Elastic Path · Agentic Access

Elastic Path Agentic Access

x-agentic-access generated

Elastic Path exposes 541 API operations that an AI agent could call, of which 294 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 247 read, 231 write, 60 physical, and 3 safety-critical.

3 operations are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

CommerceHeadless CommerceComposable CommerceeCommerceB2BProductsCatalogsOrdersPromotionsSubscriptionsPayments
Operations: 541 Acting: 294 Human-in-the-loop: 3 Method: generated

By consequence

read 247 write 231 physical 60 safety-critical 3

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
POST /pcm/catalogs/search/stopword-sets safety-critical required
PUT /pcm/catalogs/search/stopword-sets/{stopword_set_id} safety-critical required
DELETE /pcm/catalogs/search/stopword-sets/{stopword_set_id} safety-critical required
POST /pcm/custom-relationships physical conditional
PUT /pcm/custom-relationships/{customRelationshipSlug} physical conditional
DELETE /pcm/custom-relationships/{customRelationshipSlug} physical conditional
POST /pcm/hierarchies/{hierarchyID}/nodes/{nodeID}/relationships/children physical conditional
PUT /pcm/hierarchies/{hierarchyID}/nodes/{nodeID}/relationships/parent physical conditional
DELETE /pcm/hierarchies/{hierarchyID}/nodes/{nodeID}/relationships/parent physical conditional
POST /pcm/hierarchies/{hierarchyID}/nodes/{nodeID}/relationships/products physical conditional
DELETE /pcm/hierarchies/{hierarchyID}/nodes/{nodeID}/relationships/products physical conditional
POST /pcm/hierarchies/{hierarchyID}/relationships/children physical conditional
POST /pcm/products/{productID}/custom-relationships physical conditional
DELETE /pcm/products/{productID}/custom-relationships physical conditional
POST /pcm/products/{productID}/custom-relationships/{customRelationshipSlug} physical conditional
DELETE /pcm/products/{productID}/custom-relationships/{customRelationshipSlug} physical conditional
POST /pcm/products/{productID}/relationships/files physical conditional
PUT /pcm/products/{productID}/relationships/files physical conditional
DELETE /pcm/products/{productID}/relationships/files physical conditional
POST /pcm/products/{productID}/relationships/main_image physical conditional
PUT /pcm/products/{productID}/relationships/main_image physical conditional
DELETE /pcm/products/{productID}/relationships/main_image physical conditional
POST /pcm/products/{productID}/relationships/templates physical conditional
DELETE /pcm/products/{productID}/relationships/templates physical conditional
POST /pcm/products/{productID}/relationships/variations physical conditional

