Light Agentic Access
Light exposes 183 API operations that an AI agent could call, of which 120 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 63 read, 70 write, 45 physical, and 5 safety-critical.
5 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /v1/card-transactions/{transactionId}/reset | safety-critical | required |
| POST | /v1/contracts/{contractId}/reset | safety-critical | required |
| POST | /v1/contracts/{contractId}/terminate | safety-critical | required |
| POST | /v1/invoice-receivables/{invoiceReceivableId}/reset | safety-critical | required |
| POST | /v1/purchase-orders/{purchaseOrderId}/reset | safety-critical | required |
| POST | /v1/credit-notes/create-from-invoice-payable/{invoicePayableId} | physical | conditional |
| POST | /v1/credit-notes/{creditNoteId}/invoice-payables/{invoicePayableId} | physical | conditional |
| DELETE | /v1/credit-notes/{creditNoteId}/invoice-payables/{invoicePayableId} | physical | conditional |
| PATCH | /v1/credit-notes/{creditNoteId}/invoice-payables/{invoicePayableId} | physical | conditional |
| POST | /v1/customer-credits/{customerCreditId}/invoice-receivables/{invoiceReceivableId} | physical | conditional |
| DELETE | /v1/customer-credits/{customerCreditId}/invoice-receivables/{invoiceReceivableId} | physical | conditional |
| POST | /v1/customer-credits/{customerCreditId}/invoice-receivables/{invoiceReceivableId}/link | physical | conditional |
| POST | /v1/customer-credits/{customerCreditId}/invoice-receivables/{invoiceReceivableId}/unlink | physical | conditional |
| POST | /v1/customer-credits/{customerCreditId}/post-and-send-email | physical | conditional |
| POST | /v1/customer-credits/{customerCreditId}/submit-einvoice | physical | conditional |
| POST | /v1/invoice-payables | physical | conditional |
| PATCH | /v1/invoice-payables/{invoicePayableId} | physical | conditional |
| POST | /v1/invoice-payables/{invoicePayableId}/approve | physical | conditional |
| POST | /v1/invoice-payables/{invoicePayableId}/cancel | physical | conditional |
| PATCH | /v1/invoice-payables/{invoicePayableId}/custom-properties | physical | conditional |
| POST | /v1/invoice-payables/{invoicePayableId}/decline | physical | conditional |
| POST | /v1/invoice-payables/{invoicePayableId}/document/upload-url | physical | conditional |
| POST | /v1/invoice-payables/{invoicePayableId}/line-items | physical | conditional |
| PUT | /v1/invoice-payables/{invoicePayableId}/line-items/{lineItemId} | physical | conditional |
| DELETE | /v1/invoice-payables/{invoicePayableId}/line-items/{lineItemId} | physical | conditional |
Source
Agentic Access
generated: '2026-07-19'
method: generated
source: openapi/light-openapi-original.json
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 183
by_action_class:
acting: 120
connected: 63
by_consequence:
write: 70
read: 63
safety-critical: 5
physical: 45
human_in_the_loop_required: 5
operations:
- path: /oauth/token
method: post
operationId: getOAuthToken
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /oauth/authorize
method: get
operationId: startOAuthAuthorizationFlow
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/accounting-documents/accounting-documents
method: get
operationId: listAccountingDocuments
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/attachments
method: get
operationId: getAttachments
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/attachments
method: post
operationId: createAttachment
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/attachments/upload-url
method: post
operationId: createAttachmentUploadUrl
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/attachments/{attachmentId}
method: delete
operationId: deleteAttachment
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/attachments/{attachmentId}/document
method: get
operationId: getAttachmentDocument
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/attachments/{attachmentId}/document
method: options
operationId: getAttachmentDocumentOptions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/bank-accounts
method: get
operationId: getBankAccountsForCompany
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/bank-accounts
method: post
operationId: createBankAccount
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bank-accounts/{bankAccountId}/bank-transactions
method: get
operationId: listBankTransactions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/bank-accounts/{bankAccountId}/bank-transactions
method: post
operationId: createBankTransactions
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bank-accounts/{bankAccountId}/balance
method: get
operationId: getBankAccountBalance
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/bank-accounts/{bankAccountId}/balance
method: put
operationId: upsertBankAccountBalance
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/bank-accounts/{bankAccountId}/bank-transactions/{bankTransactionId}
method: get
operationId: getBankTransaction
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/bff/invoice-payables
method: get
operationId: listInvoicePayables
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/card-balance-accounts/{accountId}/statement
method: get
operationId: generateCardBalanceAccountStatement
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/card-balance-accounts/{accountId}
method: get
operationId: getCardBalanceAccount
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/card-balance-accounts
method: get
operationId: listCardBalanceAccounts
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/card-balance-accounts/{accountId}/total-spend
method: get
operationId: getCardBalanceAccountTotalSpend
