Hint Health Agentic Access
Hint Health exposes 153 API operations that an AI agent could call, of which 87 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 66 read, 52 write, and 35 physical.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /provider/charge_items | physical | conditional |
| DELETE | /provider/charge_items/{id} | physical | conditional |
| PATCH | /provider/charge_items/{id} | physical | conditional |
| POST | /provider/charges | physical | conditional |
| POST | /provider/companies/{company_id}/invoices/{invoice_id}/payments | physical | conditional |
| POST | /provider/companies/{company_id}/sponsorships | physical | conditional |
| DELETE | /provider/companies/{company_id}/sponsorships/{id} | physical | conditional |
| PATCH | /provider/companies/{company_id}/sponsorships/{id} | physical | conditional |
| POST | /provider/customer_invoices | physical | conditional |
| POST | /provider/customer_invoices/{customer_invoice_id}/charges | physical | conditional |
| DELETE | /provider/customer_invoices/{customer_invoice_id}/charges/{id} | physical | conditional |
| PATCH | /provider/customer_invoices/{customer_invoice_id}/charges/{id} | physical | conditional |
| POST | /provider/customer_invoices/{customer_invoice_id}/payments | physical | conditional |
| POST | /provider/customer_invoices/{customer_invoice_id}/pdf | physical | conditional |
| DELETE | /provider/customer_invoices/{id} | physical | conditional |
| PATCH | /provider/customer_invoices/{id} | physical | conditional |
| POST | /provider/customer_invoices/{id}/issue | physical | conditional |
| POST | /provider/customer_invoices/{id}/return_to_draft | physical | conditional |
| POST | /provider/customer_invoices/{id}/void | physical | conditional |
| POST | /provider/memberships | physical | conditional |
| DELETE | /provider/memberships/{id} | physical | conditional |
| PATCH | /provider/memberships/{id} | physical | conditional |
| POST | /provider/memberships/{id}/bill | physical | conditional |
| POST | /provider/memberships/{id}/cancel | physical | conditional |
| POST | /provider/memberships/{id}/confirm | physical | conditional |
Source
Agentic Access
generated: '2026-07-15'
method: generated
source: openapi/hint-health-hint-health-api-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 153
by_action_class:
acting: 87
connected: 66
by_consequence:
write: 52
read: 66
physical: 35
human_in_the_loop_required: 0
operations:
- path: /provider/patients/{patient_id}/account_access_tokens
method: post
operationId: AccountAccessToken.CreateAcccessToken
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/affiliates/{affiliate_id}/affiliate_bills
method: get
operationId: AffiliateBill.ListAffiliateBills
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/affiliates
method: get
operationId: Affiliate.ListAffiliates
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/affiliates/{affiliate_id}/patients
method: post
operationId: AffiliatePatient.CreateAffiliatePatient
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/affiliates/{affiliate_id}/patients/{id}
method: delete
operationId: AffiliatePatient.DestroyAffiliatePatient
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/patients/{patient_id}/affiliate
method: get
operationId: Affiliate.ShowPatientAffiliate
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/cancellation_reasons
method: get
operationId: CancellationReason.ListCancellationReasons
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/charges
method: post
operationId: Charge.CreateCharge
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/charge_items
method: post
operationId: ChargeItem.CreateChargeItem
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/charge_items
method: get
operationId: ChargeItem.ListAllChargeItems
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/charge_items/{id}
method: delete
operationId: ChargeItem.DeleteChargeItem
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/charge_items/{id}
method: get
operationId: ChargeItem.ShowChargeItem
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/charge_items/{id}
method: patch
operationId: ChargeItem.UpdateChargeItem
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/patients/{patient_id}/interactions/clinical_note
method: post
operationId: ClinicalNoteInteraction.CreateClinicalNoteInteraction
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/patients/{patient_id}/interactions/clinical_note/{id}
method: get
operationId: ClinicalNoteInteraction.ShowClinicalNoteInteraction
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/patients/{patient_id}/interactions/clinical_note/{id}
method: patch
operationId: ClinicalNoteInteraction.UpdateClinicalNoteInteraction
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/companies
method: post
operationId: Company.CreateCompany
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/companies
method: get
operationId: Company.ListAllCompanies
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/companies/{id}/deactivate
method: post
operationId: Company.DeactivateCompany
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/companies/{company_id}/company_plans
method: post
operationId: CompanyPlan.CreateCompanyPlan
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/companies/{company_id}/company_plans
method: get
operationId: CompanyPlan.ListCompanyPlans
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/companies/{company_id}/company_plans/{id}
