post
operationId: pointsOfSaleSettingsUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- point_of_sale_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /address/{id}/detail
method: get
operationId: addressesDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- address_admin
- address_read
token:
max-ttl: 3600
audit: none
- path: /address/create/coordinates
method: post
operationId: addressesCreateFromCoordinates
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- address_admin
- address_create
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /address/create/place-id
method: post
operationId: addressesCreateFromGooglePlaceId
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- address_admin
- address_create
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /customer/{id}/detail
method: get
operationId: customersDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- customer_admin
- customer_read
token:
max-ttl: 3600
audit: none
- path: /pos/{id}/customer/create
method: post
operationId: customersCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- create_customer
- customer_admin
- point_of_sale_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /customer/{id}/update
method: post
operationId: customersUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- customer_admin
- customer_update
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /customer/{id}/delete
method: post
operationId: customersDelete
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_category_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /customer/{id}/order/list
method: get
operationId: customersOrderList
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- customer_admin
- customer_orders_read
token:
max-ttl: 3600
audit: none
- path: /customer/address/{customerId}/detail
method: get
operationId: customerAddressesDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- customer_address_read
- customer_admin
- customer_read
token:
max-ttl: 3600
audit: none
- path: /customer/{id}/address/create
method: post
operationId: customerAddressesCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- customer_address_create
- customer_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /customer/address/{id}/update
method: post
operationId: customerAddressesUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- customer_address_update
- customer_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /customer/address/{id}/default
method: post
operationId: customerAddressesSetAsDefault
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- customer_address_update
- customer_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /customer/address/{id}/delete
method: post
operationId: customerAddressesDelete
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- customer_address_update
- customer_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /customer/business-profile/{id}/detail
method: get
operationId: customerBusinessProfilesDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- customer_admin
- customer_business_profile_read
- customer_read
token:
max-ttl: 3600
audit: none
- path: /customer/{id}/business-profile/create
method: post
operationId: customerBusinessProfilesCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- customer_admin
- customer_business_profile_create
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /customer/business-profile/{id}/update
method: post
operationId: customerBusinessProfilesUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- customer_admin
- customer_business_profile_update
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /customer/business-profile/{id}/default
method: post
operationId: customerBusinessProfilesSetAsDefault
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- customer_admin
- customer_business_profile_update
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /customer/business-profile/{id}/delete
method: post
operationId: customerBusinessProfilesDelete
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- customer_admin
- customer_business_profile_update
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/{id}/detail
method: get
operationId: menuDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /menu/create
method: post
operationId: menuCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/{id}/update
method: post
operationId: menuUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/categories
method: get
operationId: menuCategories
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /menu/category/{id}/detail
method: get
operationId: menuCategoriesDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- menu_admin
- menu_item_category_admin
- menu_read
token:
max-ttl: 3600
audit: none
- path: /menu/category/create
method: post
operationId: menuCategoriesCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/category/{id}/update
method: post
operationId: menuCategoriesUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_category_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/allergen/{id}/category/meta
method: post
operationId: menuCategoriesUpdateMetadata
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_category_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/category/{id}/delete
method: post
operationId: menuCategoriesDelete
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_category_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/category/{id}/translate
method: post
operationId: menuCategoriesTranslate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_category_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/category/{id}/sort
method: post
operationId: menuCategoriesSort
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_category_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/category/{id}/media/upload
method: post
operationId: menuCategoriesMediaUpload
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_category_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/category/{id}/media/remove
method: post
operationId: menuCategoriesMediaRemove
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_category_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/allergens
method: get
operationId: menuAllergens
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /menu/allergen/{id}/detail
method: get
operationId: menuAllergensDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- menu_admin
- menu_item_allergen_admin
- menu_read
token:
max-ttl: 3600
audit: none
- path: /menu/allergen/create
method: post
operationId: menuAllergensCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/allergen/{id}/update
method: post
operationId: menuAllergensUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_allergen_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/allergen/{id}/update/meta
method: post
operationId: menuAllergensUpdateMetadata
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_allergen_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/allergen/{id}/delete
method: post
operationId: menuAllergensDelete
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_allergen_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/allergen/{id}/translate
method: post
operationId: menuAllergensTranslate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_allergen_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/ingredients
method: get
operationId: menuIngredients
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /menu/ingredient/{id}/detail
method: get
operationId: menuIngredientsDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- menu_admin
- menu_item_ingredient_admin
- menu_read
token:
max-ttl: 3600
audit: none
- path: /menu/ingredient/create
method: post
operationId: menuIngredientsCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/ingredient/{id}/update
method: post
operationId: menuIngredientsUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_ingredient_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/ingredient/{id}/update/meta
method: post
operationId: menuIngredientsUpdateMetadata
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_ingredient_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/ingredient/{id}/delete
method: post
operationId: menuIngredientsDelete
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_ingredient_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/ingredient/{id}/translate
method: post
operationId: menuIngredientsTranslate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_ingredient_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/item/{id}/detail
method: get
operationId: menuItemsDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /menu/item/create
method: post
operationId: menuItemsCreate
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/item/{id}/update
method: post
operationId: menuItemsUpdate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/item/{id}/update/meta
method: post
operationId: menuItemsUpdateMetadata
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/item/{id}/delete
method: post
operationId: menuItemsDelete
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/item/{id}/suspend
method: post
operationId: menuItemsSuspend
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/item/{id}/resume
method: post
operationId: menuItemsResume
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /menu/item/{id}/translate
method: post
operationId: menuItemsTranslate
x-agentic-access:
action-class: acting
consequence: write
subject: required
scope:
- menu_admin
- menu_item_ingredient_admin
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workshift/{id}/detail
method: get
operationId: workshiftsDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- workshifts_admin
- workshifts_read
token:
max-ttl: 3600
audit: none
- path: /workshift/{workshiftId}/address/{addressId}/delivery/times
method: get
operationId: workshiftsDeliveryTimes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- workshifts_admin
- workshifts_read
token:
max-ttl: 3600
audit: none
- path: /workshift/{workshiftId}/take-away/times
method: get
operationId: workshiftsTakeAwayTimes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- take_away_time_read
- workshifts_admin
token:
max-ttl: 3600
audit: none
- path: /workshift/invitation/accept
method: post
operationId: workshiftsInvitationAccept
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workshift/invitation/reject
method: post
operationId: workshiftsInvitationReject
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /delivery/fee/{id}/detail
method: get
operationId: deliveryFeeDetail
x-agentic-access:
action-class: connected
consequence: read
subject: optional
scope:
- delivery_admin
- delivery_fee_admin
- delivery_fee_
# --- truncated at 32 KB (47 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/deliverart/refs/heads/main/agentic-access/deliverart-agentic-access.yml