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/card-customers/public-key
method: get
operationId: getPublicKey
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/card-transactions/batch-update
method: patch
operationId: batchUpdateCardTransactions
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/card-transactions/{cardTransactionId}/receipt-upload-url
method: post
operationId: generateUploadUrlForCardTransaction
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/card-transactions/{cardTransactionId}
method: get
operationId: getCardTransaction
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/card-transactions/{transactionId}/receipt
method: get
operationId: getAttachedCardTransactionReceiptDocument
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/card-transactions/{transactionId}/receipt
method: delete
operationId: removeReceipt
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/card-transactions/{transactionId}/receipt
method: options
operationId: getCardTransactionReceiptOptions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/card-transactions
method: get
operationId: listCardTransactions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/card-transactions/{transactionId}/post
method: post
operationId: postCardTransaction
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/card-transactions/{transactionId}/reset
method: post
operationId: resetCardTransaction
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/card-transactions/{transactionId}
method: patch
operationId: updateCardTransaction
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/card-transactions/{transactionId}/lines/{transactionLineId}
method: patch
operationId: updateCardTransactionLine
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/cards
method: get
operationId: listCards
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/cards
method: post
operationId: createCard
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/cards/{cardId}/freeze
method: post
operationId: freezeCard
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/cards/{cardId}
method: get
operationId: getCard
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/cards/{cardId}/unfreeze
method: post
operationId: unfreezeCard
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/entities
method: get
operationId: getCompanyEntities
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/companies/current
method: get
operationId: getCurrentCompany
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/contracts/{contractId}/cancel-termination
method: post
operationId: cancelContractTermination
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/contracts
method: get
operationId: listContracts
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/contracts
method: post
operationId: createContract
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/contracts/{contractId}/lines
method: post
operationId: createContractLine
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/contracts/{contractId}
method: get
operationId: getContract
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/contracts/{contractId}
method: delete
operationId: deleteContract
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/contracts/{contractId}
method: patch
operationId: updateContract
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/contracts/{contractId}/lines/{lineId}
method: delete
operationId: deleteContractLine
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/contracts/{contractId}/lines/{lineId}
method: patch
operationId: updateContractLine
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/contracts/{contractId}/generate-document-upload-url
method: post
operationId: generateContractDocumentUploadUrl
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/contracts/{contractId}/publish
method: post
operationId: publishContract
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/contracts/{contractId}/renew
method: post
operationId: renewContract
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/contracts/{contractId}/reset
method: post
operationId: resetContract
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/contracts/{contractId}/terminate
method: post
operationId: terminateContract
x-agentic-access:
action-class: acting
consequence: safety-critical
subject: required
audience: null
token:
max-ttl: 120
exchange: true
purpose-required: true
proof-of-possession: true
escalation:
human-in-the-loop: required
audit: required
- path: /v1/credit-notes/{creditNoteId}/archive
method: post
operationId: archiveCreditNote
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/credit-notes
method: get
operationId: listCreditNotes
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/credit-notes
method: post
operationId: createCreditNote
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/credit-notes/{creditNoteId}/lines
method: post
operationId: createCreditNoteLine
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/credit-notes/create-from-invoice-payable/{invoicePayableId}
method: post
operationId: createCreditNoteFromInvoicePayable
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/credit-notes/{creditNoteId}/lines/{lineId}
method: delete
operationId: deleteCreditNoteLine
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/credit-notes/{creditNoteId}/lines/{lineId}
method: patch
operationId: updateCreditNoteLine
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/credit-notes/{creditNoteId}
method: get
operationId: getCreditNote
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/credit-notes/{creditNoteId}
method: patch
operationId: updateCreditNote