Source

Agentic Access

Raw ↑ 
generated: '2026-07-15'
method: generated
source: openapi/account-addresses.yaml, openapi/accounts.yaml, openapi/application-keys.yaml,
  openapi/authentication.yaml, openapi/carts.yaml, openapi/catalog-search.yaml, openapi/catalog.yaml,
  openapi/commerce-extensions.yaml, openapi/currencies.yaml, openapi/customer-addresses.yaml,
  openapi/exporter.yaml, openapi/files.yaml, openapi/flows.yaml, openapi/integrations.yaml,
  openapi/inventory-legacy.yaml, openapi/inventory.yaml, openapi/merchant-realm-mappings.yaml,
  openapi/payments.yaml, openapi/permissions.yaml, openapi/personal-data.yaml, openapi/pim.yaml,
  openapi/pricebooks.yaml, openapi/promotions-builder.yaml, openapi/promotions.yaml, openapi/settings.yaml,
  openapi/single-sign-on.yaml, openapi/subscriptions.yaml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 541
  by_action_class:
    acting: 294
    connected: 247
  by_consequence:
    write: 231
    read: 247
    physical: 60
    safety-critical: 3
  human_in_the_loop_required: 3
operations:
- path: /v2/accounts/{accountID}/addresses
  method: post
  operationId: post-v2-account-address
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/accounts/{accountID}/addresses
  method: get
  operationId: get-v2-account-addresses
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/accounts/{accountID}/addresses/{addressID}
  method: get
  operationId: get-v2-account-address
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/accounts/{accountID}/addresses/{addressID}
  method: put
  operationId: put-v2-account-address
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/accounts/{accountID}/addresses/{addressID}
  method: delete
  operationId: delete-v2-account-address
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/accounts
  method: post
  operationId: post-v2-accounts
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/accounts
  method: get
  operationId: get-v2-accounts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/accounts/{accountID}
  method: get
  operationId: get-v2-accounts-accountID
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/accounts/{accountID}
  method: put
  operationId: put-v2-accounts-accountID
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/accounts/{accountID}
  method: delete
  operationId: delete-v2-accounts-accountID
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/accounts/{accountID}/relationships/account-tags
  method: get
  operationId: GetAnAccountTagsRelationship
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/accounts/{accountID}/relationships/account-tags
  method: post
  operationId: AddAccountTagsOnAccount
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/accounts/{accountID}/relationships/account-tags
  method: delete
  operationId: RemoveAccountTagsOnAccount
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/account-members
  method: get
  operationId: get-v2-account-members
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/account-members/{accountMemberID}
  method: get
  operationId: get-v2-account-members-accountMemberID
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/account-members/{accountMemberID}
  method: put
  operationId: put-v2-account-members-accountMemberID
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/accounts/{accountID}/account-memberships
  method: post
  operationId: post-v2-accounts-accountID-account-memberships
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/accounts/{accountID}/account-memberships
  method: get
  operationId: get-v2-accounts-accountID-account-memberships
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/account-members/{accountMemberId}/account-memberships
  method: get
  operationId: get-v2-account-members-accountMemberId-account-memberships
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/accounts/{accountID}/account-memberships/unassigned-account-members
  method: get
  operationId: get-v2-accounts-accountID-account-memberships-unassigned-account-members
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/accounts/{accountID}/account-memberships/{membershipID}
  method: get
  operationId: get-v2-accounts-accountID-account-memberships-membershipID
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/accounts/{accountID}/account-memberships/{membershipID}
  method: put
  operationId: put-v2-accounts-accountID-account-memberships-membershipID
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/accounts/{accountID}/account-memberships/{membershipID}
  method: delete
  operationId: delete-v2-accounts-accountID-account-memberships-membershipID
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/settings/account-membership
  method: get
  operationId: get-v2-settings-account-membership
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/settings/account-membership
  method: put
  operationId: put-v2-settings-account-membership
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/settings/account-authentication
  method: get
  operationId: get-v2-settings-account-authentication
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/settings/account-authentication
  method: put
  operationId: put-v2-settings-account-authentication
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/account-members/tokens
  method: post
  operationId: post-v2-account-members-tokens
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/account-tags
  method: post
  operationId: CreateAnAccountTag
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/account-tags
  method: get
  operationId: ListAccountTags
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/account-tags/{tag_id}
  method: get
  operationId: GetAnAccountTag
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/account-tags/{tag_id}
  method: put
  operationId: UpdateAnAccountTag
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/account-tags/{tag_id}
  method: delete
  operationId: DeleteAnAccountTag
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/application-keys
  method: post
  operationId: CreateAnApplicationKey
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/application-keys
  method: get
  operationId: ListApplicationKeys
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/application-keys/{application-key-id}
  method: get
  operationId: GetAnApplicationKey
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/application-keys/{application-key-id}
  method: put
  operationId: UpdateAnApplicationKey
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/application-keys/{application-key-id}
  method: delete
  operationId: DeleteAnApplicationKey
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /oauth/access_token
  method: post
  operationId: CreateAnAccessToken
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts
  method: get
  operationId: getCarts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/carts
  method: post
  operationId: createACart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}
