Huma · Agentic Access

Huma Agentic Access

x-agentic-access generated

Huma exposes 984 API operations that an AI agent could call, of which 527 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 457 read, 397 write, 124 physical, and 6 safety-critical.

6 operations are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

HealthcareUnited KingdomRemote Patient MonitoringTelehealthDigital HealthClinical TrialsSDKMedical Device SoftwarePopulation Health
Operations: 984 Acting: 527 Human-in-the-loop: 6 Method: generated

By consequence

read 457 write 397 physical 124 safety-critical 6

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
POST /api/auth/v1/password-reset safety-critical required
POST /api/auth/v1/request-password-reset safety-critical required
POST /api/extensions/v1/admin/deployment/{deployment_id}/reset-demo-user safety-critical required
POST /api/extensions/v1/deployment/clone safety-critical required
POST /api/extensions/v1/user/{user_id}/module-result/AsthmaControlTest safety-critical required
POST /api/extensions/v1/user/{user_id}/module-result/AsthmaControlTest/search safety-critical required
POST /api/auth/v1/sendverificationtoken physical conditional
POST /api/extensions/template-bank/import physical conditional
POST /api/extensions/template-bank/remove physical conditional
POST /api/extensions/v1/admin/send-invitation physical conditional
POST /api/extensions/v1/deployment physical conditional
POST /api/extensions/v1/deployment/create-patient-profile physical conditional
POST /api/extensions/v1/deployment/file-library physical conditional
POST /api/extensions/v1/deployment/full physical conditional
DELETE /api/extensions/v1/deployment/invitation physical conditional
POST /api/extensions/v1/deployment/invitation-link physical conditional
DELETE /api/extensions/v1/deployment/invitation/{invitation_id} physical conditional
POST /api/extensions/v1/deployment/invitations physical conditional
POST /api/extensions/v1/deployment/move physical conditional
POST /api/extensions/v1/deployment/resend-invitation-list physical conditional
POST /api/extensions/v1/deployment/search physical conditional
POST /api/extensions/v1/deployment/send-invitation physical conditional
POST /api/extensions/v1/deployment/send-invitation/{user_id} physical conditional
POST /api/extensions/v1/deployment/template physical conditional
PUT /api/extensions/v1/deployment/template/{template_id} physical conditional