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/credit-notes/{creditNoteId}/document
method: get
operationId: getAttachedDocument
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/credit-notes/{creditNoteId}/invoice-payables
method: get
operationId: getLinkedInvoicePayables
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/credit-notes/{creditNoteId}/invoice-payables/{invoicePayableId}
method: post
operationId: linkCreditNoteToInvoicePayable
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/credit-notes/{creditNoteId}/invoice-payables/{invoicePayableId}
method: delete
operationId: unlinkFromInvoicePayable
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/credit-notes/{creditNoteId}/invoice-payables/{invoicePayableId}
method: patch
operationId: updateLinkedInvoicePayable
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/credit-notes/{creditNoteId}/post
method: post
operationId: postCreditNote
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/custom-properties/groups/{groupId}/values
method: get
operationId: listPaginatedCustomPropertyValues
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/custom-properties/groups/{groupId}/values
method: post
operationId: createCustomPropertyValue
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/custom-properties/groups/{groupId}/values/{valueId}
method: get
operationId: getCustomPropertyValueById
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/custom-properties/groups/{groupId}/values/{valueId}
method: delete
operationId: deleteCustomPropertyValue
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/custom-properties/groups/{groupId}/values/{valueId}
method: patch
operationId: updateCustomPropertyValue
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/custom-properties/groups/{groupId}
method: get
operationId: getCustomPropertyGroupById
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/custom-properties/groups
method: get
operationId: listPaginatedCustomPropertyGroups
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/customer-credits/{customerCreditId}/archive
method: post
operationId: archiveCustomerCredit
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customer-credits
method: get
operationId: listCustomerCredits
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/customer-credits
method: post
operationId: createCustomerCredit
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customer-credits/{customerCreditId}/lines
method: post
operationId: createCustomerCreditLine
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customer-credits/{customerCreditId}/lines/{lineId}
method: delete
operationId: deleteCustomerCreditLine
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customer-credits/{customerCreditId}/lines/{lineId}
method: patch
operationId: updateCustomerCreditLine
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customer-credits/{customerCreditId}
method: get
operationId: getCustomerCredit
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/customer-credits/{customerCreditId}
method: patch
operationId: updateCustomerCredit
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customer-credits/{customerCreditId}/invoice-receivables/{invoiceReceivableId}/link
method: post
operationId: linkCustomerCreditToInvoice
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customer-credits/{customerCreditId}/invoice-receivables/{invoiceReceivableId}
method: post
operationId: linkCustomerCredit
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customer-credits/{customerCreditId}/invoice-receivables/{invoiceReceivableId}
method: delete
operationId: unlinkCustomerCredit
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customer-credits/{customerCreditId}/post-and-send-email
method: post
operationId: postAndSendCustomerCredit
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customer-credits/{customerCreditId}/post
method: post
operationId: postCustomerCredit
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customer-credits/{customerCreditId}/submit-einvoice
method: post
operationId: submitCustomerCreditEInvoice
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customer-credits/{customerCreditId}/unarchive
method: post
operationId: unarchiveCustomerCredit
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customer-credits/{customerCreditId}/invoice-receivables/{invoiceReceivableId}/unlink
method: post
operationId: unlinkCustomerCreditFromInvoice
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customers/{customerId}/activate
method: post
operationId: activateCustomer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customers/{customerId}/archive
method: post
operationId: archiveCustomer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customers
method: get
operationId: listCustomers
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/customers
method: post
operationId: createCustomer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/customers/{customerId}
method: get
operationId: getCustomerById
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/customers/{customerId}
method: patch
operationId: updateCustomer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /v1/exchange/rates/{base}/{target}
method: get
operationId: getRate
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/exchange/rates/{currency}
method: get
operationId: getRates
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /v1/expenses/{expenseId}/cancel
method: post
operationId: cancelExpense
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
to
# --- truncated at 32 KB (60 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/light/refs/heads/main/agentic-access/light-agentic-access.yml