Hint Health · Agentic Access

Hint Health Agentic Access

x-agentic-access generated

Hint Health exposes 153 API operations that an AI agent could call, of which 87 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 66 read, 52 write, and 35 physical.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

Direct Primary CareDPCHealthcareMembership ManagementPatient EnrollmentMedical BillingEMRHealth Plans
Operations: 153 Acting: 87 Human-in-the-loop: 0 Method: generated

By consequence

read 66 write 52 physical 35

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
POST /provider/charge_items physical conditional
DELETE /provider/charge_items/{id} physical conditional
PATCH /provider/charge_items/{id} physical conditional
POST /provider/charges physical conditional
POST /provider/companies/{company_id}/invoices/{invoice_id}/payments physical conditional
POST /provider/companies/{company_id}/sponsorships physical conditional
DELETE /provider/companies/{company_id}/sponsorships/{id} physical conditional
PATCH /provider/companies/{company_id}/sponsorships/{id} physical conditional
POST /provider/customer_invoices physical conditional
POST /provider/customer_invoices/{customer_invoice_id}/charges physical conditional
DELETE /provider/customer_invoices/{customer_invoice_id}/charges/{id} physical conditional
PATCH /provider/customer_invoices/{customer_invoice_id}/charges/{id} physical conditional
POST /provider/customer_invoices/{customer_invoice_id}/payments physical conditional
POST /provider/customer_invoices/{customer_invoice_id}/pdf physical conditional
DELETE /provider/customer_invoices/{id} physical conditional
PATCH /provider/customer_invoices/{id} physical conditional
POST /provider/customer_invoices/{id}/issue physical conditional
POST /provider/customer_invoices/{id}/return_to_draft physical conditional
POST /provider/customer_invoices/{id}/void physical conditional
POST /provider/memberships physical conditional
DELETE /provider/memberships/{id} physical conditional
PATCH /provider/memberships/{id} physical conditional
POST /provider/memberships/{id}/bill physical conditional
POST /provider/memberships/{id}/cancel physical conditional
POST /provider/memberships/{id}/confirm physical conditional