Source

Agentic Access

Raw ↑ 
generated: '2026-07-24'
method: generated
source: openapi/huma-platform-openapi-original.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 984
  by_action_class:
    connected: 457
    acting: 527
  by_consequence:
    read: 457
    write: 397
    safety-critical: 6
    physical: 124
  human_in_the_loop_required: 6
operations:
- path: /.well-known/apple-app-site-association
  method: get
  operationId: .well_known_apple_app_site_association_retrieve_[retrieve_deeplink_for_apple_app]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /.well-known/assetlinks.json
  method: get
  operationId: .well_known_assetlinks.json_retrieve_[retrieve_deeplink_for_android_app]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/auth/v1/authprofile
  method: post
  operationId: api_auth_v1_authprofile_create_[auth_profile]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/check-auth-attributes
  method: post
  operationId: api_auth_v1_check_auth_attributes_create_[check_auth_attributes]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/confirm
  method: post
  operationId: api_auth_v1_confirm_create_[confirmation]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/me
  method: get
  operationId: api_auth_v1_me_retrieve_[me]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/auth/v1/password-reset
  method: post
  operationId: api_auth_v1_password_reset_create_[password_reset]
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /api/auth/v1/private/user/{user_id}/delete-user
  method: delete
  operationId: api_auth_v1_private_user_delete_user_destroy_[delete_user]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/refreshtoken
  method: post
  operationId: api_auth_v1_refreshtoken_create_[refresh_token_v1]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/request-code
  method: post
  operationId: api_auth_v1_request_code_create_[request_code]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/request-password-reset
  method: post
  operationId: api_auth_v1_request_password_reset_create_[request_password_reset]
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /api/auth/v1/sendverificationtoken
  method: post
  operationId: api_auth_v1_sendverificationtoken_create_[send_verification_token]
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/service-account
  method: post
  operationId: api_auth_v1_service_account_create_[create_service_account]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/set-auth-attributes
  method: post
  operationId: api_auth_v1_set_auth_attributes_create_[set_auth_attributes]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/signin
  method: post
  operationId: api_auth_v1_signin_create_[sign_in_v1]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/signout
  method: post
  operationId: api_auth_v1_signout_create_[sign_out_v1]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/signup
  method: post
  operationId: api_auth_v1_signup_create_[sign_up]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/sso/callback
  method: post
  operationId: api_auth_v1_sso_callback_create_[saml_callback]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/sso/oidc-callback
  method: get
  operationId: api_auth_v1_sso_oidc_callback_retrieve_[oidc_callback]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/auth/v1/sso/request
  method: post
  operationId: api_auth_v1_sso_request_create_[sso_request]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/user/{user_id}/api-key
  method: get
  operationId: api_auth_v1_user_api_key_retrieve_[retrieve_api_keys]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/auth/v1/user/{user_id}/api-key
  method: post
  operationId: api_auth_v1_user_api_key_create_[generate_api_key]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/user/{user_id}/api-key/{key_id}
  method: delete
  operationId: api_auth_v1_user_api_key_destroy_[delete_api_key]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/user/{user_id}/sessions
  method: get
  operationId: api_auth_v1_user_sessions_retrieve_[retrieve_sessions]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/auth/v1/user/{user_id}/token
  method: post
  operationId: api_auth_v1_user_token_create_[generate_auth_token]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/auth/v1/verify
  method: post
  operationId: api_auth_v1_verify_create_[verify_credentials]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/autocomplete/v1/AZVaccineBatchNumber/search
  method: get
  operationId: api_autocomplete_v1_AZVaccineBatchNumber_search_retrieve_[func]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/autocomplete/v1/Indications/search
  method: get
  operationId: api_autocomplete_v1_Indications_search_retrieve_[func]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/autocomplete/v1/Medications/search
  method: get
  operationId: api_autocomplete_v1_Medications_search_retrieve_[func]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/autocomplete/v1/MedicationsV2/search
  method: get
  operationId: api_autocomplete_v1_MedicationsV2_search_retrieve_[func]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/autocomplete/v1/Symptoms/search
  method: get
  operationId: api_autocomplete_v1_Symptoms_search_retrieve_[func]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/autocomplete/v1/update
  method: post
  operationId: api_autocomplete_v1_update_create_[update_autocomplete_metadata]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/calendar/v1/render/test
  method: get
  operationId: api_calendar_v1_render_test_retrieve_[test_calendar]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/calendar/v1/user/{user_id}/export
  method: get
  operationId: api_calendar_v1_user_export_retrieve_[export_calendar]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/care-plan/v1/user/{user_id}/care-plan
  method: get
  operationId: api_care_plan_v1_user_care_plan_retrieve_[retrieve_care_plan]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/care-plan/v1/user/{user_id}/care-plan
  method: post
  operationId: api_care_plan_v1_user_care_plan_create_[assign_care_plan]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/care-plan/v1/user/{user_id}/cycler/mock
  method: post
  operationId: api_care_plan_v1_user_cycler_mock_create_[mock_adp_cycler_data]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/care-plan/v1/user/{user_id}/prescription
  method: post
  operationId: api_care_plan_v1_user_prescription_create_[create_prescription]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/care-plan/v1/user/{user_id}/prescriptions
  method: get
  operationId: api_care_plan_v1_user_prescriptions_retrieve_[retrieve_prescriptions]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/cds/v1/user/{user_id}/pregnancy
  method: post
  operationId: api_cds_v1_user_pregnancy_create_[update_pregnancy_info]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/firmware-bank/archive
  method: post
  operationId: api_extensions_firmware_bank_archive_create_[archive_firmware]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/firmware-bank/list
  method: get
  operationId: api_extensions_firmware_bank_list_retrieve_[retrieve_firmware_updates]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/firmware-bank/upload
  method: post
  operationId: api_extensions_firmware_bank_upload_create_[upload_firmware]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/template-bank/create
  method: post
  operationId: api_extensions_template_bank_create_create_[shared_templates_bank_create]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/template-bank/import
  method: post
  operationId: api_extensions_template_bank_import_create_[import_template_deployment_config]
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/template-bank/list
  method: get
  operationId: api_extensions_template_bank_list_retrieve_[shared_templates_bank_list]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/template-bank/remove