method: delete
operationId: CompanyPlan.DestroyCompanyPlan
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/companies/{company_id}/company_plans/{id}
method: patch
operationId: CompanyPlan.UpdateCompanyPlan
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/companies/{id}
method: get
operationId: Company.ShowCompany
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/companies/{id}
method: patch
operationId: Company.UpdateCompany
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/coupons
method: get
operationId: Coupon.ListAllCoupons
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/coupons/{id}
method: get
operationId: Coupon.ShowCoupon
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/credit_categories
method: post
operationId: CreditCategory.CreateCreditCategory
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/credit_categories
method: get
operationId: CreditCategory.ListCreditCategories
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/credit_categories/{id}
method: delete
operationId: CreditCategory.DeleteCreditCategory
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/credit_categories/{id}
method: get
operationId: CreditCategory.ShowCreditCategory
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/credit_categories/{id}
method: patch
operationId: CreditCategory.UpdateCreditCategory
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/patients/{patient_id}/credits
method: post
operationId: Credit.CreateCredit
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/patients/{patient_id}/credits
method: get
operationId: Credit.ListAllCredits
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/credit_lines
method: get
operationId: CreditLine.ListCreditLines
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/patients/{patient_id}/credits/{id}
method: patch
operationId: Credit.UpdateCredit
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/customer_invoices/{customer_invoice_id}/charges
method: post
operationId: CustomerInvoiceCharge.CreateCustomerInvoiceCharge
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/customer_invoices/{customer_invoice_id}/charges/{id}
method: delete
operationId: CustomerInvoiceCharge.DeleteCustomerInvoiceCharge
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/customer_invoices/{customer_invoice_id}/charges/{id}
method: patch
operationId: CustomerInvoiceCharge.UpdateCustomerInvoiceCharge
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/customer_invoices
method: post
operationId: CustomerInvoice.CreateCustomerInvoice
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/customer_invoices
method: get
operationId: CustomerInvoice.ListAllCustomerInvoices
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/customer_invoices/{customer_invoice_id}/pdf
method: post
operationId: CustomerInvoice.CreatePDF
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/customer_invoices/{id}
method: delete
operationId: CustomerInvoice.DeleteCustomerInvoice
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/customer_invoices/{id}
method: get
operationId: CustomerInvoice.ShowCustomerInvoice
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/customer_invoices/{id}
method: patch
operationId: CustomerInvoice.UpdateCustomerInvoice
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/customer_invoices/{id}/issue
method: post
operationId: CustomerInvoice.IssueCustomerInvoice
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/customer_invoices/{customer_invoice_id}/payments
method: post
operationId: CustomerInvoicePayment.CreatePayment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/customer_invoices/{customer_invoice_id}/payments
method: get
operationId: CustomerInvoicePayment.ListAllPayments
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/customer_invoices/{customer_invoice_id}/payments/{id}
method: get
operationId: CustomerInvoicePayment.ShowPayment
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/customer_invoices/{id}/return_to_draft
method: post
operationId: CustomerInvoice.ReturnToDraft
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/customer_invoices/{id}/void
method: post
operationId: CustomerInvoice.VoidCustomerInvoice
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/patients/{patient_id}/interactions/document
method: post
operationId: DocumentInteraction.CreateDocumentInteraction
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/patients/{patient_id}/interactions/document/{id}
method: get
operationId: DocumentInteraction.ShowDocumentInteraction
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/patients/{patient_id}/interactions/document/{id}
method: patch
operationId: DocumentInteraction.UpdateDocumentInteraction
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/companies/{company_id}/employee_divisions
method: get
operationId: EmployeeDivision.ListAllEmployeeDivisions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/patients/{patient_id}/form_responses
method: get
operationId: FormResponse.ListAllFormResponses
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/patients/{patient_id}/form_responses/{id}
method: get
operationId: FormResponse.ShowFormResponse
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /global_webhook_endpoints
method: post
operationId: GlobalWebhookEndpoint.CreateWebhookEndpointLegacy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /global_webhook_endpoints
method: get
operationId: GlobalWebhookEndpoint.WebhookEndpointsLegacy