Source

Agentic Access

Raw ↑
generated: '2026-07-15'
method: generated
source: openapi/hint-health-hint-health-api-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 153
  by_action_class:
    acting: 87
    connected: 66
  by_consequence:
    write: 52
    read: 66
    physical: 35
  human_in_the_loop_required: 0
operations:
- path: /provider/patients/{patient_id}/account_access_tokens
  method: post
  operationId: AccountAccessToken.CreateAcccessToken
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/affiliates/{affiliate_id}/affiliate_bills
  method: get
  operationId: AffiliateBill.ListAffiliateBills
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/affiliates
  method: get
  operationId: Affiliate.ListAffiliates
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/affiliates/{affiliate_id}/patients
  method: post
  operationId: AffiliatePatient.CreateAffiliatePatient
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/affiliates/{affiliate_id}/patients/{id}
  method: delete
  operationId: AffiliatePatient.DestroyAffiliatePatient
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/patients/{patient_id}/affiliate
  method: get
  operationId: Affiliate.ShowPatientAffiliate
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/cancellation_reasons
  method: get
  operationId: CancellationReason.ListCancellationReasons
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/charges
  method: post
  operationId: Charge.CreateCharge
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/charge_items
  method: post
  operationId: ChargeItem.CreateChargeItem
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/charge_items
  method: get
  operationId: ChargeItem.ListAllChargeItems
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/charge_items/{id}
  method: delete
  operationId: ChargeItem.DeleteChargeItem
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/charge_items/{id}
  method: get
  operationId: ChargeItem.ShowChargeItem
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/charge_items/{id}
  method: patch
  operationId: ChargeItem.UpdateChargeItem
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/patients/{patient_id}/interactions/clinical_note
  method: post
  operationId: ClinicalNoteInteraction.CreateClinicalNoteInteraction
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/patients/{patient_id}/interactions/clinical_note/{id}
  method: get
  operationId: ClinicalNoteInteraction.ShowClinicalNoteInteraction
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/patients/{patient_id}/interactions/clinical_note/{id}
  method: patch
  operationId: ClinicalNoteInteraction.UpdateClinicalNoteInteraction
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/companies
  method: post
  operationId: Company.CreateCompany
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/companies
  method: get
  operationId: Company.ListAllCompanies
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/companies/{id}/deactivate
  method: post
  operationId: Company.DeactivateCompany
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/companies/{company_id}/company_plans
  method: post
  operationId: CompanyPlan.CreateCompanyPlan
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/companies/{company_id}/company_plans
  method: get
  operationId: CompanyPlan.ListCompanyPlans
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/companies/{company_id}/company_plans/{id}
  method: delete
  operationId: CompanyPlan.DestroyCompanyPlan
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/companies/{company_id}/company_plans/{id}
  method: patch
  operationId: CompanyPlan.UpdateCompanyPlan
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/companies/{id}
  method: get
  operationId: Company.ShowCompany
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/companies/{id}
  method: patch
  operationId: Company.UpdateCompany
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/coupons
  method: get
  operationId: Coupon.ListAllCoupons
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/coupons/{id}
  method: get
  operationId: Coupon.ShowCoupon
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/credit_categories
  method: post
  operationId: CreditCategory.CreateCreditCategory
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/credit_categories
  method: get
  operationId: CreditCategory.ListCreditCategories
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/credit_categories/{id}
  method: delete
  operationId: CreditCategory.DeleteCreditCategory
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/credit_categories/{id}
  method: get
  operationId: CreditCategory.ShowCreditCategory
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/credit_categories/{id}
  method: patch
  operationId: CreditCategory.UpdateCreditCategory
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/patients/{patient_id}/credits
  method: post
  operationId: Credit.CreateCredit
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/patients/{patient_id}/credits
  method: get
  operationId: Credit.ListAllCredits
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/credit_lines
  method: get
  operationId: CreditLine.ListCreditLines
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/patients/{patient_id}/credits/{id}
  method: patch
  operationId: Credit.UpdateCredit
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/customer_invoices/{customer_invoice_id}/charges
  method: post
  operationId: CustomerInvoiceCharge.CreateCustomerInvoiceCharge
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/customer_invoices/{customer_invoice_id}/charges/{id}
  method: delete
  operationId: CustomerInvoiceCharge.DeleteCustomerInvoiceCharge
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/customer_invoices/{customer_invoice_id}/charges/{id}
  method: patch
  operationId: CustomerInvoiceCharge.UpdateCustomerInvoiceCharge
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/customer_invoices
  method: post
  operationId: CustomerInvoice.CreateCustomerInvoice
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/customer_invoices
  method: get
  operationId: CustomerInvoice.ListAllCustomerInvoices
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/customer_invoices/{customer_invoice_id}/pdf
  method: post
  operationId: CustomerInvoice.CreatePDF
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/customer_invoices/{id}
  method: delete
  operationId: CustomerInvoice.DeleteCustomerInvoice
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/customer_invoices/{id}
  method: get
  operationId: CustomerInvoice.ShowCustomerInvoice
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/customer_invoices/{id}
  method: patch
  operationId: CustomerInvoice.UpdateCustomerInvoice
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/customer_invoices/{id}/issue
  method: post
  operationId: CustomerInvoice.IssueCustomerInvoice
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/customer_invoices/{customer_invoice_id}/payments
  method: post
  operationId: CustomerInvoicePayment.CreatePayment
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/customer_invoices/{customer_invoice_id}/payments
  method: get
  operationId: CustomerInvoicePayment.ListAllPayments
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/customer_invoices/{customer_invoice_id}/payments/{id}