  method: get
  operationId: getACart
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/carts/{cartID}
  method: put
  operationId: updateACart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}
  method: delete
  operationId: deleteACart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/items
  method: get
  operationId: getCartItems
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/carts/{cartID}/items
  method: put
  operationId: bulkUpdateItemsInCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/items
  method: post
  operationId: manageCarts
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/items
  method: delete
  operationId: deleteAllCartItems
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/items/{cartitemID}
  method: put
  operationId: updateACartItem
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/items/{cartitemID}
  method: delete
  operationId: deleteACartItem
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/relationships/accounts
  method: post
  operationId: createAccountCartAssociation
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/relationships/accounts
  method: delete
  operationId: deleteAccountCartAssociation
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/relationships/customers
  method: post
  operationId: createCustomerCartAssociation
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/relationships/customers
  method: delete
  operationId: deleteCustomerCartAssociation
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/discounts/{promoCode}
  method: delete
  operationId: deleteAPromotionViaPromotionCode
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/items/{cartitemID}/taxes
  method: post
  operationId: addTaxItemToCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/items/{cartitemID}/components/{productID}/taxes
  method: post
  operationId: addTaxItemToCartItemComponent
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/items/{cartitemID}/components/{productID}/taxes/{taxitemID}
  method: put
  operationId: updateTaxItemFromCartItemComponent
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/items/{cartitemID}/components/{productID}/taxes/{taxitemID}
  method: delete
  operationId: deleteTaxItemFromCartItemComponent
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/taxes
  method: post
  operationId: bulkAddTaxItemsToCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/taxes
  method: delete
  operationId: bulkDeleteTaxItemsFromCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/items/{cartitemID}/taxes/{taxitemID}
  method: put
  operationId: updateATaxItem
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/items/{cartitemID}/taxes/{taxitemID}
  method: delete
  operationId: deleteATaxItem
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/custom-discounts
  method: post
  operationId: bulkAddCustomDiscountsToCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/custom-discounts
  method: delete
  operationId: bulkDeleteCustomDiscountsFromCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/custom-discounts/{customdiscountID}
  method: put
  operationId: updateCustomDiscountForCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/custom-discounts/{customdiscountID}
  method: delete
  operationId: deleteCustomDiscountFromCart
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/items/{cartitemID}/custom-discounts
  method: post
  operationId: addCustomDiscountToCartItem
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/items/{cartitemID}/custom-discounts/{customdiscountID}
  method: put
  operationId: updateCustomDiscountForCartItem
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/items/{cartitemID}/custom-discounts/{customdiscountID}
  method: delete
  operationId: deleteCustomDiscountFromCartItem
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/shipping-groups
  method: get
  operationId: getShippingGroups
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/carts/{cartID}/shipping-groups
  method: post
  operationId: createShippingGroup
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartId}/shipping-groups/{shippingGroupId}
  method: get
  operationId: getShippingGroupById
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/carts/{cartId}/shipping-groups/{shippingGroupId}
  method: put
  operationId: updateShippingGroup
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartId}/shipping-groups/{shippingGroupId}
  method: delete
  operationId: deleteCartShippingGroup
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/payments
  method: post
  operationId: createCartPaymentIntent
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/payments/{paymentIntentID}
  method: put
  operationId: updateCartPaymentIntent
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/carts/{cartID}/checkout
  method: post
  operationId: checkoutAPI
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/orders
  method: get
  operationId: getCustomerOrders
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/orders/{orderID}
  method: get
  operationId: getAnOrder
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/orders/{orderID}
  method: put
  operationId: updateAnOrder
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/orders/{orderID}/items
  method: get
  operationId: getOrderItems
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/orders/anonymize
  method: post
  operationId: anonymizeOrders
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/orders/{orderID}/confirm
  method: post
  operationId: confirmOrder
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/orders/{orderID}/payments
  method: post
  operationId: paymentSetup
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/orders/{orderID}/transactions/{transactionID}/confirm
  method: post
  operationId: confirmPayment
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/orders/{orderID}/transactions/{transactionID}/capture
  method: post
  operationId: captureATransaction
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/orders/{orderID}/transactions/{transactionID}/refund
  method: post
  operationId: refundATransaction
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/orders/{orderID}/transactions
  method: get
  operationId: getOrderTransactions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/orders/{orderID}/transactions/{transactionID}
  method: get
  operationId: getATransaction
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/orders/{orderID}/transactions/{transactionID}/cancel
  method: post
  operationId: cancelATransaction
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /v2/orders/{orderID}/shipping-groups
  method: get
  operationId: getOrderShippingGroups
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /v2/orders/{orderID}/shipping-groups
  method: post
  operationId: createOrderShippin

# --- truncated at 32 KB (169 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/elastic-path/refs/heads/main/agentic-access/elastic-path-agentic-access.yml