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /global_webhook_endpoints/{id}
method: delete
operationId: GlobalWebhookEndpoint.DeleteWebhookEndpointLegacy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /global_webhook_endpoints/{id}
method: get
operationId: GlobalWebhookEndpoint.ShowWebhookEndpointLegacy
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /global_webhook_endpoints/{id}
method: patch
operationId: GlobalWebhookEndpoint.UpdateWebhookEndpointLegacy
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /integrations/{id}/activate
method: post
operationId: Integration.ActivateIntegration
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /integrations/{id}/deactivate
method: post
operationId: Integration.DeactivateIntegration
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /integrations
method: get
operationId: Integration.ListAllIntegrations
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/patients/{patient_id}/integration_records
method: get
operationId: IntegrationRecord.ListAllIntegrationRecords
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /integrations/{id}
method: get
operationId: Integration.ShowIntegration
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /integrations/{id}
method: patch
operationId: Integration.UpdateIntegration
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/interactions
method: get
operationId: Interaction.ListAllInteractions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/interactions/{interaction_id}/notifications
method: post
operationId: InteractionNotifications.CreateInteractionNotification
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/companies/{company_id}/invoices
method: get
operationId: Invoice.ListAllInvoices
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/companies/{company_id}/invoices/{invoice_id}/payments
method: post
operationId: InvoicePayment.CreatePayment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/companies/{company_id}/invoices/{invoice_id}/payments
method: get
operationId: InvoicePayment.ListAllPayments
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/companies/{company_id}/invoices/{invoice_id}/payments/{id}
method: get
operationId: InvoicePayment.ShowPayment
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/companies/{company_id}/invoices/{id}
method: get
operationId: Invoice.ShowInvoice
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/patients/{patient_id}/interactions/lab
method: post
operationId: LabInteraction.CreateLabInteraction
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/patients/{patient_id}/interactions/lab/{id}
method: get
operationId: LabInteraction.ShowLabInteraction
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/patients/{patient_id}/interactions/lab/{id}
method: patch
operationId: LabInteraction.UpdateLabInteraction
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/lead_sources/{id}
method: delete
operationId: LeadSource.DeleteLeadSource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/lead_sources/{id}
method: patch
operationId: LeadSource.UpdateLeadSource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/lead_sources
method: post
operationId: LeadSource.LeadSource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/lead_sources
method: get
operationId: LeadSource.LeadSources
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/locations
method: post
operationId: Location.CreateLocation
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/locations
method: get
operationId: Location.ListLocations
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/locations/{id}
method: delete
operationId: Location.DeleteLocation
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/locations/{id}
method: get
operationId: Location.ShowLocation
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/locations/{id}
method: patch
operationId: Location.UpdateLocation
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/memberships/{id}/bill
method: post
operationId: Membership.BillMembership
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/memberships/{id}/cancel
method: post
operationId: Membership.CancelMembership
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/memberships/{id}/confirm
method: post
operationId: Membership.ConfirmMembership
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/memberships/{membership_id}/contracts
method: get
operationId: MembershipContract.ListAllMembershipContracts
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/memberships/{membership_id}/contracts/renew
method: post
operationId: MembershipContract.RenewMembershipContract
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/memberships/{membership_id}/contracts/{id}
method: patch
operationId: MembershipContract.UpdateMembershipContract
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/memberships
method: post
operationId: Membership.CreateMembership
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/memberships
method: get
operationId: Membership.ListAllMemberships
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /provider/memberships/{id}
method: delete
operationId: Membership.DeleteMembership
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /provider/memberships/{id}
method: get
operationId: Membership.ShowMembership
x-agentic-acc
# --- truncated at 32 KB (49 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/hint-health/refs/heads/main/agentic-access/hint-health-agentic-access.yml