  method: get
  operationId: CustomerInvoicePayment.ShowPayment
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/customer_invoices/{id}/return_to_draft
  method: post
  operationId: CustomerInvoice.ReturnToDraft
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/customer_invoices/{id}/void
  method: post
  operationId: CustomerInvoice.VoidCustomerInvoice
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/patients/{patient_id}/interactions/document
  method: post
  operationId: DocumentInteraction.CreateDocumentInteraction
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/patients/{patient_id}/interactions/document/{id}
  method: get
  operationId: DocumentInteraction.ShowDocumentInteraction
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/patients/{patient_id}/interactions/document/{id}
  method: patch
  operationId: DocumentInteraction.UpdateDocumentInteraction
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/companies/{company_id}/employee_divisions
  method: get
  operationId: EmployeeDivision.ListAllEmployeeDivisions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/patients/{patient_id}/form_responses
  method: get
  operationId: FormResponse.ListAllFormResponses
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/patients/{patient_id}/form_responses/{id}
  method: get
  operationId: FormResponse.ShowFormResponse
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /global_webhook_endpoints
  method: post
  operationId: GlobalWebhookEndpoint.CreateWebhookEndpointLegacy
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /global_webhook_endpoints
  method: get
  operationId: GlobalWebhookEndpoint.WebhookEndpointsLegacy
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /global_webhook_endpoints/{id}
  method: delete
  operationId: GlobalWebhookEndpoint.DeleteWebhookEndpointLegacy
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /global_webhook_endpoints/{id}
  method: get
  operationId: GlobalWebhookEndpoint.ShowWebhookEndpointLegacy
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /global_webhook_endpoints/{id}
  method: patch
  operationId: GlobalWebhookEndpoint.UpdateWebhookEndpointLegacy
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /integrations/{id}/activate
  method: post
  operationId: Integration.ActivateIntegration
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /integrations/{id}/deactivate
  method: post
  operationId: Integration.DeactivateIntegration
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /integrations
  method: get
  operationId: Integration.ListAllIntegrations
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/patients/{patient_id}/integration_records
  method: get
  operationId: IntegrationRecord.ListAllIntegrationRecords
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /integrations/{id}
  method: get
  operationId: Integration.ShowIntegration
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /integrations/{id}
  method: patch
  operationId: Integration.UpdateIntegration
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/interactions
  method: get
  operationId: Interaction.ListAllInteractions
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/interactions/{interaction_id}/notifications
  method: post
  operationId: InteractionNotifications.CreateInteractionNotification
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/companies/{company_id}/invoices
  method: get
  operationId: Invoice.ListAllInvoices
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/companies/{company_id}/invoices/{invoice_id}/payments
  method: post
  operationId: InvoicePayment.CreatePayment
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/companies/{company_id}/invoices/{invoice_id}/payments
  method: get
  operationId: InvoicePayment.ListAllPayments
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/companies/{company_id}/invoices/{invoice_id}/payments/{id}
  method: get
  operationId: InvoicePayment.ShowPayment
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/companies/{company_id}/invoices/{id}
  method: get
  operationId: Invoice.ShowInvoice
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/patients/{patient_id}/interactions/lab
  method: post
  operationId: LabInteraction.CreateLabInteraction
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/patients/{patient_id}/interactions/lab/{id}
  method: get
  operationId: LabInteraction.ShowLabInteraction
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/patients/{patient_id}/interactions/lab/{id}
  method: patch
  operationId: LabInteraction.UpdateLabInteraction
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/lead_sources/{id}
  method: delete
  operationId: LeadSource.DeleteLeadSource
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/lead_sources/{id}
  method: patch
  operationId: LeadSource.UpdateLeadSource
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/lead_sources
  method: post
  operationId: LeadSource.LeadSource
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/lead_sources
  method: get
  operationId: LeadSource.LeadSources
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/locations
  method: post
  operationId: Location.CreateLocation
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/locations
  method: get
  operationId: Location.ListLocations
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/locations/{id}
  method: delete
  operationId: Location.DeleteLocation
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/locations/{id}
  method: get
  operationId: Location.ShowLocation
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/locations/{id}
  method: patch
  operationId: Location.UpdateLocation
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/memberships/{id}/bill
  method: post
  operationId: Membership.BillMembership
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/memberships/{id}/cancel
  method: post
  operationId: Membership.CancelMembership
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/memberships/{id}/confirm
  method: post
  operationId: Membership.ConfirmMembership
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/memberships/{membership_id}/contracts
  method: get
  operationId: MembershipContract.ListAllMembershipContracts
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/memberships/{membership_id}/contracts/renew
  method: post
  operationId: MembershipContract.RenewMembershipContract
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/memberships/{membership_id}/contracts/{id}
  method: patch
  operationId: MembershipContract.UpdateMembershipContract
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/memberships
  method: post
  operationId: Membership.CreateMembership
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/memberships
  method: get
  operationId: Membership.ListAllMemberships
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /provider/memberships/{id}
  method: delete
  operationId: Membership.DeleteMembership
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /provider/memberships/{id}
  method: get
  operationId: Membership.ShowMembership
  x-agentic-acc

# --- truncated at 32 KB (49 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/hint-health/refs/heads/main/agentic-access/hint-health-agentic-access.yml