  method: post
  operationId: api_extensions_template_bank_remove_create_[remove_template_deployment_config]
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/admin/deployment/{deployment_id}/demo-url
  method: get
  operationId: api_extensions_v1_admin_deployment_demo_url_retrieve_[get_demo_user_url]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/admin/deployment/{deployment_id}/reset-demo-user
  method: post
  operationId: api_extensions_v1_admin_deployment_reset_demo_user_create_[reset_demo_user_url]
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /api/extensions/v1/admin/invites
  method: get
  operationId: api_extensions_v1_admin_invites_retrieve_[retrieve_invites]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/admin/invites
  method: post
  operationId: api_extensions_v1_admin_invites_create_[invite]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/admin/send-invitation
  method: post
  operationId: api_extensions_v1_admin_send_invitation_create_[send_admin_invitations]
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/admin/service-account
  method: post
  operationId: api_extensions_v1_admin_service_account_create_[generate_service_account_api_key]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/admin/service-account
  method: delete
  operationId: api_extensions_v1_admin_service_account_destroy_[delete_user_service_account]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/admin/staff
  method: get
  operationId: api_extensions_v1_admin_staff_retrieve_[search_staff]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/assets
  method: post
  operationId: api_extensions_v1_assets_create_[create_content]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/assets/{content_id}
  method: get
  operationId: api_extensions_v1_assets_retrieve_[retrieve_content]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/assets/{content_id}
  method: put
  operationId: api_extensions_v1_assets_update_[update_content]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/assets/{content_id}
  method: delete
  operationId: api_extensions_v1_assets_destroy_[delete_content]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/assets/schema
  method: get
  operationId: api_extensions_v1_assets_schema_retrieve_[retrieve_schema]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/assets/search
  method: post
  operationId: api_extensions_v1_assets_search_create_[search_content]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/billing/log-actions
  method: get
  operationId: api_extensions_v1_billing_log_actions_retrieve_[retrieve_billing_monitoring_log_action_list]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/billing/profiles
  method: post
  operationId: api_extensions_v1_billing_profiles_create_[retrieve_billing_alerts]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/billing/user/{user_id}
  method: get
  operationId: api_extensions_v1_billing_user_retrieve_[calculate_cumulative_monitoring_time_and_cpt_code]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/billing/user/{user_id}
  method: post
  operationId: api_extensions_v1_billing_user_create_[create_billing_remote_time_tracking]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/billing/user/{user_id}/log
  method: post
  operationId: api_extensions_v1_billing_user_log_create_[create_billing_monitoring_log]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/billing/user/{user_id}/log/{log_id}
  method: put
  operationId: api_extensions_v1_billing_user_log_update_[update_billing_monitoring_log]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/billing/user/{user_id}/log/{log_id}
  method: delete
  operationId: api_extensions_v1_billing_user_log_destroy_[delete_billing_monitoring_log]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/billing/user/{user_id}/logs
  method: post
  operationId: api_extensions_v1_billing_user_logs_create_[retrieve_billing_monitoring_logs]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/billing/user/{user_id}/report
  method: get
  operationId: api_extensions_v1_billing_user_report_retrieve_[report_billing_records_for_cpt]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/cms/{collection}
  method: post
  operationId: api_extensions_v1_cms_create_[create_content]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/cms/{collection}/{content_id}
  method: get
  operationId: api_extensions_v1_cms_retrieve_[retrieve_content]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/cms/{collection}/{content_id}
  method: put
  operationId: api_extensions_v1_cms_update_[update_content]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/cms/{collection}/{content_id}
  method: delete
  operationId: api_extensions_v1_cms_destroy_[delete_content]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/cms/{collection}/{content_id}/{version}
  method: get
  operationId: api_extensions_v1_cms_retrieve_[retrieve_content_version]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/cms/{collection}/{content_id}/publish
  method: post
  operationId: api_extensions_v1_cms_publish_create_[publish_draft]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/cms/{collection}/schema
  method: get
  operationId: api_extensions_v1_cms_schema_retrieve_[retrieve_schema]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/cms/{collection}/search
  method: post
  operationId: api_extensions_v1_cms_search_create_[search_content]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/cms/{collection}/tags
  method: get
  operationId: api_extensions_v1_cms_tags_retrieve_[retrieve_collection_tags]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/cms/collections
  method: get
  operationId: api_extensions_v1_cms_collections_retrieve_[list_collections]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/dashboards/{resource_type}/{resource_id}
  method: get
  operationId: api_extensions_v1_dashboards_retrieve_[retrieve_dashboards]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/dashboards/{resource_type}/{resource_id}/dashboard/{dashboard_id}
  method: get
  operationId: api_extensions_v1_dashboards_dashboard_retrieve_[retrieve_dashboard]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/dashboards/{resource_type}/{resource_id}/gadget/{gadget_id}/data
  method: post
  operationId: api_extensions_v1_dashboards_gadget_data_create_[retrieve_gadget_data]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/dashboards/data
  method: post
  operationId: api_extensions_v1_dashboards_data_create_[multi_resource_dashboard_data]
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/dashboards/deployment/{deployment_id}/stats
  method: get
  operationId: api_extensions_v1_dashboards_deployment_stats_retrieve_[retrieve_deployment_stats]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/deployment
  method: post
  operationId: api_extensions_v1_deployment_create_[create_deployment]
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/deployment/{deployment_id}
  method: get
  operationId: api_extensions_v1_deployment_retrieve_[retrieve_deployment]
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /api/extensions/v1/deployment/{deployment_id}
  method: put
  operationId: api_extensions_v1_deployment_update_[update_deployment]
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/deployment/{deployment_id}/component-config
  method: post
  operationId: api_extensions_v1_deployment_component_config_create_[create_component_config]
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /api/extensions/v1/deployment/{deployment_id}/component-config
  method: put
  operationId: api_extensions_v1_deployment_component_config_update_[update_

# --- truncated at 32 KB (373 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/huma/refs/heads/main/agentic-access/huma-agentic-access.yml